Fix 2 CodeQL alerts: pin pypi-publish action SHA + fix Svelte regex #32

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.11", "3.12"]

	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install dependencies
	run: pip install -e ".[dev]"

	- name: Run tests
	run: pytest --tb=short -q

Provide feedback