chore: general housekeeping 2025-12-05

.github/dependabot.yml

@@ -14,6 +14,8 @@ updates:
       day: "friday"
       time: "19:00"
       timezone: "America/Chicago"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "github-actions"
     directory: "/"
@@ -28,13 +30,17 @@ updates:
       day: "friday"
       time: "19:00"
       timezone: "America/Chicago"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "docker"
     directory: "/"
     schedule:
       interval: "daily"
       time: "13:00"
       timezone: "America/Chicago"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "npm"
     directory: "/"
@@ -49,3 +55,5 @@ updates:
       day: "friday"
       time: "19:00"
       timezone: "America/Chicago"
+    cooldown:
+      default-days: 7

.github/workflows/build.yml

@@ -8,12 +8,17 @@ on:
   # Allow manual triggering
   workflow_dispatch:
 
+permissions:
+    contents: read
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 #v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        with:
+            persist-credentials: false
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1

.github/workflows/pre-commit.yml

@@ -17,4 +17,4 @@ permissions:
 
 jobs:
   precommit-reusable:
-    uses: esacteksab/.github/.github/workflows/pre-commit.yml@390e5fb886c6fac8e275fb1ed5c6b4124cb48b32 #v0.70.1
+    uses: esacteksab/.github/.github/workflows/pre-commit.yml@eb585e0fbc1ff2d4923c5d4ca35de0241fc497fb  # v0.70.4

.github/workflows/spelling.yml

@@ -16,4 +16,4 @@ concurrency:
 
 jobs:
   typos-reusable:
-    uses: esacteksab/.github/.github/workflows/spelling.yml@390e5fb886c6fac8e275fb1ed5c6b4124cb48b32 #v0.70.1
+    uses: esacteksab/.github/.github/workflows/spelling.yml@eb585e0fbc1ff2d4923c5d4ca35de0241fc497fb  # v0.70.4

.mise.toml

@@ -11,6 +11,6 @@
 [tools]
   golang = "1.25.5"
   nodejs = "22.15.1"
-  pnpm   = "10.19.0"
+  pnpm   = "10.24.0"
   python = "3.12.10"
   uv     = "latest"

.pre-commit-config.yaml

@@ -23,7 +23,7 @@ repos:
         name: "Check Merge Conflicts"
 
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.28.0
+    rev: v8.30.0
     hooks:
       - id: gitleaks
         name: "Git Leaks"
@@ -35,7 +35,7 @@ repos:
         name: "Keep Sorted"
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.34.1
+    rev: 0.35.0
     hooks:
       - id: check-github-workflows
       - id: check-dependabot
@@ -90,7 +90,7 @@ repos:
           - mdformat-footnote
 
   - repo: https://github.com/crate-ci/typos
-    rev: v1.38.1
+    rev: v1.40.0
     hooks:
       - id: typos
         args: [--force-exclude]
@@ -103,7 +103,7 @@ repos:
         name: "Shell Check"
 
   - repo: https://github.com/DavidAnson/markdownlint-cli2
-    rev: v0.18.1
+    rev: v0.19.1
     hooks:
       - id: markdownlint-cli2
         name: "Markdown Lint"

package.json

@@ -1,10 +1,10 @@
 {
   "devDependencies": {
     "npm": "^11.6.4",
-    "prettier": "^3.7.2",
+    "prettier": "^3.7.4",
     "prettier-plugin-pkg": "^0.21.2",
     "prettier-plugin-sh": "^0.18.0",
     "prettier-plugin-toml": "^2.0.6"
   },
-  "packageManager": "pnpm@10.19.0"
+  "packageManager": "pnpm@10.24.0"
 }

requirements.txt

@@ -1,9 +1 @@
-cfgv==3.5.0
-distlib==0.4.0
-filelock==3.20.0
-identify==2.6.15
-nodeenv==1.9.1
-platformdirs==4.5.0
 pre-commit==4.5.0
-pyyaml==6.0.3
-virtualenv==20.35.4