[UPDATE] Merge branches 'dependabot/github_actions/dot-github/workflows/master/actions/checkout-5' and 'feature-flake8-87'

* dependabot/github_actions/dot-github/workflows/master/actions/checkout-5:
  [UPDATE] Version bump for GHA checkout from v4 to v5
  [UPDATE] (deps): Bump actions/checkout from 4 to 5 in /.github/workflows

* feature-flake8-87:
  [STYLE] Minor improvement for code style
  [STYLE] Suppressed some minor noisy linter alerts.
  [PATCH] fixup for PR #89 regressions and linting
  [PATCH] Apply changes from review (- WIP PR #89 -)
  [UPDATE] Version bump for flake8-cq to v2.0
  [UPDATE] version bump for flake8-cq
  [FEATURE] add flak8-cq to codeql-analysis.yml

Author: reactive-firewall

.circleci/config.yml

@@ -33,7 +33,7 @@ commands:
 parameters:
   python-version:
     type: string
-    default: "3.12"
+    default: "3.13"
 
 jobs:
   build:

.github/workflows/codeql-analysis.yml

@@ -13,15 +13,15 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ master, stable ]
+    branches: [ master, stable, feature-flake8-87 ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ stable ]
   schedule:
     - cron: '17 5 * * 1'
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions: {}
 
 jobs:
   analyze:
@@ -71,6 +71,13 @@ jobs:
     #- run: |
     #   make bootstrap
     #   make release
+    - name: Flake8 Scan
+      uses: reactive-firewall/flake8-cq@v2  # v2.0
+      with:  # optional arguments
+        config: '.flake8.ini'
+        match: '**/*.py'
+        publish-artifacts: false
+      if: ${{ success() }}
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3