chore: update pre-commit config source

Author: xnoto

.pre-commit-config.yaml

@@ -1,36 +1,49 @@
+# Canonical pre-commit configuration for tfroot-* repositories.
+# This file is bundled into the tfroot-runner container image to pre-cache hooks.
+# It is also fetched by the shared OpenTofu workflow at CI time.
+#
+# To update hooks for all tfroot repos, modify this file and rebuild the image.
 repos:
-- repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v6.0.0
-  hooks:
-    - id: check-case-conflict
-    - id: check-merge-conflict
-    - id: check-symlinks
-    - id: check-vcs-permalinks
-    - id: destroyed-symlinks
-    - id: detect-private-key
-    - id: mixed-line-ending
-    - id: trailing-whitespace
-- repo: https://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.105.0
-  hooks:
-    - id: terraform_validate
-      args:
-        - --hook-config=--retry-once-with-cleanup=true
-        - --args=-no-color
-        - --tf-init-args=-reconfigure
-        - --tf-init-args=-upgrade
-    - id: terraform_tflint
-      args:
-        - --args=--minimum-failure-severity=error
-        - --args=--config=__GIT_WORKING_DIR__/.tflint.hcl
-    - id: terraform_checkov
-      args:
-        - --args=--config-file __GIT_WORKING_DIR__/.checkov.yml
-    - id: terraform_fmt
-      args:
-        - --args=-no-color
-        - --args=-diff
-        - --args=-recursive
-    - id: terraform_docs
-      args:
-        - --args=--config=.terraform-docs.yml
+  - repo: https://github.com/compilerla/conventional-pre-commit
+    rev: v4.3.0
+    hooks:
+      - id: conventional-pre-commit
+        stages: [commit-msg]
+  - repo: https://github.com/antonbabenko/pre-commit-terraform
+    rev: v1.105.0
+    hooks:
+      - id: terraform_validate
+        args:
+          - --hook-config=--retry-once-with-cleanup=true
+          - --args=-no-color
+          - --tf-init-args=-reconfigure
+          - --tf-init-args=-upgrade
+          - --tf-init-args=-backend=false
+      - id: terraform_tflint
+        args:
+          - --args=--minimum-failure-severity=error
+          - --args=--config=__GIT_WORKING_DIR__/.tflint.hcl
+      - id: terraform_checkov
+        args:
+          - --args=--config-file __GIT_WORKING_DIR__/.checkov.yml
+      - id: terraform_fmt
+        args:
+          - --args=-no-color
+          - --args=-diff
+          - --args=-recursive
+      - id: terraform_docs
+        args:
+          - --args=--config=.terraform-docs.yml
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: check-case-conflict
+      - id: check-merge-conflict
+      - id: check-symlinks
+      - id: check-vcs-permalinks
+      - id: destroyed-symlinks
+      - id: detect-private-key
+      - id: end-of-file-fixer
+        exclude: README.md
+      - id: mixed-line-ending
+      - id: trailing-whitespace

AGENTS.md

@@ -1,4 +1,17 @@
 # Operational Context
 - **Type:** Terraform Module
-- **Test:** `pre-commit run -a`
+- **Test:** `make test`
 - **Lint:** `tflint`, `terraform fmt`
+
+## Pre-commit Configuration
+
+Pre-commit configuration is **centralized** in `makeitworkcloud/shared-workflows/tfroot-pre-commit-config.yaml`. The CI workflow fetches this config at runtime.
+
+**Do not** modify `.pre-commit-config.yaml` in this repository.
+
+For local development, run:
+```bash
+make test
+```
+
+This automatically fetches the canonical config if not present.

Makefile

@@ -21,9 +21,13 @@ help:
 init:
 	@${TERRAFORM} init -backend=false -upgrade
 
-test: .git/hooks/pre-commit
+test: .pre-commit-config.yaml .git/hooks/pre-commit
 	@pre-commit run -a
 
+.pre-commit-config.yaml:
+	@curl -sSL -o .pre-commit-config.yaml \
+		https://raw.githubusercontent.com/makeitworkcloud/shared-workflows/main/tfroot-pre-commit-config.yaml
+
 DEPS_PRE_COMMIT=$(shell which pre-commit || echo "pre-commit not found")
 DEPS_TERRAFORM_DOCS=$(shell which terraform-docs || echo "terraform-docs not found")
 DEPS_TFLINT=$(shell which tflint || echo "tflint not found")