Merge branch '3.15' into backport-20d5e67-3.15

Author: ZeroIntensity

.github/CODEOWNERS

@@ -624,6 +624,12 @@ Lib/test/test_unittest/testmock/ @cjw296
 # Weakref
 **/*weakref*                  @kumaraditya303
 
+# Zlib
+Doc/library/zlib.rst          @StanFromIreland
+Lib/compression/zlib.py       @StanFromIreland
+Lib/test/test_zlib.py         @StanFromIreland
+Modules/_zlibmodule.c         @StanFromIreland
+
 # Zipfile.Path
 Lib/test/test_zipfile/_path/  @jaraco
 Lib/zipfile/_path/            @jaraco

.github/workflows/mypy.yml

@@ -69,7 +69,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: "3.15"
           activate-environment: true

.github/workflows/reusable-cifuzz.yml

@@ -43,7 +43,7 @@ jobs:
           path: ./out/artifacts
       - name: Upload SARIF
         if: always() && steps.build.outcome == 'success'
-        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: cifuzz-sarif/results.sarif
           checkout_path: cifuzz-sarif

Doc/Makefile

@@ -189,12 +189,13 @@ venv:
 .PHONY: lock
 lock:
 # Dependencies have a 14 day cooldown period to mitigate supply chain attacks,
-# except for sphinx_linklint and python-docs-theme, which are maintained by
+# except for blurb, python-docs-theme and sphinx_linklint, which are maintained by
 # core team members.
 	$(UV) pip compile requirements.txt \
 		--upgrade --exclude-newer P14D \
-		--exclude-newer-package sphinx_linklint=PT0S \
+		--exclude-newer-package blurb=PT0S \
 		--exclude-newer-package python-docs-theme=PT0S \
+		--exclude-newer-package sphinx_linklint=PT0S \
 		--no-cache --output-file $(REQUIREMENTS) \
 		--python-version 3.12 --universal \
 		--custom-compile-command="make lock"