fix ci dependency and tune security scan gate #34

	name: Deploy Documentation

	on:
	push:
	branches:
	- main
	workflow_dispatch:

	env:
	FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

	permissions:
	contents: read
	pages: write
	id-token: write

	concurrency:
	group: docs-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

	- name: Configure GitHub Pages
	uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
	with:
	python-version: "3.12"

	- name: Install Poetry
	uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a
	with:
	version: "2.2.1"
	virtualenvs-create: true
	virtualenvs-in-project: true

	- name: Cache dependencies
	uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7
	with:
	path: .venv
	key: docs-venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}
	restore-keys: \|
	docs-venv-${{ runner.os }}-

	- name: Install dependencies
	run: poetry install --no-interaction

	- name: Build docs
	run: poetry run mkdocs build --strict

	- name: Upload GitHub Pages artifact
	uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
	with:
	path: site

	deploy:
	runs-on: ubuntu-latest
	needs: build
	environment:
	name: github-pages
	url: ${{ steps.deployment.outputs.page_url }}
	steps:
	- name: Deploy to GitHub Pages
	id: deployment
	uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

Provide feedback