Merge 1.1-dev onto 1.1

.github/dependabot.yml

@@ -4,3 +4,5 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7

.github/workflows/ci.yml

@@ -1,8 +1,10 @@
 name: CI
 on: [push, pull_request]
 jobs:
-  build:
+  ci:
     uses: open-contracting/.github/.github/workflows/ci-profile.yml@main
+    permissions:
+      contents: read
     secrets:
       private-key: ${{ secrets.PRIVATE_KEY }}
       elasticsearch-password: ${{ secrets.ELASTICSEARCH_PASSWORD }}

.github/workflows/js.yml

@@ -1,13 +1,7 @@
 name: Lint JavaScript
 on: [push, pull_request]
 jobs:
-  build:
-    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 18
-      - run: npm install standard
-      - run: npx standard docs/_static/script.js
+  js:
+    uses: open-contracting/.github/.github/workflows/js.yml@main
+    permissions:
+      contents: read

.github/workflows/lint.yml

@@ -4,8 +4,4 @@ jobs:
   lint:
     uses: open-contracting/.github/.github/workflows/lint.yml@main
     permissions:
-      contents: write
-    secrets:
-      personal-access-token: ${{ secrets.PAT }}
-    with:
-      python-version: '3.10'
+      contents: read

.github/workflows/shell.yml

@@ -1,5 +1,7 @@
 name: Lint Shell
 on: [push, pull_request]
 jobs:
-  lint:
+  shell:
     uses: open-contracting/.github/.github/workflows/shell.yml@main
+    permissions:
+      contents: read

.github/workflows/spellcheck.yml

@@ -1,13 +1,10 @@
 name: Spell-check
 on: [push, pull_request]
 jobs:
-  build:
-    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
-        with:
-          python-version: '3.10'
-      - run: pip install codespell
-      - run: codespell -S .git,docson,locale,examples,country.csv,currency.csv,language.csv,mediaType.csv -L fo,zar .
+  spellcheck:
+    uses: open-contracting/.github/.github/workflows/spellcheck.yml@main
+    permissions:
+      contents: read
+    with:
+      ignore: fo,sme,zar
+      skip: docson,locale,examples,country.csv,currency.csv,language.csv,mediaType.csv

.pre-commit-config.yaml

@@ -1,18 +1,20 @@
 ci:
   autoupdate_schedule: quarterly
   skip: [pip-compile]
-default_language_version:
-    python: python3.10
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.6
+    rev: v0.16.10
     hooks:
-      - id: ruff
+      - id: ruff-check
       - id: ruff-format
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.5.14
+    rev: 0.12.23
     hooks:
       - id: pip-compile
         name: pip-compile common-requirements.in
         args: [common-requirements.in, -o, common-requirements.txt]
         files: ^common-requirements\.(in|txt)$
+  - repo: https://github.com/biomejs/pre-commit
+    rev: v2.5.15
+    hooks:
+      - id: biome-check

.python-version

@@ -1 +1 @@
-3.10
+3.12