feat: batch update to SOTA Python

.github/DISCUSSION_TEMPLATE/announcements.yml

@@ -11,12 +11,14 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this announcement, you agree to follow our
         [Code of Conduct](https://github.com/open-nudge/opentemplate/blob/main/CODE_OF_CONDUCT.md)
       # yamllint enable rule:line-length
       options:
+        # enq: links will be generated and likely too long (over 80 chars)
         # yamllint disable rule:line-length
         - label: >
             I agree to follow this project's

.github/DISCUSSION_TEMPLATE/general.yml

@@ -16,6 +16,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this discussion, you agree to follow this project's

.github/DISCUSSION_TEMPLATE/ideas.yml

@@ -25,6 +25,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this idea, you agree to follow this project's

.github/DISCUSSION_TEMPLATE/q-a.yml

@@ -14,6 +14,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this question, you agree to follow this project's

.github/DISCUSSION_TEMPLATE/show-and-tell.yml

@@ -14,6 +14,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this announcement, you agree to follow this project's

.github/ISSUE_TEMPLATE/adopters.yml

@@ -19,6 +19,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this issue, you agree to follow this project's
@@ -86,6 +87,7 @@ body:
     id: "contributor"
     attributes:
       label: "Who Will Add This Adopter?"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         File to edit: [ADOPTERS.md](https://github.com/open-nudge/opentemplate/blob/main/ADOPTERS.md)

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -18,6 +18,7 @@ body:
   - type: "checkboxes"
     id: "terms"
     attributes:
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       label: "Terms"
       description: >

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -19,6 +19,7 @@ body:
     id: "terms"
     attributes:
       label: "Terms"
+      # enq: links will be generated and likely too long (over 80 chars)
       # yamllint disable rule:line-length
       description: >
         By submitting this issue, you agree to follow this project's

.github/PULL_REQUEST_TEMPLATE.md

@@ -5,7 +5,7 @@ SPDX-FileContributor: szymonmaszke <github@maszke.co>
 SPDX-License-Identifier: Apache-2.0
 -->
 
-<!--- pyml disable-next-line first-line-heading,first-line-h1-->
+<!--- pyml disable-next-line first-line-heading,first-line-h1 -->
 
 ## Checklist
 

.github/actions/git-setup/action.yml

@@ -12,6 +12,7 @@ runs:
   steps:
     - name: "Setup git"
       shell: "bash"
+      # enq: single lines more readable
       # yamllint disable rule:line-length
       run: |
         git config --global user.email github-actions[bot]@users.noreply.github.com

.github/actions/pdm-setup/action.yml

@@ -72,6 +72,7 @@ runs:
           pytest
           json
           toml
+      # enq: multiline bash more readable without indentation
       # yamllint disable rule:indentation
       run: |
         if [ -z "${GROUP}" ]; then
@@ -96,6 +97,7 @@ runs:
     - name: "Add cache info to pdm.lock"
       shell: "bash"
       env:
+        # enq: complex multiline expression more readable with indentation
         # yamllint disable rule:indentation
         CACHE_CONTENT: >-
           ${{
@@ -115,6 +117,7 @@ runs:
         echo "::info:: Cache type '${CACHE_CONTENT}'"
     - name: "Setup Caching PDM"
       id: "setup-pdm"
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
       uses: "pdm-project/setup-pdm@94a823180e06fcde4ad29308721954a521c96ed0"  # v4.4
       # yamllint enable rule:line-length
@@ -129,7 +132,9 @@ runs:
       run: >
         mv "${TEMPORARY}/pdm.lock" ./
     - name: "PDM Compatibility"
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
+      # enq: unpinned as it allows projects to use the latest
       uses: "open-nudge/opentemplate/.github/actions/pdm-compatibility@main" # zizmor: ignore[unpinned-uses]
       # yamllint enable rule:line-length
 
@@ -159,7 +164,9 @@ runs:
         pdm install -G:all --no-editable
 
     - name: "PDM Compatibility"
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
+      # enq: unpinned as it allows projects to use the latest
       uses: "open-nudge/opentemplate/.github/actions/pdm-compatibility@main" # zizmor: ignore[unpinned-uses]
       # yamllint enable rule:line-length
       with:

.github/actions/release-sbom-setup/action.yml

@@ -46,6 +46,8 @@ runs:
         echo "sbom=${SBOM_DIRECTORY}/${SBOM}" >> "${GITHUB_OUTPUT}"
       # See here for more information about the sum:
       # https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#provenance-for-artifacts-built-across-multiple-operating-systems
+      # enq: env vars do not get expanded properly otherwise
+      # enq: action is used internally only, but proceed with caution!
     - name: "Hash Files (Linux/MacOS)" # zizmor: ignore[template-injection]
       if: >
         runner.os != 'Windows'
@@ -54,6 +56,8 @@ runs:
         OUTPUT_FILE: "sbom-${{ github.sha }}/checksums.txt"
       run: >
         shasum -a 256 ${{ inputs.files }} > "${OUTPUT_FILE}"
+      # enq: env vars do not get expanded properly otherwise
+      # enq: action is used internally only, but proceed with caution!
     - name: "Hash Files (Windows)" # zizmor: ignore[template-injection]
       if: >
         runner.os == 'Windows'

.github/actions/sarif-upload/action.yml

@@ -26,6 +26,7 @@ runs:
   using: "composite"
   steps:
     - name: "Upload artifact"
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
       uses: "actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02" # v4.6.2
       # yamllint enable rule:line-length
@@ -41,6 +42,7 @@ runs:
         inputs.sarif == 'true'
       # SARIF upload may fail if there is no integration enabled
       continue-on-error: true
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
       uses: "github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e" # v3.28.19
       # yamllint enable rule:line-length

.github/actions/template-setup/action.yml

@@ -105,6 +105,7 @@ runs:
         https://raw.githubusercontent.com/github/gitignore/main/Python.gitignore
         >> .gitignore
     - name: "Setup PDM"
+      # enq: hash with name and version always longer than 80 chars
       # yamllint disable rule:line-length
       uses: "pdm-project/setup-pdm@94a823180e06fcde4ad29308721954a521c96ed0"  # v4.4
       # yamllint enable rule:line-length