diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..501343b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,22 @@ +version: 2 +updates: + # Update Python packages + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + + # Update GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + + # Update Docker base images + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index 866f437..fc9f3cd 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -19,10 +19,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Log in to the Container registry - uses: docker/login-action@v2 + uses: docker/login-action@v3 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -30,7 +30,7 @@ jobs: - name: Extract metadata (tags, labels) for Docker id: meta - uses: docker/metadata-action@v4 + uses: docker/metadata-action@v5 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} tags: | @@ -39,7 +39,7 @@ jobs: type=ref,event=branch,pattern={{branch}},prefix=branch-,sanitize=true - name: Build and push Docker image - uses: docker/build-push-action@v4 + uses: docker/build-push-action@v6 with: context: . push: true diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index 5cef31c..fdb41ea 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -1,24 +1,36 @@ name: Lint -on: [push, pull_request] +on: + push: + branches-ignore: ["main"] + pull_request: + branches: ["main"] + workflow_dispatch: + +permissions: {} + jobs: lint: runs-on: ubuntu-latest - steps: + permissions: + contents: read + packages: read + statuses: write + steps: - name: Checkout Code - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: fetch-depth: 0 - name: Lint Code Base - uses: github/super-linter@v4 + uses: github/super-linter@v7 env: VALIDATE_ALL_CODEBASE: true VALIDATE_HTML: true FIX_PYTHON_RUFF: true VALIDATE_PYTHON_RUFF: true - VALIDATE_MARKDOWN_PRETTIER : true + VALIDATE_MARKDOWN_PRETTIER: true VALIDATE_GITLEAKS: true VALIDATE_GITHUB_ACTIONS: true - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/Dockerfile b/Dockerfile index d099381..437181a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.11-slim +FROM python:3.12-slim # Environment variables to optimize Python behavior ENV PYTHONDONTWRITEBYTECODE=1