v1.7.0

⚠️ TLDR

New DBX hashes and new pk-signed keks

What's Changed

• pip: bump ruff to 0.15.21, pyasn1 to 0.6.4 by Dependabot (@dependabot)[bot] in #449
• Repo File Sync: change dependabot schedule to monthly by @mu-automation[bot] in #451
• Repo File Sync: Add 7 day cooldown to dependabot by @mu-automation[bot] in #455
• pip: bump cryptography from 49.0.0 to 50.0.0 by Dependabot (@dependabot)[bot] in #456
• Pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #457
• pip: bump ruff from 0.15.21 to 0.16.0 in the all-pip-dependencies group across 1 directory by Dependabot (@dependabot)[bot] in #453
• GitHub Action: Bump actions/setup-python from 6.3.0 to 7.0.0 in the all-actions-dependencies group across 1 directory by Dependabot (@dependabot)[bot] in #454
• [Secure Boot KEK Update] TOSHIBA PK-Signed KEK Update by Doug Flick (@Flickdm) in #458
• [Secure Boot KEK Update] Decenta PK-Signed KEK Update by Doug Flick (@Flickdm) in #459
• pip: bump edk2-pytool-library to 0.23.16, edk2-pytool-extensions to 0.31.1, ruff to 0.16.4 by Dependabot (@dependabot)[bot] in #461
• [7B] add 4 dbx hashes (2 x64, 2 ia32) by olkorsha in #448
• scripts: fix signed release archives for restructured DBX by Doug Flick (@Flickdm) in #464

New Contributors

• Dan Fiedler (@danfiedler-msft) made their first contribution in #457

Full Changelog: v1.6.5...v1.7.0