Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@08b4669...483ef80)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Merge pull request from GHSA-g4mx-q9vg-27p4

* Release 2.0.7

…cheme

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>

According to RFC 9110, the "x-gzip" content coding should be treated as
"gzip".

Fixes #3174

GitHub Actions now defaults to Python 3.12, which made flake8 6.0 report
E231 errors because it was looking at f-strings incorrectly. Upgrading
to 6.1 fixed the issue, but introduced E721 that I fixed too.

This commit also changes `nox -s lint` and `nox -s mypy` to use Python
3.12, allowing to remove one type ignore.

Test selection occurs after collection, so if we're in an environment
where we don't want to make outbound network connections, defer the
check to after selection.

This was the aim of #3166, but it wasn't tested in an environment where
ConnectionError is raised.

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>