v4.1.2

[github-actions[bot]]

Changelog

🐛 Bug Fixes

• fix: prevent dev dependency downloads at runtime @zkoppert (fix: prevent dev dependency downloads at runtime #704)
• fix: cast gh_app_id to string for JWT encoding compatibility @jmeridth (fix: cast gh_app_id to string for JWT encoding compatibility #705)
• fix: tighten workflow permissions, add security hardening, and fix uv tool invocations @jmeridth (fix: tighten workflow permissions, add security hardening, and fix uv tool invocations #702)

🧰 Maintenance

• chore(deps): bump numpy from 2.4.2 to 2.4.3 in the dependencies group @dependabot[bot] (chore(deps): bump numpy from 2.4.2 to 2.4.3 in the dependencies group #708)
• chore(deps): bump kenyonj/mark-ready-when-ready from 33b13c51ba23786efb933701ef253352baf05bdd to b6279addd55dd13208965a9eff24b2cf1989a8ef @dependabot[bot] (chore(deps): bump kenyonj/mark-ready-when-ready from 33b13c51ba23786efb933701ef253352baf05bdd to b6279addd55dd13208965a9eff24b2cf1989a8ef #707)
• chore(deps): bump python from 6a27522 to 584e89d @dependabot[bot] (chore(deps): bump python from 6a27522 to 584e89d #706)

See details of all code changes since previous release