Merge branch 'main' into remove-openai-custom-providers

Author: PyContriver

.config/dictionary.txt

@@ -11,6 +11,7 @@ Fqcn
 Fqcns
 Infiles
 KUBEDOCK
+Konflux
 LIGHTSPEED
 Lightspeed
 Lightspeed's
@@ -20,6 +21,7 @@ Modelines
 Npmjs
 OPTSTRING
 PKGMGR
+PYCMD
 PYTHONBREAKPOINT
 RHSSO
 TASKFILE
@@ -29,6 +31,7 @@ Tomasz
 Towncrier
 antsibull
 autofetch
+bindep
 cfgs
 checode
 chromedriver
@@ -38,6 +41,7 @@ contentmatch
 contentmatches
 contentmatching
 coreutils
+cpython
 dedupe
 depcheck
 devfile
@@ -52,6 +56,7 @@ hostsvars
 hostvars
 icontent
 johndoe
+konflux
 lextudio
 libgbm
 libonig
@@ -88,6 +93,7 @@ servernum
 shiki
 showformat
 sonarcloud
+sshpass
 suboption
 suboptions
 sysninja

.config/mise.toml

@@ -24,6 +24,7 @@ _.file = { path = ".env", tools = true }
 # Needs to be enabled for hooks to work
 experimental = true
 idiomatic_version_file_enable_tools = ["python"]
+lockfile = true
 
 [tools]
 gh = "latest"

.dockerignore

@@ -1,6 +1,10 @@
-*
-!.pre-commit-config.yaml
-!.python-version
-!.config/mise*.*
-!pyproject.toml
-!uv.lock
+# Used by both Containerfile and vscode-ansible.Containerfile
+*.vsix
+.cache/
+.ruff_cache/
+.trunk/
+.vscode-test/
+node_modules/
+out/
+site
+.git/hooks/

.gitattributes

@@ -1,7 +1,9 @@
 # Set default behavior to automatically normalize line endings.
 * text=auto eol=lf
-*.mp4 filter=lfs diff=lfs merge=lfs -text
-*.webp filter=lfs diff=lfs merge=lfs -text
-*.webm filter=lfs diff=lfs merge=lfs -text
-*.gif filter=lfs diff=lfs merge=lfs -text
-*.png filter=lfs diff=lfs merge=lfs -text
+
+# Binary files - no text normalization
+*.mp4 binary
+*.webp binary
+*.webm binary
+*.gif binary
+*.png binary

.github/actions/setup/action.yml

@@ -8,7 +8,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+    - uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1
       with:
         experimental: true
         reshim: true
@@ -28,10 +28,10 @@ runs:
         path: |
           ~/.cache/pip
           ~/.cache/uv
-        key: py-${{ env.IMAGE_OS_VERSION }}-${{ matrix.task-name }}-${{ hashFiles('uv.lock', '.python_version') }}
+        key: py-${{ env.IMAGE_OS_VERSION }}-${{ matrix.task-name }}-${{ hashFiles('uv.lock', '.python-version') }}
 
     - name: Enable caching for pre-commit
-      if: ${{ inputs.jop_name == 'lint' || inputs.job_name == 'preflight' }}
+      if: ${{ inputs.job_name == 'lint' || inputs.job_name == 'preflight' }}
       uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ~/.cache/pre-commit/

.github/workflows/builder.yml

@@ -0,0 +1,56 @@
+name: builder
+on:
+  push:
+    branches:
+      - main
+      - "releases/**"
+      - "stable/**"
+    paths:
+      - .config/mise*.toml
+      - .dockerignore
+      - .pre-commit-config.yaml
+      - .python-version
+      - Containerfile
+      - package*.json
+      - pyproject.toml
+      - tools/builder.sh
+      - uv.lock
+  pull_request:
+    types: [synchronize, opened, reopened]
+    branches: ["main", "devel/*"]
+    paths:
+      - .config/mise*.toml
+      - .dockerignore
+      - .pre-commit-config.yaml
+      - .python-version
+      - Containerfile
+      - package*.json
+      - pyproject.toml
+      - tools/builder.sh
+      - uv.lock
+jobs:
+  builder-image:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@v7
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push container image
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: ./tools/builder.sh ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' && '--push' || '' }}

.github/workflows/ci.yaml

@@ -45,14 +45,15 @@ jobs:
   preflight:
     runs-on: ubuntu-24.04
     container:
-      image: ghcr.io/jdx/mise:latest
+      image: ghcr.io/ansible/ext-builder:latest
       env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         MISE_TRUSTED_CONFIG_PATHS: /
     continue-on-error: false
     outputs:
       commit_context: ${{ steps.extract_context.outputs.context }}
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: 0 # we need tags for dynamic versioning
           show-progress: false
@@ -70,6 +71,10 @@ jobs:
           mise exec -- printenv NODE_OPTIONS || true
           task setup
 
+      - name: Install ansible-dev-tools
+        run: |
+          pip install ansible-dev-tools
+
       - name: Extract commit context from conventional commit
         id: extract_context
         shell: bash
@@ -103,18 +108,30 @@ jobs:
           task build
 
       - name: Run context-specific command
-        if: steps.extract_context.outputs.context != '' && steps.extract_context.outputs.context != 'build'
+        if: >-
+          steps.extract_context.outputs.context != '' &&
+          !contains(fromJSON('["build", "deps", "docs", "lint"]'), steps.extract_context.outputs.context)
         run: |
-          task ${{ steps.extract_context.outputs.context }}"
+          task ${{ steps.extract_context.outputs.context }}
 
       - name: task lint
-        timeout-minutes: 2 # expected under 1 minutes
+        timeout-minutes: 4
         run: |
           task lint
 
+      - name: task docs
+        timeout-minutes: 1
+        run: |
+          task docs
+
+      - name: task package
+        timeout-minutes: 2
+        run: |
+          task package
+
   build:
     name: ${{ matrix.name }}
-    needs: preflight
+
     environment: ci
     env:
       SKIP_DOCKER: ${{ matrix.env.SKIP_DOCKER || 0 }}
@@ -144,23 +161,13 @@ jobs:
         os:
           - ubuntu-24.04
         task-name:
-          - docs
+          - test (linux)
         name:
-          - docs
+          - test (linux)
         include:
-          - name: lint
-            task-name: lint
-            os: ubuntu-24.04
-            env:
-              SKIP_PODMAN: 1
-              SKIP_DOCKER: 1
-
-          - name: test (linux)
-            task-name: test
-
           - name: test (macos)
             task-name: test
-            os: macos-13-large
+            os: macos-15-large
             env:
               SKIP_PODMAN: 1
               SKIP_DOCKER: 1
@@ -176,7 +183,7 @@ jobs:
               SKIP_PODMAN: 1
               SKIP_DOCKER: 1
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: 0 # we need tags for dynamic versioning
           show-progress: false
@@ -480,21 +487,21 @@ jobs:
 
     steps:
       - name: Checkout Source # needed by codecov uploader
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: 0
 
       - name: Merge logs into a single archive
         if: ${{ !failure() }}
-        uses: actions/upload-artifact/merge@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact/merge@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: logs.zip
           pattern: logs-*.zip
           separate-directories: true
           delete-merged: true
 
       - name: Download artifacts
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           path: .
 
@@ -590,7 +597,7 @@ jobs:
         run: |
           if [ -n "$SLACK_WEBHOOK_URL" ]; then
             curl -X POST -H 'Content-type: application/json' \
-              --data "{\"text\":\" Python tests failed in jobs: test for '${GITHUB_REPOSITORY}' (tox.yml). Check logs: '${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}'\"}" \
+              --data "{\"text\":\" Main branch tests failed on `${GITHUB_REPOSITORY}`. Check [logs](${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID})\"}" \
               $SLACK_WEBHOOK_URL
           fi
 
@@ -602,7 +609,7 @@ jobs:
       - check
     steps:
       - name: Checkout Source
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: 0
 
@@ -611,16 +618,16 @@ jobs:
           corepack enable
           npm config set fund false
 
-      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+      - uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1
 
       - name: Download the artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: ansible-extension-build-${{ github.event.number || github.run_id }}.zip
 
       - name: Attach vsix to Github release
         # cspell: ignore softprops
-        uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3
+        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2
         if: github.ref_type == 'tag'
         with:
           files: "*.vsix"
@@ -650,11 +657,11 @@ jobs:
       - check
     steps:
       - name: Download the artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: "@ansible-ansible-language-server-build-${{ github.event.number || github.run_id }}.tgz"
 
-      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+      - uses: jdx/mise-action@9dc7d5dd454262207dea3ab5a06a3df6afc8ff26 # v3.4.1
 
       - run: npm publish --access public @ansible-ansible-language-server-*.tgz
         env:

.markdownlint-cli2.jsonc

@@ -0,0 +1,3 @@
+{
+  "gitignore": true
+}

.markdownlintignore

@@ -0,0 +1,3 @@
+node_modules
+packages/ansible-mcp-server/node_modules
+docs/als/settings.md