Lock Python versions

Lock Python versions down to patch versions 3.11.9 and 3.12.3 for mise
and the code_quality GitHub workflow.

Have nox use versions locked to minor versions 3.11 and 3.12 in
noxfile.py so that it will use the latest matching version that is
installed.

In the code_quality workflow, run nox with the explicit Python versions
defined in the workflow.

Closes #138.

.github/workflows/code_quality.yml

@@ -10,7 +10,7 @@ jobs:
   nox:
     strategy:
       matrix:
-        python_version: ["3.11.8", "3.12.2"]
+        python_version: ["3.11.9", "3.12.3"]
         nox_session: [tests, basics, examples]
         os: [ubuntu-latest, macos-latest, macos-14]
         install_uv: [0, 1]
@@ -31,12 +31,12 @@ jobs:
           fi
       - name: Test with nox
         run: |
-          nox --python ${{ matrix.python_version }} --session ${{ matrix.nox_session }} -db ${{ matrix.install_uv == 1 && 'uv' || 'virtualenv' }}
+          nox -P ${{ matrix.python_version }} --session ${{ matrix.nox_session }} -db ${{ matrix.install_uv == 1 && 'uv' || 'virtualenv' }}
 
   pyright_and_ruff:
     strategy:
       matrix:
-        python_version: ["3.11.8", "3.12.2"]
+        python_version: ["3.11.9", "3.12.3"]
     runs-on: "ubuntu-latest"
     steps:
       - uses: actions/checkout@v4

.mise.toml

@@ -2,4 +2,4 @@
 python_compile = true
 
 [tools]
-python = ["3.12.2", "3.11.8"]
+python = ["3.12.3", "3.11.9"]

noxfile.py

@@ -3,7 +3,7 @@
 nox.options.error_on_external_run = True
 nox.options.stop_on_first_error
 
-python_versions = ["3.11.8", "3.12.2"]
+python_versions = ["3.11", "3.12"]
 
 
 @nox.session(python=python_versions)