Merge branch 'main' into rm-hooks

Author: JonZeolla

.github/CODE_OF_CONDUCT.md

@@ -31,7 +31,7 @@ runs:
         python-version: ${{ inputs.python-version }}
 
     - name: Install Task
-      uses: arduino/setup-task@v2
+      uses: go-task/setup-task@v1
       with:
         # Passing a repo token reduces the likelihood of API rate limit exceeded
         repo-token: ${{ inputs.token }}

.github/actions/bootstrap/action.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: 'false'
       - name: Bootstrap repository
@@ -44,14 +44,14 @@ jobs:
       contents: write
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         # Necessary for hooks to succeed during tests for commits/schedule
         if: github.event_name != 'pull_request'
         with:
           fetch-depth: 0
           persist-credentials: 'false'
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         # Necessary for hooks to succeed during tests for PRs
         if: github.event_name == 'pull_request'
         with:
@@ -80,7 +80,7 @@ jobs:
       - name: Run SBOM generation
         run: task -v sbom
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: sbom-files
           path: |
@@ -89,15 +89,15 @@ jobs:
       - name: Check license compliance
         run: task -v license-check
       - name: Upload license check results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: license-check-results
           path: license-check.json
           if-no-files-found: error
       - name: Run vulnerability scan
         run: task -v vulnscan
       - name: Upload vulnerability scan results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: vuln-scan-results
           path: vulns.json
@@ -121,7 +121,7 @@ jobs:
             exit 1
           fi
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Scan workflow logs for warnings and errors
         run: scripts/scan_workflow_logs.sh ${{ github.run_id }}
         env:

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
       tag: ${{ steps.release.outputs.tag }}
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: 'false'
       - name: Bootstrap repository

.github/workflows/security.yml

@@ -2,7 +2,7 @@
 exclude: '^{{cookiecutter\.project_name\|replace\(" ", ""\)}}/.*'
 repos:
  - repo: https://github.com/astral-sh/ruff-pre-commit
-   rev: f298305809c552671cc47e0fec0ba43e96c146a2  # frozen: v0.13.2
+   rev: 3db93a2be6f214ed722bf7bce095ec1b1715422a  # frozen: v0.14.2
    hooks:
      - id: ruff-check
        types_or: [ python, pyi, jupyter ]
@@ -31,7 +31,7 @@ repos:
        args: ["--config", ".github/linters/lychee.toml"]
        types: [markdown]
  - repo: https://github.com/rhysd/actionlint
-   rev: 03d0035246f3e81f36aed592ffb4bebf33a03106  # frozen: v1.7.7
+   rev: e7d448ef7507c20fc4c88a95d0c448b848cd6127  # frozen: v1.7.8
    hooks:
      - id: actionlint-docker
  - repo: https://github.com/koalaman/shellcheck-precommit
@@ -40,7 +40,7 @@ repos:
      - id: shellcheck
        args: [ -x, --source-path=SCRIPTDIR ]
  - repo: https://github.com/trufflesecurity/trufflehog
-   rev: 466da5b0bb161144f6afca9afe5d57975828c410  # frozen: v3.90.8
+   rev: ad6fc8fb446b8fafbf7ea8193d2d6bfd42f45690  # frozen: v3.90.11
    hooks:
      - id: trufflehog
        # Check the past 2 commits; it's useful to make this go further back than main when running this where main and HEAD are equal

.github/workflows/update.yml

@@ -1,7 +1,7 @@
 # Contributing
 
 To contribute to this project, please consider starting by [opening an issue](https://github.com/Zenable-io/ai-native-python/issues/new) to discuss the feature
-and its design, and reviewing our Contributors Code of Conduct [here](./.github/CODE_OF_CONDUCT.md).
+and its design.
 
 Once you are ready to submit your contribution, please fork the repository and open a pull request with your changes.
 

.pre-commit-config.yaml

@@ -29,7 +29,7 @@ For more details, see our [documentation](docs/index.md).
 
     ```bash
     # Install the prerequisites
-    brew install uv
+    brew install uv go-task
 
     # Initialize your project
     uvx --with gitpython cookiecutter gh:zenable-io/ai-native-python