Merge branch 'main' into breezewiki

Author: offbyone

.github/workflows/container-build.yml

@@ -25,14 +25,14 @@ jobs:
       changed: ${{ steps.changed_images.outputs.changed }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: "recursive"
 
       - name: Get Changed Files
         id: changed_files
         # pinning out of paranoia, this is the modern-node fork of jitterbit/get-changed-files
-        uses: masesgroup/retrieve-changed-files@491e80760c0e28d36ca6240a27b1ccb8e1402c13
+        uses: masesgroup/retrieve-changed-files@491e80760c0e28d36ca6240a27b1ccb8e1402c13 # v3.0.0
 
       - name: Find image directories
         id: images
@@ -89,17 +89,17 @@ jobs:
         arch: ["aarch64", "amd64"]
 
     steps:
-      - uses: actions/checkout@v4
-      # - uses: docker/setup-qemu-action@v2
-      - uses: docker/setup-buildx-action@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      # - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
+      - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
       - name: Log in to the Github Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/metadata-action@v5
+      - uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
         id: meta
         with:
           images: ghcr.io/offbyone/${{ matrix.image }}
@@ -113,7 +113,7 @@ jobs:
 
       - name: Build and push by digest
         id: build
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         with:
           context: ./${{ matrix.image }}
           platforms: linux/${{ matrix.arch }}
@@ -127,9 +127,9 @@ jobs:
           touch "/tmp/digests-${{ matrix.image }}/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
-          name: digests-${{ matrix.image }}
+          name: digests-${{ matrix.image }}-${{ matrix.arch }}
           path: /tmp/digests-${{ matrix.image }}/*
           if-no-files-found: error
           retention-days: 1
@@ -147,19 +147,19 @@ jobs:
 
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
-          name: digests-${{ matrix.image }}
+          pattern: digests-${{ matrix.image }}-*
           path: /tmp/digests-${{ matrix.image }}
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
         with:
           images: ghcr.io/offbyone/${{ matrix.image }}
       - name: Log in to the Github Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.gitmodules

@@ -1,3 +0,0 @@
-[submodule "postmarks/postmarks"]
-	path = postmarks/postmarks
-	url = https://github.com/offbyone/postmarks.git

.pre-commit-config.yaml

@@ -0,0 +1,10 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+repos:
+-   repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v3.2.0
+    hooks:
+    -   id: trailing-whitespace
+    -   id: end-of-file-fixer
+    -   id: check-yaml
+    -   id: check-added-large-files

justfile

@@ -52,3 +52,11 @@ svc-up name:
 
 svc-down name:
     cd {{ name }} && docker compose down
+
+update: update-precommit update-gha
+
+@update-precommit:
+    uvx --with pre-commit-uv pre-commit autoupdate -j3
+
+@update-gha:
+    uvx --from git+https://github.com/offbyone/gha-update@gha-without-pyproject gha-update