mirror of
https://github.com/arsvendg/Stirling-PDF.git
synced 2026-07-14 18:44:05 +02:00
LudyandGitHub
c0374266e7
# Description of Changes Add runner hardening and housekeeping across workflows. - .github/dependabot.yml: add /docker/unoserver and /engine to Dependabot update paths. - .github/workflows/_runner-pick.yml and .github/workflows/build.yml: add step-security/harden-runner (egress-policy: audit) to audit outbound calls from runners. - .github/workflows/ai-engine.yml, .github/workflows/aur-publish.yml, .github/workflows/package-managers.yml: update actions/checkout usage to the newer v6.0.2 reference. - .github/workflows/package-managers.yml: minor YAML formatting tidy (release types array). These changes improve CI security by auditing egress, update the checkout action to a newer release, and expand Dependabot coverage. --- ## Checklist ### General - [ ] I have read the [Contribution Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md) - [ ] I have read the [Stirling-PDF Developer Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md) (if applicable) - [ ] I have read the [How to add new languages to Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md) (if applicable) - [ ] I have performed a self-review of my own code - [ ] My changes generate no new warnings ### Documentation - [ ] I have updated relevant docs on [Stirling-PDF's doc repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/) (if functionality has heavily changed) - [ ] I have read the section [Add New Translation Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags) (for new translation tags only) ### Translations (if applicable) - [ ] I ran [`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md) ### UI Changes (if applicable) - [ ] Screenshots or videos demonstrating the UI changes are attached (e.g., as comments or direct attachments in the PR) ### Testing (if applicable) - [ ] I have run `task check` to verify linters, typechecks, and tests pass - [ ] I have tested my changes locally. Refer to the [Testing Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing) for more details.
53 lines
2.0 KiB
YAML
53 lines
2.0 KiB
YAML
repos:
|
|
- repo: https://github.com/astral-sh/ruff-pre-commit
|
|
rev: v0.15.14
|
|
hooks:
|
|
- id: ruff
|
|
args:
|
|
- --fix
|
|
- --line-length=127
|
|
files: ^((\.github/scripts|scripts|app/core/src/main/resources/static/python)/.+)?[^/]+\.py$
|
|
exclude: (split_photos.py)
|
|
- id: ruff-format
|
|
files: ^((\.github/scripts|scripts|app/core/src/main/resources/static/python)/.+)?[^/]+\.py$
|
|
exclude: (split_photos.py)
|
|
- repo: https://github.com/codespell-project/codespell
|
|
rev: v2.4.2
|
|
hooks:
|
|
- id: codespell
|
|
args:
|
|
- --ignore-words-list=thirdParty,tabEl,tabEls,Sie,ist,fulfilment
|
|
- --skip="./.*,*.csv,*.json,*.ambr"
|
|
- --quiet-level=2
|
|
files: \.(html|css|js|py|md)$
|
|
exclude: (.vscode|.devcontainer|app/core/src/main/resources|app/proprietary/src/main/resources|frontend/editor/public/vendor|Dockerfile|.*/pdfjs.*|.*/thirdParty.*|bootstrap.*|.*\.min\..*|.*diff\.js)
|
|
- repo: https://github.com/gitleaks/gitleaks
|
|
rev: v8.30.0
|
|
hooks:
|
|
- id: gitleaks
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v6.0.0
|
|
hooks:
|
|
- id: end-of-file-fixer
|
|
files: ^.*(\.js|\.java|\.py|\.yml)$
|
|
exclude: ^(.*/pdfjs.*|.*/thirdParty.*|bootstrap.*|.*\.min\..*|.*diff\.js|\.github/workflows/.*$)
|
|
- id: trailing-whitespace
|
|
files: ^.*(\.js|\.java|\.py|\.yml)$
|
|
exclude: ^(.*/pdfjs.*|.*/thirdParty.*|bootstrap.*|.*\.min\..*|.*diff\.js|\.github/workflows/.*$)
|
|
- repo: https://github.com/pappasam/toml-sort
|
|
rev: v0.24.4
|
|
hooks:
|
|
- id: toml-sort-fix
|
|
files: frontend/editor/public/locales/.*\.toml$
|
|
args: ['--in-place', '--all', '--ignore-case']
|
|
# - repo: https://github.com/thibaudcolas/pre-commit-stylelint
|
|
# rev: v16.21.1
|
|
# hooks:
|
|
# - id: stylelint
|
|
# additional_dependencies:
|
|
# - [email protected]
|
|
# - [email protected]
|
|
# - "@stylistic/[email protected]"
|
|
# files: \.(css)$
|
|
# args: [--fix]
|