Merge branch 'main' into dependabot/pip/samples/web-app-managed-identity/python/src/flask-3.1.3

Author: paolosalvatori

.github/workflows/pre-commit.yml

@@ -0,0 +1,32 @@
+name: Pre-commit Checks
+
+on:
+  pull_request:
+    branches: [ main ]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  pre-commit:
+    name: Run pre-commit hooks
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        with:
+          python-version: '3.12'
+          cache: 'pip'
+
+      - name: Install pre-commit
+        run: pip install pre-commit
+
+      - name: Run pre-commit
+        run: pre-commit run --all-files --show-diff-on-failure

.gitignore

@@ -179,7 +179,10 @@ celerybeat.pid
 *.sage.py
 
 # Environments
+# Local environment files may contain credentials
 .env
+.env.*
+!.env.example
 .venv
 env/
 venv/

.pre-commit-config.yaml

@@ -0,0 +1,11 @@
+repos:
+  - repo: https://github.com/zizmorcore/zizmor-pre-commit
+    rev: v1.25.2
+    hooks:
+      - id: zizmor
+        exclude: ^\.github/workflows/run-samples\.yml$
+
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks

requirements-dev.txt

@@ -1,4 +1,5 @@
 -r requirements-runtime.txt
+pre-commit
 pytest
 pytest-xdist
 pytest-timeout

samples/web-app-cosmosdb-nosql-api/python/src/requirements.txt

@@ -1,6 +1,6 @@
-Flask==3.1.0
+Flask==3.1.3
 azure-mgmt-cosmosdb==9.8.0
 azure-cosmos==4.7.0
-gunicorn==20.1.0
-python-dotenv==1.1.1
+gunicorn==22.0.0
+python-dotenv==1.2.2
 setuptools==79.0.1

samples/web-app-custom-image/python/src/requirements.txt

@@ -1 +1 @@
-Flask==3.1.0
+Flask==3.1.3

samples/web-app-managed-identity/python/src/requirements.txt

@@ -1,6 +1,6 @@
 Flask==3.1.3
-azure-identity==1.12.0
+azure-identity==1.16.1
 azure-storage-blob==12.26.0
-azure-core==1.35.0
+azure-core==1.38.0
 gunicorn==23.0.0
-python-dotenv==1.1.1
+python-dotenv==1.2.2