ci: pin gitpython for the semantic-release dry run

Author: bluetoothbot

.github/workflows/ci.yml

@@ -171,10 +171,18 @@ jobs:
           BRANCH: ${{ github.head_ref || github.ref_name }}
         run: git switch -C "$BRANCH"
 
-      - name: Test release
-        uses: python-semantic-release/python-semantic-release@350c48fcb3ffcdfd2e0a235206bc2ecea6b69df0 # v10.5.3
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
         with:
-          no_operation_mode: true
+          python-version: "3.12"
+
+      # Run PSR from pip rather than its container action so GitPython can be
+      # pinned: 3.1.60 dropped Actor.name_email_regex, which PSR 10.5.3 reads
+      # on every config load.
+      - name: Install python-semantic-release
+        run: pip install "python-semantic-release==10.5.3" "gitpython<3.1.60"
+
+      - name: Test release
+        run: semantic-release -v --noop version
 
   # Real release, only on master. The release environment and write/OIDC
   # permissions are scoped to this job so they never apply to PR runs.