Merge main into msl-auth

Author: automatic-pr-updater[bot]

.flake8

@@ -44,7 +44,8 @@ jobs:
 
             - name: Run Flake8
               # TODO: Run from locked dependencies, once project's Python version has been updated to 3.14
-              run: uvx --python 3.14 --with flake8-carrot>=0.1.4 -- flake8
+              run: uvx --python 3.14 --with flake8-carrot>=0.1.4 --with flake8-pyproject>=1.2 --
+                flake8
 
     mypy:  # yamllint disable-line rule:key-ordering
         env:
@@ -154,9 +155,9 @@ jobs:
             - name: Save pre-commit Checks Which Require Skipping
               run: |
                 if [[ "${{github.event_name}}" == "push" && "${{github.ref_name}}" == "${{github.event.repository.default_branch}}" ]]; then
-                    echo "SKIP=check-github-workflows,ruff-check,uv-lock,gitlint-ci" >> $GITHUB_ENV
+                    echo "SKIP=check-github-workflows,flake8,ruff-check,uv-lock,gitlint-ci" >> $GITHUB_ENV
                 else
-                    echo "SKIP=check-github-workflows,ruff,uv-lock" >> $GITHUB_ENV
+                    echo "SKIP=check-github-workflows,flake8,ruff-check,uv-lock" >> $GITHUB_ENV
                 fi
 
             - name: Run pre-commit

.github/workflows/check-build-deploy.yaml

@@ -43,6 +43,11 @@ sort = "cover"
 [tool.django-stubs]
 django_settings_module = "db._settings"
 
+[tool.flake8]
+select = ["CAR", "TXB"]
+extend_exclude = ["**/migrations/", ".venv/"]
+require_plugins = ["flake8-carrot"]
+
 [tool.mypy]
 check_untyped_defs = true
 disallow_any_decorated = true