v2.4.5

🐛 Bug Fixes 🐛

• Fix(hooks): Support macOS awk in manifest-guard @ModeSevenIndustrialSolutions (#480)
• Fix(deps): Bump certifi to 2026.10.19 @lf-releng-code-monkey-bot[bot] (#497)
• Fix: Push Gerrit change to the PR base branch @askb (#501)

🔧 Maintenance 🔧

• Chore: Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 @dependabot[bot] (#483)
• Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.1 to 0.4.3 @dependabot[bot] (#484)
• Chore: Bump release-drafter/release-drafter from 7.9.0 to 7.10.0 @dependabot[bot] (#485)
• Chore: Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#486)
• Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test-release.yaml from 0.5.0 to 0.5.1 @dependabot[bot] (#487)
• Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#488)
• Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test.yaml from 0.5.0 to 0.5.1 @dependabot[bot] (#489)
• Chore: Bump ruff from 0.16.10 to 0.17.0 @dependabot[bot] (#492)
• Build: Run mypy from uv.lock, not hook pins @lf-releng-code-monkey-bot[bot] (#494)
• Chore: Bump typer from 0.27.2 to 0.27.3 @dependabot[bot] (#491)
• Chore: Bump types-requests from 2.33.0.20260906 to 2.33.0.20261006 @dependabot[bot] (#490)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#495)
• Chore: Bump lfreleng-actions/pypi-publish-action from 0.2.0 to 0.2.1 @dependabot[bot] (#498)
• Chore: Bump pytest-mock from 3.16.0 to 3.17.0 @dependabot[bot] (#499)
• Chore: Bump ruff from 0.17.0 to 0.17.1 @dependabot[bot] (#500)

🎓 Code Quality 🎓

• CI: Move Scorecard to security-workflows lane @ModeSevenIndustrialSolutions (#481)

Links

• Submit bugs/feature requests