[JarryShaw]

• Searched for similar pull requests
• Followed the coding style (make pylint, make mypy, make isort)
• make test passes, and a test case covers the change
• Added a changelog entry — N/A — centralised in docs(changelog): shared 1.5.0 changelog — long-lived, merges last (#610, #616, #617, #618, #620) #657

What is the purpose of your pull request?

• refactor — restructures code without changing behaviour

---

Description of your pull request and other information

The third batch for #2047: util/ci_timing.py and util/vendor_test_gate.py move onto util/_actions.py, with byte-identical output.

• ci_timing.py: annotations go through _actions.annotate. The three that carry outside text keep escape=False, since escaping them would change output.
• vendor_test_gate.py: annotations, the per-run ::group::, the step summary and the verdict output use the helper. Its local escape() is gone, because the helper gives the same bytes.
• Left out: util/python_versions.py. Sparse checkouts in three workflows fetch that file alone, and create-release.yml runs an old release's copy extracted with git show, so there is no _actions.py beside it.
• Byte-identical against main's copies:
  • vendor_test_gate: 22 adversarial cases, each on 3.7 and 3.14, comparing exit code, stdout, stderr, outputs, summary and git status. The only difference is the line numbers in a SIGINT traceback.
  • ci_timing: 16 cases on 3.14, since both copies need tomllib.
• ci: a failed KTLO leg turns main and pull requests red; report it as a warning and exit 0 #1672's KTLO guard: neither script runs in a KTLO or experimental step, and the guard still reads every annotation.
• Tests: both scripts join SCRIPTS and RUNS in test_actions_helper_2047, rebased onto ci: post the CodeQL report to Discussions (#2030) #2058's codeql_report entry. That file plus test_ci_timing, test_vendor_test_gate_1853, test_codeql_report_2030 and test_ktlo_legs_stay_green_1672: 163 passed.

[JarryShaw]

GOOD TO GO at 92a06a8ef (Sonnet cross-review).

• vendor_test_gate: byte-identical on 48 cases each under 3.14 and 3.7. These cover special module names (%, ,, :, \n, \r), failing and nonexistent commands, and the output and summary files unset, empty, set or missing. The removed local escape() is the same replace chain as the helper's escape_data.
• ci_timing: 26 stubbed cases with nasty error and finding text are identical apart from a one-second timestamp.
• Invocations: both workflows run the scripts from a full checkout, so _actions resolves.
• Tests: 163 passed.

Pre-existing, not changed here: ci_timing writes three outside strings unescaped (escape=False, to keep the output byte-identical), so a newline in them would split an annotation, as it does on main.

[JarryShaw]

Ready to merge at 92a06a8ef: the review is GOOD TO GO and CI is complete (56 passed, 0 failed). The ordering leg ran 1945 tests with 0 failures. The 3.8–3.10 KTLO legs show 0 failing tests, and the PR is based on current main (c98541f84).

[github-actions]

Coverage: 91.52% (unit tier, Python 3.15, 92a06a8ef, Unit Tests run success)

Package	Statements	Missed	Branches	Partial	Cover
pcapkit (top level)	104	4	20	2	95.16%
pcapkit/const	19599	881	2618	867	92.11%
pcapkit/corekit	2565	71	812	37	96.56%
pcapkit/dumpkit	282	3	102	3	98.44%
pcapkit/foundation	2930	23	1022	25	98.79%
pcapkit/interface	138	4	52	3	96.32%
pcapkit/protocols	17414	219	4574	185	98.14%
pcapkit/toolkit	869	36	298	10	95.20%
pcapkit/utilities	473	7	136	5	98.03%
pcapkit/vendor	4431	1995	1018	167	51.73%

Per-file detail: the coverage-html artifact of this run.