@tottoto if you rebase it should fix CI.

Rebased.

Just a random note that GitHub allows relaxing the default restriction on when workflow runs require approval (can't remember any PRs where not allowing them to run immediately was useful on this repo), in actions settings for the repo or organization:

@jplatte I have mixed feelings about changing that option because I do skim PRs from new contributors before hitting the button, just to see if anyone's trying anything suspicious.

It doesn't really matter right now, but I could easily see myself adding a new workflow with sensitive tokens (e.g. an automated release workflow) and forgetting to properly gate it off.

I wish there was an option like "Approve and run all workflows for this PR" so I didn't have to keep doing it for the same PR though.