build(deps): bump hermes-labs-ai/quick-gate-python from 671e8db37c2bd124d4b74653f8c81945d1592a8f to 39b27c74fa5934c21d4068f3aee06c766e8899ba

[dependabot]

Bumps hermes-labs-ai/quick-gate-python from 671e8db to 39b27c7.

Changelog

Sourced from hermes-labs-ai/quick-gate-python's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Added tests/test_docs_action_pin.py, a regression contract asserting that every documented root-action reference is a 40-character commit SHA and that all documented pins agree.

Fixed

• Corrected the root-action pin in llms.txt, which still referenced the superseded 1a70edc commit after the audited pin moved to 671e8db.
• Replaced the "replace it with an immutable release tag when one exists" guidance in README.md, SECURITY.md, and llms.txt. The published v0.1.0, v0.1.1, and v0.2.0 tags predate the root action.yml, so following that guidance produced a workflow that cannot resolve the action.

[0.2.0] - 2026-08-08

Added

• Added the side-effect-free pygate.api.evaluate primitive with argv-safe command execution, bounded timeouts, capped output, snapshot binding, and the gate-result/v1 contract.
• Added explicit CLI artifact output via --output-dir; pygate run without it emits JSON without creating worktree state.

Changed

• Standardized the cross-engine discriminator as "schema": "gate-result/v1" and aligned result/check status enums with QuickGate.js and HermesGate.
• Made --changed-files optional for whole-project runs and made the composite action install its checked-out source instead of a registry version.

[0.1.2] - 2026-05-30

Changed

• Updated project metadata: copyright holder, maintainer contact, and citation files.

[0.1.1] - 2026-03-02

Fixed

• Standardized copyright to Hermes Labs in LICENSE
• Fixed stale GitHub URLs (hermes-labs-ai/pygate → hermes-labs-ai/quick-gate-python)
• Added PyPI version badge to README

[0.1.0] - 2026-02-23

... (truncated)

Commits

• 39b27c7 docs: correct root-action pin guidance and add a pin regression contract (#33)
• e596cf1 ci: refresh audited root action pin (#32)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)