Clean up python-tests workflow

Use a job to output global settings that can be reused in all other
jobs. This will reduce the wear-and-tear of updating the imported
action versions.

Also adds python 3.14 to matrix.

Author: Preocts

.github/workflows/python-tests.yml

@@ -1,9 +1,4 @@
 name: "python tests and coverage"
-# Uses:
-# https://github.com/actions/setup-python : 0b93645e9fea7318ecaed2b359559ac225c90a2b
-# https://github.com/actions/checkout : 11bd71901bbe5b1630ceea73d27597364c9af683
-# https://github.com/actions/download-artifact : fa0a91b85d4f404e444e00e005971372dc801d16
-# https://github.com/actions/upload-artifact : 6f51ac03b9356f520e9adb1b1b7802705f340c2b
 
 on:
   pull_request:
@@ -14,8 +9,19 @@ on:
       - "main"
 
 jobs:
+  settings:
+    runs-on: "ubuntu-latest"
+    name: "Define workflow settings"
+    outputs:
+      default-python-version: "3.12"
+      gha-setup-python: "actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b"
+      gha-checkout: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
+      gha-download-artifact: "actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16"
+      gha-upload-artifact: "actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b"
+
   run-tests-and-coverage:
     name: "Run pytest with coverage."
+    needs: ["settings"]
     runs-on: "${{ matrix.os }}"
     strategy:
       fail-fast: false
@@ -30,13 +36,14 @@ jobs:
           - "3.11"
           - "3.12"
           - "3.13"
+          - "3.14"
 
     steps:
       - name: "Repo checkout"
-        uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
+        uses: ${{ needs.settings.outputs.gha-checkout }}
 
       - name: "Set up Python ${{ matrix.python-version }}"
-        uses: "actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b"
+        uses: ${{ needs.settings.outputs.gha-setup-python }}
         with:
           python-version: "${{ matrix.python-version }}"
           allow-prereleases: true
@@ -50,7 +57,7 @@ jobs:
           nox --session test -- partial-coverage
 
       - name: "Save coverage artifact"
-        uses: "actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b"
+        uses: ${{ needs.settings.outputs.gha-upload-artifact }}
         with:
           name: "coverage-artifact-${{ matrix.os}}-${{ matrix.python-version}}"
           path: ".coverage.*"
@@ -59,23 +66,23 @@ jobs:
 
   coverage-compile:
     name: "Compile coverage reports."
-    needs: "run-tests-and-coverage"
+    needs: ["settings", "run-tests-and-coverage"]
     runs-on: "ubuntu-latest"
     steps:
       - name: "Repo checkout"
-        uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
+        uses: ${{ needs.settings.outputs.gha-checkout }}
 
       - name: "Set up Python"
-        uses: "actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b"
+        uses: ${{ needs.settings.outputs.gha-setup-python }}
         with:
-          python-version: "3.12"
+          python-version: ${{ needs.settings.outputs.default-python-version }}
 
       - name: "Install nox"
         run: |
           python -m pip install --upgrade nox
 
       - name: "Download coverage artifacts"
-        uses: "actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16"
+        uses: ${{ needs.settings.outputs.gha-download-artifact }}
         with:
           pattern: "coverage-artifact-*"
           merge-multiple: true
@@ -89,15 +96,16 @@ jobs:
 
   linting:
     name: "Check linting and formatting requirements"
+    needs: ["settings"]
     runs-on: "ubuntu-latest"
     steps:
       - name: "Repo checkout"
-        uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
+        uses: ${{ needs.settings.outputs.gha-checkout }}
 
       - name: "Set up Python"
-        uses: "actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b"
+        uses: ${{ needs.settings.outputs.gha-setup-python }}
         with:
-          python-version: "3.12"
+          python-version: ${{ needs.settings.outputs.default-python-version }}
 
       - name: "Install nox"
         run: |