chore(deps): migrate to pyproject.toml #63

	# SPDX-FileCopyrightText: 2026 PythonWoods <dev@pythonwoods.dev>
	# SPDX-License-Identifier: Apache-2.0

	name: Zenzic Action Compliance

	on:
	pull_request:
	types: [opened, edited, synchronize, reopened]

	permissions:
	contents: read
	pull-requests: read

	jobs:
	pr-title:
	name: Lint PR Title
	runs-on: ubuntu-latest
	steps:
	- name: Validate PR Title
	uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	dco:
	name: Check DCO
	runs-on: ubuntu-latest
	steps:
	- name: Checkout Repository
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 0

	- name: Verify Signed-off-by
	run: \|
	BASE_SHA="${{ github.event.pull_request.base.sha }}"
	HEAD_SHA="${{ github.event.pull_request.head.sha }}"

	echo "Checking commits between $BASE_SHA and $HEAD_SHA"

	# Check each commit in the range
	git log --no-merges --format='%H' "$BASE_SHA..$HEAD_SHA" \| while read -r commit_sha; do
	commit_msg=$(git log -1 --format='%B' "$commit_sha")
	if ! echo "$commit_msg" \| grep -q "^Signed-off-by:"; then
	echo "::error::Commit $commit_sha is missing 'Signed-off-by:' sign-off."
	exit 1
	fi
	done
	echo "All commits have valid DCO sign-offs."

Provide feedback