boop-website.yml:14: dangerous use of GitHub App tokens: app token inherits blanket installation permissions

boop-website.yml:20: dangerous use of GitHub App tokens: token granted access to all repositories for this owner's app installation

build.yml:12: overly broad permissions: default permissions used due to no permissions: block

build.yml:16: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

boop-website.yml:11: overly broad permissions: default permissions used due to no permissions: block

No file matched to [/home/runner/work/documentation/documentation/**/*requirements*.txt,/home/runner/work/documentation/documentation/**/*requirements*.in,/home/runner/work/documentation/documentation/**/*constraints*.txt,/home/runner/work/documentation/documentation/**/*constraints*.in,/home/runner/work/documentation/documentation/**/pyproject.toml,/home/runner/work/documentation/documentation/**/uv.lock,/home/runner/work/documentation/documentation/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"