chore: Update copier template to v0.5.2 (#341)

Co-authored-by: quant-ranger[bot] <132915763+quant-ranger[bot]@users.noreply.github.com>
Co-authored-by: Oliver Borchert <oliver.borchert@quantco.com>

Author: quant-ranger[bot]

.claude/CLAUDE.md

@@ -0,0 +1 @@
+../AGENTS.md

.copier-answers.yml

@@ -1,5 +1,14 @@
 # This file is managed by Copier; DO NOT EDIT OR REMOVE.
-_commit: v0.4.1
+#
+# If you want to change any of the copier answers, run one of the following:
+# 1. If you want to answer _all_ questions again:
+#   `copier update --trust --vcs-ref=:current: .`
+# 2. If you want to answer a _specific_ question again:
+#   `copier update --trust --defaults --vcs-ref=:current: --data answer_name=answer_value .`
+#
+# If you want to run this as a one-off command, prefix with:
+#   `pixi exec --spec copier --spec ruamel.yaml -- {command}`
+_commit: v0.5.2
 _src_path: https://github.com/quantco/copier-template-python-open-source
 add_autobump_workflow: false
 author_email: oliver.borchert@quantco.com

.github/workflows/build.yml

@@ -76,7 +76,7 @@ jobs:
           printf '@cargo auditable %%*\n' > "C:/cargo-auditable-wrapper.cmd"
           echo "CARGO=C:\\cargo-auditable-wrapper.cmd" >> "$GITHUB_ENV"
       - name: Build wheel
-        uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 # zizmor: ignore[cache-poisoning]
         with:
           command: build
           args: --out dist --release -i python3.10

.github/workflows/chore-pr.yml .github/workflows/chore.yml.github/workflows/chore-pr.yml renamed to .github/workflows/chore.yml

@@ -1,6 +1,6 @@
 name: Chore
 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers]
     branches: [main]
     types: [opened, reopened, edited, synchronize]
 

.github/workflows/ci.yml

@@ -13,8 +13,8 @@ permissions:
   contents: read
 
 jobs:
-  pre-commit-checks:
-    name: Pre-commit Checks
+  lint:
+    name: Lint
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
@@ -31,8 +31,10 @@ jobs:
         run: rustup show
       - name: Cache Rust dependencies
         uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
-      - name: pre-commit
-        run: pixi run pre-commit-run --color=always --show-diff-on-failure
+      - name: Run linting
+        run: pixi run lint
+        env:
+          CLICOLOR_FORCE: 1
 
   unit-tests:
     name: Unit Tests (${{ contains(matrix.os, 'ubuntu') && 'Linux' || (contains(matrix.os, 'windows') && 'Windows' || 'macOS') }}) - ${{ matrix.environment }}

.github/workflows/chore-main.yml .github/workflows/release-drafter.yml.github/workflows/chore-main.yml renamed to .github/workflows/release-drafter.yml

@@ -1,4 +1,4 @@
-name: Chore
+name: Release Drafter
 on:
   push:
     branches: [main]

.github/workflows/scorecard.yml

@@ -74,6 +74,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           sarif_file: results.sarif

.lefthook.yaml

@@ -0,0 +1,57 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/evilmartians/lefthook/refs/heads/master/schema.json
+output: [summary]
+templates:
+  run: run --as-is --quiet --no-progress
+no_auto_install: true
+pre-commit:
+  fail_on_changes: always
+  exclude:
+    - assets/**/*
+  jobs:
+    - name: pixi-install
+      run: pixi install
+    - group:
+        parallel: true
+        jobs:
+          - name: ruff-check
+            glob: "*.{py,pyi}"
+            run: pixi {run} ruff check --fix --exit-non-zero-on-fix --force-exclude
+          - name: ruff-format
+            glob: "*.{py,pyi}"
+            run: pixi {run} ruff format --force-exclude
+          - name: mypy
+            glob: "*.py"
+            run: pixi {run} mypy {staged_files}
+          - name: prettier
+            glob: "*.{md,yml,yaml}"
+            run: pixi {run} prettier --write --no-error-on-unmatched-pattern --list-different --ignore-unknown {staged_files}
+          - name: taplo
+            glob: "*.toml"
+            run: pixi {run} taplo format {staged_files}
+          - name: cargo-fmt
+            glob: "*.rs"
+            run: pixi {run} cargo fmt
+          - name: cargo-clippy
+            glob: "*.rs"
+            run: pixi {run} cargo clippy --all-targets
+          - name: trailing-whitespace-fixer
+            glob: "*"
+            file_types: text
+            run: pixi {run} trailing-whitespace-fixer {staged_files}
+          - name: end-of-file-fixer
+            glob: "*"
+            file_types: text
+            run: pixi {run} end-of-file-fixer {staged_files}
+          - name: check-merge-conflict
+            glob: "*"
+            file_types: text
+            run: pixi {run} check-merge-conflict --assume-in-merge {staged_files}
+            exclude:
+              - "*.rst"
+          - name: typos
+            glob: "*"
+            file_types: text
+            run: pixi {run} typos --force-exclude {staged_files}
+          - name: zizmor
+            glob: "*.{yml,yaml}"
+            run: pixi {run} zizmor --no-progress --min-severity high --fix --offline .

.pre-commit-config.yaml

@@ -0,0 +1,5 @@
+Lockfiles must be consistent with package metadata. After any change to `pixi.toml`, run `pixi lock`.
+
+Everything runs in a pixi environment. Any command (like `pytest`) must be prefixed with `pixi run` (e.g. `pixi run pytest`).
+
+Code formatting must align with our standards. Run `pixi run lint` before `git commit`s to ensure this.