Merge branch 'main' into copilot/fix-go-redis-processing-error

Author: thavaahariharangit

.devcontainer/core-dev/devcontainer.json

@@ -63,6 +63,9 @@
     "-v", "${localWorkspaceFolder}/nuget/dependabot-nuget.gemspec:/home/dependabot/dependabot-core/nuget/dependabot-nuget.gemspec",
     "-v", "${localWorkspaceFolder}/nuget/lib:/home/dependabot/dependabot-core/nuget/lib",
     "-v", "${localWorkspaceFolder}/nuget/spec:/home/dependabot/dependabot-core/nuget/spec",
+    "-v", "${localWorkspaceFolder}/pre_commit/dependabot-pre_commit.gemspec:/home/dependabot/dependabot-core/pre_commit/dependabot-pre_commit.gemspec",
+    "-v", "${localWorkspaceFolder}/pre_commit/lib:/home/dependabot/dependabot-core/pre_commit/lib",
+    "-v", "${localWorkspaceFolder}/pre_commit/spec:/home/dependabot/dependabot-core/pre_commit/spec",
     "-v", "${localWorkspaceFolder}/pub/dependabot-pub.gemspec:/home/dependabot/dependabot-core/pub/dependabot-pub.gemspec",
     "-v", "${localWorkspaceFolder}/pub/lib:/home/dependabot/dependabot-core/pub/lib",
     "-v", "${localWorkspaceFolder}/pub/spec:/home/dependabot/dependabot-core/pub/spec",

.github/ci-filters.yml

@@ -77,6 +77,9 @@ npm_and_yarn:
 nuget:
   - *shared
   - 'nuget/**'
+pre_commit:
+  - *shared
+  - 'pre_commit/**'
 pub:
   - *shared
   - 'pub/**'

.github/issue-labeler.yml

@@ -81,3 +81,6 @@
 
 "L: julia":
     - '(julia)'
+
+"L: pre:commit":
+    - '(pre_commit)'

.github/smoke-filters.yml

@@ -53,6 +53,9 @@ npm_and_yarn:
 nuget:
   - *common
   - 'nuget/**'
+pre_commit:
+  - *common
+  - 'pre_commit/**'
 python:
   - *common
   - 'python/**'

.github/smoke-matrix.json

@@ -94,6 +94,16 @@
     "test": "nuget-resolvability",
     "ecosystem": "nuget"
   },
+  {
+    "core": "opentofu",
+    "test": "opentofu",
+    "ecosystem": "opentofu"
+  },
+  {
+    "core": "pre_commit",
+    "test": "pre-commit",
+    "ecosystem": "pre-commit"
+  },
   {
     "core": "pub",
     "test": "pub",
@@ -119,11 +129,6 @@
     "test": "terraform",
     "ecosystem": "terraform"
   },
-  {
-    "core": "opentofu",
-    "test": "opentofu",
-    "ecosystem": "opentofu"
-  },
   {
     "core": "vcpkg",
     "test": "vcpkg",

.github/workflows/ci.yml

@@ -38,6 +38,7 @@ jobs:
           - { path: maven, name: maven, ecosystem: maven }
           - { path: npm_and_yarn, name: npm_and_yarn, ecosystem: npm }
           - { path: nuget, name: nuget, ecosystem: nuget }
+          - { path: pre_commit, name: pre_commit, ecosystem: pre-commit }
           - { path: pub, name: pub, ecosystem: pub }
           - { path: python, name: python_slow, ecosystem: pip }
           - { path: python, name: python, ecosystem: pip }

.github/workflows/images-branch.yml

@@ -79,6 +79,7 @@ jobs:
           - { name: maven, ecosystem: maven }
           - { name: npm_and_yarn, ecosystem: npm }
           - { name: nuget, ecosystem: nuget }
+          - { name: pre_commit, ecosystem: pre-commit }
           - { name: pub, ecosystem: pub }
           - { name: python, ecosystem: pip }
           - { name: rust_toolchain, ecosystem: rust-toolchain }

.github/workflows/images-latest.yml

@@ -56,6 +56,7 @@ jobs:
           - { name: maven, ecosystem: maven }
           - { name: npm_and_yarn, ecosystem: npm }
           - { name: nuget, ecosystem: nuget }
+          - { name: pre_commit, ecosystem: pre-commit }
           - { name: pub, ecosystem: pub }
           - { name: python, ecosystem: pip }
           - { name: rust_toolchain, ecosystem: rust-toolchain }

.yamllint.yaml

@@ -26,3 +26,4 @@ ignore:
   # TODO: VCR seems to be putting in bad indentation... need to track down why
   - "*/spec/fixtures/vcr_cassettes/*"
   - "helm/spec/fixtures/helm/*"
+  - "pre_commit/spec/fixtures/pre_commit_configs/*"

Dockerfile.updater-core

@@ -161,8 +161,10 @@ COPY --chown=dependabot:dependabot updater/Gemfile updater/Gemfile.lock dependab
 
 COPY --chown=dependabot:dependabot --parents */.bundle */*.gemspec common/lib/dependabot.rb LICENSE omnibus $DEPENDABOT_HOME
 
+# This ARG must be updated when adding/removing ecosystems - it invalidates Docker layer cache
+ARG ECOSYSTEM_LIST="bazel bun bundler cargo composer conda devcontainers docker docker_compose dotnet_sdk elm git_submodules github_actions go_modules gradle helm hex julia maven npm_and_yarn nuget opentofu pre_commit pub python rust_toolchain silent swift terraform uv vcpkg"
 # prevent having all the source in every ecosystem image
-RUN for ecosystem in git_submodules terraform github_actions hex elm docker docker_compose nuget maven gradle cargo composer go_modules python pub npm_and_yarn bundler silent swift devcontainers dotnet_sdk bun uv helm julia vcpkg rust_toolchain conda bazel opentofu; do \
+RUN for ecosystem in $ECOSYSTEM_LIST; do \
     mkdir -p $ecosystem/lib/dependabot; \
     touch $ecosystem/lib/dependabot/$ecosystem.rb; \
   done