Merge remote-tracking branch 'template/dev' into dev

Author: Paillat-dev

.github/workflows/CI-CD.yaml

@@ -14,18 +14,19 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  tests:
-    uses: ./.github/workflows/test.yaml
+  quality:
+    uses: ./.github/workflows/quality.yaml
 
   docker:
-    needs: tests
+    needs: quality
     permissions:
       contents: read
       packages: write
       id-token: write
     uses: ./.github/workflows/docker.yaml
 
   deploy:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
     needs: docker
     uses: ./.github/workflows/deploy.yaml
     secrets: inherit

.github/workflows/docker.yaml

@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.9.0
+        uses: docker/setup-buildx-action@v3.10.0
 
       - name: Log into registry ${{ env.REGISTRY }}
         uses: docker/[email protected]
@@ -29,7 +29,7 @@ jobs:
 
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5.6.1
+        uses: docker/metadata-action@v5.7.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -39,7 +39,7 @@ jobs:
             type=sha
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6.14.0
+        uses: docker/build-push-action@v6.15.0
         with:
           context: .
           push: true

.github/workflows/license.yaml

@@ -0,0 +1,48 @@
+name: Quality Checks
+
+on: workflow_call
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        check: [format, lint, test]
+        include:
+          - check: format
+            name: "Format Check"
+            command: "pdm run ruff format --check ."
+          - check: lint
+            name: "Lint Check"
+            command: "pdm run ruff check ."
+          - check: test
+            name: "Tests Check"
+            command: "pdm run tests"
+
+    name: ${{ matrix.name }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup PDM
+        uses: pdm-project/setup-pdm@v4
+        with:
+          cache: true
+
+      - name: Install dependencies
+        run: pdm install -d
+
+      - name: ${{ matrix.name }}
+        run: ${{ matrix.command }}
+
+  check-license-header:
+    name: License Header Check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Setup Copywrite
+        uses: hashicorp/setup-copywrite@5e3e8a26d7b9f8a508848ad0a069dfd2f7aa5339
+      - name: Check Header Compliance
+        run: copywrite headers --plan --config .copywrite.hcl

.github/workflows/quality.yaml

@@ -72,14 +72,14 @@ jobs:
           # Function to commit changes
           commit_changes() {
             git add requirements.txt pyproject.toml pdm.lock
-            git commit -m "Update dependencies"
+            git commit -m ":arrow_up: Update dependencies lock"
           }
 
           # Function to create PR
           create_pr() {
             local BRANCH=$1
             gh pr create \
-              --title "Update dependencies" \
+              --title ":arrow_up: Update dependencies lock" \
               --body "This PR updates the project dependencies. Please review the changes and merge if everything looks good." \
               --base ${{ github.ref_name }} \
               --head $BRANCH \

.github/workflows/sync_template.yaml

@@ -21,7 +21,7 @@ repos:
         exclude: \.(po|pot|yml|yaml)$
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: v0.9.4
+    rev: v0.9.10
     hooks:
       # Run the linter.
       - id: ruff