update

Author: eggplants

.devcontainer/devcontainer.json

@@ -2,18 +2,13 @@
   "name": "Python",
   "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
   "features": {
-    "ghcr.io/devcontainers/features/python:1": {
-      "version": "latest",
-      "installTools": false,
-      "installJupyterlab": false,
-      "toolsToInstall": "mypy"
-    },
-    "ghcr.io/va-h/devcontainers-features/uv:1": {},
-    "ghcr.io/devcontainers-contrib/features/shfmt:1": {},
-    "ghcr.io/dhoeric/features/hadolint:1": {},
-    "ghcr.io/michidk/devcontainers-features/typos:1": {},
+    "ghcr.io/devcontainers-extra/features/mise:1": {},
     "ghcr.io/devcontainers/features/common-utils:2": {
-      "configureZshAsDefaultShell": true
+      "configureZshAsDefaultShell": true,
+      "installZsh": true,
+      "installOhMyZsh": true,
+      "installOhMyZshConfig": true,
+      "upgradePackages": true
     }
   },
   "postCreateCommand": ".devcontainer/postCreateCommand.sh",
@@ -22,24 +17,20 @@
   "customizations": {
     "vscode": {
       "extensions": [
+        "DavidAnson.vscode-markdownlint",
+        "hverlin.mise-vscode",
+        "github.copilot",
+        "gruntfuggly.todo-tree",
+        "streetsidesoftware.code-spell-checker",
+        "redhat.vscode-yaml",
         "charliermarsh.ruff",
-        "exiasr.hadolint",
-        "foxundermoon.shell-format",
-        "GitHub.copilot",
-        "GitHub.vscode-github-actions",
-        "Gruntfuggly.todo-tree",
-        "ms-azuretools.vscode-docker",
-        "ms-python.black-formatter",
-        "ms-python.mypy-type-checker",
-        "njpwerner.autodocstring",
-        "oderwat.indent-rainbow",
-        "tamasfe.even-better-toml",
-        "tekumara.typos-vscode",
-        "timonwong.shellcheck",
+        "astral-sh.ty@prerelease",
+        "tombi-toml.tombi",
         "-ms-python.vscode-pylance"
       ],
       "settings": {
-        "terminal.integrated.defaultProfile.linux": "zsh",
+        // Python
+        "python.testing.pytestEnabled": true,
         "python.defaultInterpreterPath": "./.venv/bin/python",
         "[python]": {
           "editor.formatOnSave": true,
@@ -48,8 +39,25 @@
             "source.organizeImports": "explicit"
           },
           "editor.defaultFormatter": "charliermarsh.ruff"
+        },
+        // Markdown
+        "[markdown]": {
+          "editor.formatOnSave": true,
+          "editor.formatOnPaste": true
+        },
+        // Terminal
+        "terminal.integrated.defaultProfile.linux": "zsh",
+        "terminal.integrated.scrollback": 100000,
+        // GitHub Copilot
+        "github.copilot.chat.codeGeneration.useInstructionFiles": true,
+        "github.copilot.chat.localeOverride": "ja",
+        "chat.instructionsFilesLocations": {
+          ".github/instructions": true
         }
       }
     }
-  }
-}
+  },
+  "mounts": [],
+  "containerEnv": {},
+  "remoteEnv": {}
+}

.devcontainer/postCreateCommand.sh

@@ -2,15 +2,19 @@
 
 set -euxo pipefail
 
-uv sync --dev --all-extras
-uv run pre-commit install --allow-missing-config
+if ! grep -q mise ~/.zshrc; then
+  # shellcheck disable=SC2016
+  echo 'eval "$(mise activate zsh)"' >> ~/.zshrc
+fi
+
+mise trust
+mise install
+mise generate git-pre-commit --write
+eval "$(mise activate zsh)"
 
 cat<<'A'>> ~/.zshrc
 eval "$(uv generate-shell-completion zsh)"
 eval "$(uvx --generate-shell-completion zsh)"
-command -v deactivate &>/dev/null || . .venv/bin/activate
 A
 
 sed -i ~/.zshrc -e 's/^ZSH_THEME=.*/ZSH_THEME="refined"/'
-
-[[ -d .venv ]] || uv venv

.github/dependabot.yml

@@ -9,11 +9,23 @@ updates:
       dependency-type: production
     dev-dependencies:
       dependency-type: development
+  cooldown:
+    default-days: 7
 - package-ecosystem: github-actions
   directory: /
   schedule:
     interval: monthly
+  cooldown:
+    default-days: 7
+- package-ecosystem: "devcontainers"
+  directory: /
+  schedule:
+    interval: monthly
+  cooldown:
+    default-days: 7
 - package-ecosystem: docker
   directory: /
   schedule:
     interval: monthly
+  cooldown:
+    default-days: 7

.github/workflows/ci.yml

@@ -0,0 +1,35 @@
+name: ci
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: ["master"]
+  push:
+    tags: ["*"]
+    branches: ["master"]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  MISE_EXPERIMENTAL: true
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+      - run: uv sync --locked
+      - run: mise run ci
+      - uses: MishaKav/pytest-coverage-comment@ae0e8a539a3f310aefb3bfb6a2209778a21fa42b # v1.2.0
+        if: github.event_name == 'pull_request'
+        with:
+          pytest-coverage-path: ./pytest-coverage.txt
+          junitxml-path: ./pytest.xml

.github/workflows/docs.yml

@@ -1,25 +1,21 @@
-name: Publish docs
+name: docs
 
 on:
   push:
     branches:
     - master
 
 jobs:
-  test:
+  docs:
     runs-on: ubuntu-latest
-    strategy:
-      max-parallel: 1
-
+    permissions:
+      contents: write
     steps:
-    - uses: actions/checkout@v6
-    - uses: astral-sh/setup-uv@v7
-      with:
-        enable-cache: true
-        cache-dependency-glob: uv.lock
-    - run: uv sync --all-extras --dev
-    - run: uv run task gendoc
-    - uses: peaceiris/actions-gh-pages@v4
-      with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
-        publish_dir: ./docs
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+      - run: uv sync --group docs --locked
+      - run: mise run docs
+      - uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          publish_dir: ./docs

.github/workflows/release.yml

@@ -1,61 +1,56 @@
-name: Release Package
-
-# need to setup:
-# secrets.PYPI_TOKEN (See: https://pypi.org/help/#apitoken)
+name: release
 
 on:
   push:
     tags:
-    - v*
+      - v*
 
 jobs:
+  pypi:
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+      - run: uv sync --locked --no-dev
+      - run: mise run build
+      - run: uv publish
   release:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
     - id: create_release
-      uses: actions/create-release@v1
+      uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
         tag_name: ${{ github.ref }}
         release_name: Release ${{ github.ref }}
         draft: false
         prerelease: false
-  pypi:
-    needs: release
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v6
-      with:
-        persist-credentials: false
-    - uses: astral-sh/setup-uv@v7
-      with:
-        enable-cache: true
-        cache-dependency-glob: uv.lock
-    - run: uv build
-    - run: uv publish --token "${{ env.PYPI_TOKEN }}"
-      env:
-        PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
   ghcr:
     needs: release
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
-    - uses: docker/metadata-action@v5
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+    - uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
       id: meta
       with:
         images: ghcr.io/${{ github.repository }}
         tags: |
           type=semver,pattern={{version}}
           type=semver,pattern={{major}}.{{minor}}
-    - uses: docker/login-action@v3
+    - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
       with:
         registry: ghcr.io
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GITHUB_TOKEN }}
-    - uses: docker/build-push-action@v6
+    - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
       with:
         context: .
         push: true