Bump cookiecutter template to 71137c (#86)

# Changes

- bumped cookiecutter template to
robert-koch-institut/mex-template@71137c

---------

Co-authored-by: Nicolas Drebenstedt <drebenstedtn@rki.de>

.cruft.json

@@ -1,6 +1,6 @@
 {
   "template": "https://github.com/robert-koch-institut/mex-template",
-  "commit": "5bac2fd56e8da37a4ac070283eaa26c99934c521",
+  "commit": "71137ce60c22f449d66138dcd113772acd678a39",
   "checkout": null,
   "context": {
     "cookiecutter": {

.dockerignore

@@ -120,6 +120,7 @@ dmypy.json
 data/
 identity.csv
 schema.json
+tmp*/
 work/
 
 # Docker specifics

.github/workflows/cookiecutter.yml

@@ -5,9 +5,13 @@ on:
     branches: ["main"]
     tags: ["**"]
   schedule:
-    - cron: '0 0 * * *'
+    - cron: "14 3 * * 1-5"
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 env:
   PIP_NO_OPTION: on
   PIP_NO_CLEAN: on

.github/workflows/cve-scan.yml

@@ -2,20 +2,19 @@ name: CVE Scan
 
 on:
   push:
-    # Workflows triggered by Dependabot on the "push" event run with read-only access.
-    # Uploading Code Scanning results requires write access. We therefore only use the
-    # "pull_request" trigger for Dependabot branches.
-    branches-ignore:
-      - 'dependabot/**'
   pull_request:
     types:
       - opened
       - reopened
       - synchronize
   schedule:
-    - cron: '0 0 * * *'
+    - cron: "14 3 * * 1-5"
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   scan:
     runs-on: ubuntu-latest

.github/workflows/documentation.yml

@@ -1,8 +1,10 @@
 name: Documentation
 
 on:
-  push:
-    tags: ["**"]
+  workflow_run:
+    workflows: [Release]
+    types:
+      - completed
   workflow_dispatch:
 
 env:
@@ -16,7 +18,7 @@ permissions:
   id-token: write
 
 concurrency:
-  group: "pages"
+  group: ${{ github.workflow }}
   cancel-in-progress: false
 
 jobs:

.github/workflows/linting.yml

@@ -14,6 +14,10 @@ env:
   PIP_NO_CLEAN: on
   PIP_PREFER_BINARY: on
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     runs-on: ubuntu-latest

.github/workflows/open-code.yml

@@ -6,6 +6,10 @@ on:
     tags: ["**"]
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
   sync:
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -21,15 +21,18 @@ env:
 
 permissions:
   contents: write
+  packages: write
 
 concurrency:
-  group: "release"
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
 jobs:
   release:
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    outputs:
+      tag: ${{ steps.release.outputs.tag }}
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4
@@ -72,7 +75,58 @@ jobs:
           git config --local commit.gpgsign true
 
       - name: Release new version
+        id: release
         env:
           GH_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}
         run: |
           pdm release ${{ inputs.version }}
+          echo "tag=$(git describe --abbrev=0 --tags)" >> "$GITHUB_OUTPUT"
+
+  containerize:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    needs: release
+    steps:
+      - name: Build, tag and push docker image to ghcr
+        uses: GlueOps/github-actions-build-push-containers@v0.4.2
+        with:
+          tags: "${{ github.sha }},${{ needs.release.outputs.tag }},latest"
+
+  distribute:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    needs: release
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Cache requirements
+        uses: actions/cache@v4
+        env:
+          cache-name: cache-requirements
+        with:
+          path: ~/.cache/pip
+          key: ${{ env.cache-name }}-${{ hashFiles('requirements.txt') }}
+          restore-keys: |
+            ${{ env.cache-name }}-
+
+      - name: Setup python
+        uses: actions/setup-python@v5
+        with:
+          python-version: 3.11
+
+      - name: Install requirements
+        run: make setup
+
+      - name: Build wheel and sdist distros and create a github release
+        env:
+          GH_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}
+          PDM_CHECK_UPDATE: False
+        run: |
+          gh release create ${{ needs.release.outputs.tag }} --generate-notes --latest --verify-tag
+          pdm build --dest dist
+          for filename in dist/*; do
+            gh release upload ${{ needs.release.outputs.tag }} ${filename};
+          done

.github/workflows/renovatebot.yml

@@ -4,10 +4,13 @@ on:
   push:
     branches: ["main"]
   schedule:
-    # * is a special character in YAML so you have to quote this string
     - cron: "14 3 * * 1-5"
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
   renovate:
     runs-on: ubuntu-latest

.github/workflows/reviewing.yml

@@ -6,6 +6,10 @@ on:
       - opened
       - reopened
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   assignee:
     runs-on: ubuntu-latest

.github/workflows/testing.yml

@@ -14,6 +14,10 @@ env:
   PIP_NO_CLEAN: on
   PIP_PREFER_BINARY: on
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   test:
     runs-on: ubuntu-latest

.gitignore

@@ -124,4 +124,5 @@ dmypy.json
 data/
 identity.csv
 schema.json
+tmp*/
 work/

.pre-commit-config.yaml

@@ -12,7 +12,7 @@ repos:
       - id: ruff
         args: [--fix, --exit-non-zero-on-fix]
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
+    rev: v4.6.0
     hooks:
       - id: pretty-format-json
         name: json

Dockerfile

@@ -2,9 +2,11 @@
 
 FROM python:3.11 as base
 
-LABEL org.opencontainers.image.authors="RKI MEx Team <mex@rki.de>"
+LABEL org.opencontainers.image.authors="mex@rki.de"
 LABEL org.opencontainers.image.description="Backend server for the RKI metadata exchange."
 LABEL org.opencontainers.image.licenses="MIT"
+LABEL org.opencontainers.image.url="https://github.com/robert-koch-institut/mex-backend"
+LABEL org.opencontainers.image.vendor="robert-koch-institut"
 
 ENV PYTHONUNBUFFERED=1
 ENV PYTHONOPTIMIZE=1

pyproject.toml

@@ -10,9 +10,9 @@ requires-python = "<3.13,>=3.11"
 dependencies = [
     "fastapi==0.111.0",
     "httpx==0.27.0",
-    "mex-common@git+https://github.com/robert-koch-institut/mex-common.git@0.27.0",
+    "mex-common@git+https://github.com/robert-koch-institut/mex-common.git@0.27.1",
     "neo4j==5.21.0",
-    "pydantic==2.7.3",
+    "pydantic==2.7.4",
     "uvicorn[standard]==0.30.1",
 ]
 optional-dependencies.dev = [