Conversation
Bumps [https://github.com/psf/black](https://github.com/psf/black) from 26.1.0 to 26.3.1. - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.1.0...26.3.1) --- updated-dependencies: - dependency-name: https://github.com/psf/black dependency-version: 26.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [https://github.com/gitleaks/gitleaks](https://github.com/gitleaks/gitleaks) from v8.30.0 to 8.30.1. - [Release notes](https://github.com/gitleaks/gitleaks/releases) - [Commits](gitleaks/gitleaks@v8.30.0...v8.30.1) --- updated-dependencies: - dependency-name: https://github.com/gitleaks/gitleaks dependency-version: 8.30.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…-/github.com/gitleaks/gitleaks-8.30.1 build(deps): bump https://github.com/gitleaks/gitleaks from v8.30.0 to 8.30.1
…-/github.com/psf/black-26.3.1 build(deps): bump https://github.com/psf/black from 26.1.0 to 26.3.1
Bumps [https://github.com/psf/black](https://github.com/psf/black) from 26.3.1 to 26.5.1. - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.3.1...26.5.1) --- updated-dependencies: - dependency-name: https://github.com/psf/black dependency-version: 26.5.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…-/github.com/psf/black-26.5.1 build(deps): bump https://github.com/psf/black from 26.3.1 to 26.5.1
Bumps [https://github.com/igorshubovych/markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) from v0.48.0 to 0.49.0. - [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases) - [Commits](igorshubovych/markdownlint-cli@v0.48.0...v0.49.0) --- updated-dependencies: - dependency-name: https://github.com/igorshubovych/markdownlint-cli dependency-version: 0.49.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…-/github.com/igorshubovych/markdownlint-cli-0.49.0 build(deps): bump https://github.com/igorshubovych/markdownlint-cli from v0.48.0 to 0.49.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…ctions/checkout-7 build(deps): bump actions/checkout from 6 to 7
Updates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version. - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v82.0.1...v83.0.0) --- updated-dependencies: - dependency-name: setuptools dependency-version: 83.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…te-82.0.1-and-lt-84.0.0 build(deps): update setuptools requirement from <83.0.0,>=82.0.1 to >=82.0.1,<84.0.0
Bumps [https://github.com/igorshubovych/markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) from v0.49.0 to 0.49.1. - [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases) - [Commits](igorshubovych/markdownlint-cli@v0.49.0...v0.49.1) --- updated-dependencies: - dependency-name: https://github.com/igorshubovych/markdownlint-cli dependency-version: 0.49.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…-/github.com/igorshubovych/markdownlint-cli-0.49.1 build(deps): bump https://github.com/igorshubovych/markdownlint-cli from v0.49.0 to 0.49.1
There was a problem hiding this comment.
Pull request overview
Updates CI/dev-tool dependencies and editor/pre-commit configuration to keep automation and local tooling current, and adds a dedicated workflow to run pre-commit on PRs.
Changes:
- Bump GitHub Actions used in workflows (checkout/setup-python major versions).
- Update pre-commit hook revisions (gitleaks, markdownlint-cli, black) and remove commented-out local pytest hooks.
- Relax
setuptoolsupper bound in build configuration and clean up VS Code settings/recommendations.
Reviewed changes
Copilot reviewed 10 out of 10 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| requirements/requirements.build.txt | Raises setuptools upper bound for build tooling. |
| pyproject.toml | Raises build-system setuptools upper bound. |
| .vscode/settings.json | Removes deprecated Python language server setting. |
| .vscode/extensions.json | Removes a VS Code extension recommendation. |
| .pre-commit-config.yaml | Bumps hook versions and removes commented-out local pytest hooks. |
| .github/workflows/publish-docs.yml | Bumps checkout/setup-python action major versions. |
| .github/workflows/pre-commit.yml | Adds a PR pre-commit workflow (new). |
| .github/workflows/3.update-changelog.yml | Bumps checkout action major version. |
| .github/workflows/2.build-publish.yml | Bumps checkout/setup-python action major versions. |
| .github/workflows/1.bump-version.yml | Bumps checkout action major version. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+20
to
+22
| with: | ||
| ref: ${{ github.event.pull_request.head.sha }} | ||
| fetch-depth: 0 |
Comment on lines
+27
to
+36
| - name: Cache pip | ||
| uses: actions/cache@v6 | ||
| with: | ||
| path: ~/.cache/pip | ||
| key: pip-${{ runner.os }}-${{ hashFiles('requirements.txt') }} | ||
| - name: Install pre-commit and dependencies | ||
| run: | | ||
| python -m pip install -U pip | ||
| python -m pip install -r ./requirements.txt | ||
| python -m pip install -U pre-commit pyright pytest |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request updates CI workflow dependencies, improves pre-commit integration, and bumps several development tool versions to keep the codebase up to date and maintainable.
CI/CD Workflow Updates:
All GitHub Actions workflows now use the latest major versions of
actions/checkout(v7) andactions/setup-python(v7) for improved reliability and features. (.github/workflows/1.bump-version.yml,.github/workflows/2.build-publish.yml,.github/workflows/3.update-changelog.yml,.github/workflows/publish-docs.yml) [1] [2] [3] [4] [5]A new workflow,
.github/workflows/pre-commit.yml, is added to run pre-commit checks automatically on pull requests targetingmainordev, ensuring code quality before merging.Development Tooling and Dependency Updates:
Several pre-commit hooks are updated to their latest versions for better linting, formatting, and security checks:
gitleakstov8.30.1markdownlint-clitov0.49.1blackto26.5.1The upper bound for
setuptoolsis raised to<84.0.0in bothpyproject.tomlandrequirements/requirements.build.txtto allow newer patch releases. [1] [2]Configuration and Cleanup:
python.languageServersetting is removed from.vscode/settings.jsonfor compatibility with newer VS Code Python extensions.gruntfuggly.todo-treeis removed from.vscode/extensions.json..pre-commit-config.yamlfor clarity.