Merge branch 'main' into restruct

.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  # Update Python packages
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  # Update GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  # Update Docker base images
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10

.github/workflows/docker-build-push.yml

@@ -19,18 +19,18 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Log in to the Container registry
-      uses: docker/login-action@v2
+      uses: docker/login-action@v3
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Extract metadata (tags, labels) for Docker
       id: meta
-      uses: docker/metadata-action@v4
+      uses: docker/metadata-action@v5
       with:
         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
         tags: |
@@ -39,7 +39,7 @@ jobs:
           type=ref,event=branch,pattern={{branch}},prefix=branch-,sanitize=true
 
     - name: Build and push Docker image
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@v6
       with:
         context: .
         push: true

.github/workflows/super-linter.yml

@@ -1,24 +1,36 @@
 name: Lint
-on: [push, pull_request]
+on:
+  push:
+    branches-ignore: ["main"]
+  pull_request:
+    branches: ["main"]
+  workflow_dispatch:
+
+permissions: {}
+
 jobs:
   lint:
     runs-on: ubuntu-latest
 
-    steps:
+    permissions:
+      contents: read
+      packages: read
+      statuses: write
 
+    steps:
       - name: Checkout Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter@v4
+        uses: github/super-linter@v7
         env:
           VALIDATE_ALL_CODEBASE: true
           VALIDATE_HTML: true
           FIX_PYTHON_RUFF: true
           VALIDATE_PYTHON_RUFF: true
-          VALIDATE_MARKDOWN_PRETTIER	: true
+          VALIDATE_MARKDOWN_PRETTIER: true
           VALIDATE_GITLEAKS: true
           VALIDATE_GITHUB_ACTIONS: true
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.12-slim
 
 # Environment variables to optimize Python behavior
 ENV PYTHONDONTWRITEBYTECODE=1