topgrade 17.4.0

Upgrade all the things
name: 'Lint PR'

on:
  pull_request_target: # zizmor: ignore[dangerous-triggers] this is the only way, and we're not running user code
    types:
      - opened
      - edited
      - reopened
      - synchronize

permissions: { }

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  main:
    name: Validate PR title # zizmor: ignore[concurrency-limits] see above
    runs-on: ubuntu-latest
    permissions:
      pull-requests: read # amannn/action-semantic-pull-request
    steps:
      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}