feat: improve workflow linting and update workflow files

.dockerignore

@@ -4,6 +4,7 @@
 # Include
 !alpine-packages.txt
 !Dockerfile
-!entrypoint.sh
 !LICENSE
 !README.md
+!entrypoint.sh
+!pip

.editorconfig

@@ -1,4 +1,3 @@
-# EditorConfig helps developers define and maintain consistent coding styles
 root = true
 
 [*]

.github/workflows/auto-release-create.yml

@@ -0,0 +1,32 @@
+name: (Automatic) Release Create
+
+on:
+  push:
+    branches:
+      - master
+      - main
+  workflow_dispatch:
+    inputs:
+      release_branch:
+        description: Release branch to publish from (e.g. release/v1.3.0)
+        required: false
+        default: ''
+        type: string
+      release_version:
+        description: Explicit release version override (e.g. v1.3.0)
+        required: false
+        default: ''
+        type: string
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-auto-release-create.yml@v1
+    with:
+      profile: actions
+      release-branch: ${{ inputs.release_branch }}
+      release-version: ${{ inputs.release_version }}
+    secrets: inherit

.github/workflows/manual-release-branch-prepare.yml

@@ -0,0 +1,39 @@
+name: (Manual) Release Branch Prepare
+
+on:
+  workflow_dispatch:
+    inputs:
+      type:
+        description: Bump type
+        required: false
+        default: patch
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+          - set
+      version:
+        description: Explicit version when type="set" (e.g., v1.2.3)
+        required: false
+        default: ''
+      build_only:
+        description: Build and push artifacts without version bump
+        required: false
+        default: false
+        type: boolean
+
+permissions:
+  contents: write
+  packages: write
+  pull-requests: write
+
+jobs:
+  call:
+    uses: devops-infra/.github/.github/workflows/reusable-manual-release-branch-prepare.yml@v1
+    with:
+      bump-type: ${{ inputs.type }}
+      explicit-version: ${{ inputs.version }}
+      build-and-push-only: ${{ inputs.build_only }}
+      profile: actions
+    secrets: inherit

.gitignore

@@ -1,11 +1,19 @@
 # Intellij
-/.idea/
+.idea/
 *.iml
 
 # Custom
+.DS_Store
 .tmp/
 .venv
 .venv/
 .envrc
 .env
 .tmp
+
+# Python
+build/
+dist/
+*.egg-info/
+*.pyc
+__py

.pre-commit-config.yaml

@@ -31,16 +31,16 @@ repos:
         pass_filenames: false
       - id: hadolint
         name: hadolint
-        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work hadolint/hadolint:latest-debian hadolint Dockerfile'
+        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work hadolint/hadolint:latest-debian /bin/hadolint "$@"' --
         language: system
-        pass_filenames: false
+        files: (^|/)Dockerfile(\..*)?$
       - id: shellcheck
         name: shellcheck
-        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work koalaman/shellcheck:stable -x -S style entrypoint.sh'
+        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work koalaman/shellcheck:stable -x -S style "$@"' --
         language: system
-        pass_filenames: false
+        files: \.sh$
       - id: yamllint
         name: yamllint
-        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work cytopia/yamllint -c .yamllint.yml .'
+        entry: bash -lc 'docker run --rm -v "$PWD:/work" -w /work cytopia/yamllint -c .yamllint.yml "$@"' --
         language: system
-        pass_filenames: false
+        files: \.(yml|yaml)$

.yamllint.yml

@@ -2,6 +2,7 @@ extends: default
 rules:
   empty-lines:
     max: 2
+    max-end: 1
   document-end:
     present: false
   document-start:
@@ -11,14 +12,12 @@ rules:
     indent-sequences: true
     check-multi-line-strings: false
   line-length:
-    max: 140
+    max: 220
     allow-non-breakable-inline-mappings: true
   new-line-at-end-of-file: enable
   new-lines:
     type: unix
-  quoted-strings:
-    required: only-when-needed
-    extra-allowed: ['true', 'false']
+  quoted-strings: disable
   trailing-spaces: {}
   truthy:
     allowed-values: ['true', 'false', 'yes', 'no']