build(deps): bump the pinned-test-dependencies group across 3 directories with 3 updates (#666)

* build(deps): bump the pinned-test-dependencies group across 3 directories with 3 updates

Bumps the pinned-test-dependencies group with 1 update in the /actions directory: [zizmor](https://github.com/zizmorcore/zizmor).
Bumps the pinned-test-dependencies group with 2 updates in the /repo directory: [mypy](https://github.com/python/mypy) and [ruff](https://github.com/astral-sh/ruff).
Bumps the pinned-test-dependencies group with 2 updates in the /signer directory: [mypy](https://github.com/python/mypy) and [ruff](https://github.com/astral-sh/ruff).


Updates `zizmor` from 1.12.1 to 1.13.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.12.1...v1.13.0)

Updates `mypy` from 1.17.1 to 1.18.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.1...v1.18.1)

Updates `ruff` from 0.12.12 to 0.13.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.12...0.13.0)

Updates `mypy` from 1.17.1 to 1.18.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.1...v1.18.1)

Updates `ruff` from 0.12.12 to 0.13.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.12...0.13.0)

---
updated-dependencies:
- dependency-name: zizmor
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pinned-test-dependencies
- dependency-name: mypy
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pinned-test-dependencies
- dependency-name: ruff
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pinned-test-dependencies
- dependency-name: mypy
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pinned-test-dependencies
- dependency-name: ruff
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pinned-test-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* lint fixes

* Mark a variable unused
* Don't run zizmor in pedantic mode: it's a bit much

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jussi Kukkonen <[email protected]>

Author: dependabot[bot]

.github/workflows/actions-lint.yml

@@ -35,4 +35,4 @@ jobs:
       run: python -m pip install -r actions/lint-requirements.txt
 
     - name: Run zizmor
-      run: zizmor --pedantic .
+      run: zizmor .

actions/lint-requirements.txt

@@ -1 +1 @@
-zizmor == 1.12.1
+zizmor == 1.13.0

repo/pyproject.toml

@@ -31,8 +31,8 @@ tuf-on-ci-update-targets = "tuf_on_ci:update_targets"
 
 [project.optional-dependencies]
 lint = [
-  "mypy == 1.17.1",
-  "ruff == 0.12.12",
+  "mypy == 1.18.1",
+  "ruff == 0.13.0",
 ]
 
 [tool.hatch.version]

repo/tuf_on_ci/_repository.py

@@ -574,7 +574,7 @@ def build(self, metadata_path: str, artifact_path: str | None):
             if artifact_path:
                 # copy artifacts
                 for target in role.targets.values():
-                    rdir, sep, name = target.path.rpartition("/")
+                    rdir, _, name = target.path.rpartition("/")
                     os.makedirs(os.path.join(artifact_path, rdir), exist_ok=True)
                     src_path = os.path.join(self._dir, "..", "targets", rdir, name)
                     for hash in target.hashes.values():

signer/pyproject.toml

@@ -29,8 +29,8 @@ tuf-on-ci-sign = "tuf_on_ci_sign:sign"
 
 [project.optional-dependencies]
 lint = [
-  "mypy == 1.17.1",
-  "ruff == 0.12.12",
+  "mypy == 1.18.1",
+  "ruff == 0.13.0",
 ]
 
 [tool.hatch.version]

tox.ini

@@ -28,7 +28,7 @@ description = Actions Linting
 labels = lint
 deps = -r actions/lint-requirements.txt
 commands =
-    zizmor --pedantic .
+    zizmor .
 
 [testenv:test-repo]
 description = Repository unit tests