Pin Sphinx ReadTheDocs heme version #61

	name: Doctest build

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	on:
	push:
	paths-ignore:
	- 'locale/**'

	pull_request:
	paths-ignore:
	- 'locale/**'

	permissions: # added using https://github.com/step-security/secure-repo
	contents: read

	jobs:
	doctest:

	runs-on: ubuntu-latest
	name: Doctest

	services:
	image: docker

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

	- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	fetch-depth: 1
	- name: Set up Python 3.9
	uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
	with:
	python-version: 3.9
	- name: Pip upgrade
	run: \|
	python -m pip install --upgrade pip
	- name: Build test code
	run: \|
	make -f docker.mk doctest
	- name: Upload build artifact
	uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
	with:
	name: Doctest build
	path: ./build/doctest/output.txt

Provide feedback