Bump immutable from 4.3.7 to 4.3.8 #10988

	name: python

	on:
	push:
	branches: [master]
	pull_request:
	branches: [master]

	concurrency:
	cancel-in-progress: true
	group: ${{ github.workflow }}-${{ github.ref_protected && github.run_id \|\| github.event.pull_request.number }}

	permissions: # added using https://github.com/step-security/secure-workflows
	contents: read

	jobs:
	tox:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.12"]
	steps:
	# See https://docs.stepsecurity.io/harden-runner/getting-started/ for instructions on
	# configuring harden-runner and identifying allowed endpoints.
	- name: Harden Runner
	uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	*.actions.githubusercontent.com:443
	files.pythonhosted.org:443
	github.com:443
	pypi.org:443
	- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	python -m pip install pip==24.2
	pip install tox==4.26.0 tox-gh-actions==3.5.0
	- name: Test with tox
	run: tox

Provide feedback