fix(ci): resolve strict-delta assertion and setup-python pin

.github/workflows/sec-audit.yml

@@ -448,7 +448,7 @@ jobs:
             - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
             - name: Setup Python 3.11
-              uses: actions/setup-python@42375524cb8536ba1b604a2b818519a0e9745034 # v5
+              uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
               with:
                   python-version: "3.11"
 

src/tools/shell.rs

@@ -745,7 +745,10 @@ mod tests {
             .unwrap();
         assert!(!result.success);
         assert!(
-            result.error.as_deref().map(|msg| !msg.trim().is_empty()) == Some(true),
+            result
+                .error
+                .as_deref()
+                .is_some_and(|msg| !msg.trim().is_empty()),
             "expected non-empty stderr in error field"
         );
     }