christianmanivong ba133d9de3 fix(ci): audit the package's dependencies, not the tool venv ...

The device-types pilot failed pip-audit on pip 25.0.1 of the venv that also
held bandit and pip-audit. The package now goes into a venv of its own with
a current pip; its frozen set (URL installs left out) is what pip-audit
checks.

2026-10-22 19:14:55 +02:00

..

workflows

fix(ci): audit the package's dependencies, not the tool venv

2026-10-22 19:14:55 +02:00