ci

Author: filipchristiansen

.github/dependabot.yml

@@ -1,12 +1,28 @@
 version: 2
 updates:
+  # ─── Python (pip) ─────────────────────────────
   - package-ecosystem: "pip"
     directory: "/"
-    schedule:
-      interval: "daily"
-      time: "06:00"
-      timezone: "UTC"
-    open-pull-requests-limit: 5
-    labels:
-      - "dependencies"
-      - "pip"
+    schedule: { interval: "weekly" }
+    labels: [ "dependencies", "pip" ]
+    groups: # Group patches & minors from dev-only tools
+      dev-py:
+        dependency-type: "development"
+        update-types: ["minor", "patch"]
+
+  # ─── Node (npm) ───────────────────────────────
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule: { interval: "weekly" }
+    labels: [ "dependencies", "npm" ]
+    cooldown:  # wait before opening PRs
+      semver-major-days: 30
+      semver-minor-days: 7
+      semver-patch-days: 3
+    security-updates: true
+
+  # ─── GitHub Actions ───────────────────────────
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule: { interval: "weekly" }
+    labels: [ "dependencies", "gh-actions" ]

.github/workflows/ci.yml

@@ -25,27 +25,29 @@ jobs:
       uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
+    - name: Locate pip cache
+      id: pip-cache
+      shell: bash
+      run: echo "dir=$(python -m pip cache dir)" >> "$GITHUB_OUTPUT"
 
     - name: Cache pip
       uses: actions/cache@v4
       with:
-        path: ~/.cache/pip
+        path: ${{ steps.pip-cache.outputs.dir }}
         key: ${{ runner.os }}-pip-${{ hashFiles('pyproject.toml') }}
-        restore-keys: |
-          ${{ runner.os }}-pip-
-
+        restore-keys: ${{ runner.os }}-pip-
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        python -m pip install -e ".[dev]"
+        python -m pip install ".[dev]"
 
     - name: Run tests
       run: pytest
 
     #  Run pre-commit only on Python 3.13 + ubuntu.
     - name: Run pre-commit hooks
+      uses: pre-commit/action@v3.0.1
       if: ${{ matrix.python-version == '3.13' && matrix.os == 'ubuntu-latest' }}
-      run: pre-commit run --all-files
 
   frontend:
     needs: test # Builds Tailwind CSS only if tests pass

.github/workflows/publish.yml

@@ -58,11 +58,10 @@ jobs:
 
       - name: Install build backend
         run: |
+          python -m pip install --upgrade pip
+          python -m pip install build twine
           python -m build
-          python -m pip install twine
           twine check dist/*
-          ls -R dist/ # List the contents of the dist directory
-
       - name: Upload dist artefact
         uses: actions/upload-artifact@v4
         with:

.github/workflows/scorecard.yml

@@ -2,7 +2,7 @@ name: OSSF Scorecard
 on:
   branch_protection_rule:
   schedule:
-    - cron: '33 11 * * 2'
+    - cron: '33 11 * * 2'  # Every Tuesday at 11:33 AM UTC
   push:
     branches: [ main ]
 

.gitignore

@@ -173,9 +173,6 @@ node_modules/
 # CSS
 src/static/css/site.css
 
-# Lock files
-package-lock.json
-
 # Project specific
 history.txt
 cleanup.py