update the sign fimrware action

[JakubMini]

🔧 Improvements

Improved sign-firmware action reliability

Better Python environment setup and dependency handling

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 489b433a-a17b-4596-9a08-d0deea4c243e

📥 Commits

Reviewing files that changed from the base of the PR and between c3be2d1 and 0ca653c.

📒 Files selected for processing (2)

• actions/build-stm32/Dockerfile
• actions/sign-firmware/run.sh

Disabled knowledge base sources:

• Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.

---

Walkthrough

This PR updates two build infrastructure components. The Dockerfile adjusts package installation line formatting while retaining the same dependency list. The firmware signing script improves venv reuse by introducing validation: it checks whether an existing venv's Python can import required packages; if valid, it executes immediately; if not, it removes the venv and recreates it with optional system package installation (when root), pip upgrade, and pinned dependency installation. Both changes support more robust and efficient CI workflows.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• minimalx/.github#7: Introduces the initial actions/sign-firmware/run.sh venv bootstrapping flow that this PR enhances with import validation and improved reuse logic.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-sign-fw

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}