fix(add-ons): perform post-update with repository lock held #5728

	# Copyright © Michal Čihař <[email protected]>
	#
	# SPDX-License-Identifier: CC0-1.0

	name: mypy

	on:
	push:
	branches-ignore:
	- deepsource-fix-**
	- renovate/**
	- weblate
	pull_request:

	permissions:
	contents: read

	jobs:
	mypy:
	runs-on: ubuntu-24.04

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 2
	- name: Get changed files
	if: github.event_name == 'pull_request'
	id: changed-files
	uses: tj-actions/changed-files@v45
	with:
	files: '**.py'
	- name: List all changed files
	if: github.event_name == 'pull_request'
	env:
	ALL_CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}
	run: \|
	for file in ${ALL_CHANGED_FILES}; do
	echo "$file" >> changed-files.txt
	done
	if [ ! -f changed-files.txt ] ; then
	echo "No changed files!"
	else
	cat changed-files.txt
	fi

	- name: Install apt dependencies
	run: sudo ./ci/apt-install
	- uses: astral-sh/setup-uv@v3
	with:
	enable-cache: true
	cache-dependency-glob: ''
	cache-suffix: '3.12'
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'
	- name: Install dependencies
	run: ./ci/pip-install mypy

	- name: Run mypy
	run: mypy --show-column-numbers weblate > mypy.log
	# Temporary hack until we have this fully working
	continue-on-error: true
	- name: Report mypy
	if: always()
	run: \|
	echo "::add-matcher::.github/matchers/mypy.json"
	if [ -f changed-files.txt ] ; then
	grep -F -f changed-files.txt mypy.log
	else
	cat mypy.log
	fi
	echo "::remove-matcher owner=mypy::"

Provide feedback