fix(io): use atomic writes for .param, JSON, and settings files #3460

	name: Pyright

	on:
	pull_request:
	paths:
	- '*/.py' # Watch for changes in any Python files
	- 'pyproject.toml' # Watch for changes in the pyproject.toml file
	push:
	paths:
	- '*/.py' # Watch for changes in any Python files
	- 'pyproject.toml' # Watch for changes in the pyproject.toml file
	workflow_dispatch:

	concurrency:
	group: ci-${{github.workflow}}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	pyright:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.9", "3.14"]

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	# https://docs.astral.sh/uv/guides/integration/github/
	- name: Install uv and set the python version
	uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
	with:
	python-version: ${{ matrix.python-version }}
	activate-environment: true

	- name: Install dependencies
	# these extra packages are required by pyright to validate the python imports
	run: \|
	uv pip install .[dev]

	- name: Run pyright
	uses: jakebailey/pyright-action@8ec14b5cfe41f26e5f41686a31eb6012758217ef # v3.0.2
	with:
	version: PATH

Provide feedback