chore: update CI config

Author: ssbarnea

.github/release-drafter.yml

@@ -1,2 +1,3 @@
-# see https://github.com/ansible-community/devtools
-_extends: ansible-community/devtools
+---
+# see https://github.com/ansible/team-devtools
+_extends: ansible/team-devtools

.github/workflows/ack.yml

@@ -1,4 +1,3 @@
----
 # See https://github.com/ansible/team-devtools/blob/main/.github/workflows/ack.yml
 name: ack
 
@@ -13,3 +12,4 @@ on:
 jobs:
   ack:
     uses: ansible/team-devtools/.github/workflows/ack.yml@main
+    secrets: inherit

.github/workflows/tox.yml

@@ -1,73 +1,44 @@
 ---
 name: tox
 
-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#concurrency
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
 on:
-  push: # only publishes pushes to the main branch to TestPyPI
-    branches: # any integration branch but not tag
+  merge_group:
+    branches:
+      - "main"
+  push:
+    branches:
       - "main"
   pull_request:
+    branches:
+      - "main"
+  schedule:
+    - cron: "0 0 * * *"
+  workflow_call:
 
-jobs:
-  pre:
-    name: pre
-    runs-on: ubuntu-24.04
-    outputs:
-      matrix: ${{ steps.generate_matrix.outputs.matrix }}
-    steps:
-      - name: Determine matrix
-        id: generate_matrix
-        uses: coactions/dynamic-matrix@v1
-        with:
-          min_python: "3.10"
-          max_python: "3.13"
-          default_python: "3.13" # used by jobs in other_names
-          other_names: |
-            lint
-            pkg
-            devel
-  build:
-    name: ${{ matrix.name }}
-    runs-on: ubuntu-24.04
-    needs: pre
-    env:
-      PYTEST_REQPASS: 14
-    strategy:
-      fail-fast: false
-      matrix: ${{ fromJson(needs.pre.outputs.matrix) }}
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0 # needed by setuptools-scm
-
-      - name: Install Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python_version }}
-
-      - name: Install dependencies
-        run: |
-          python -m pip install -U pip
-          pip install 'tox>=4.2.3'
-
-      - name: Run tox run -e ${{ matrix.passed_name }}
-        run: |
-          ${{ matrix.PREFIX }} tox run -e ${{ matrix.passed_name }}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
 
-  check: # This job does nothing and is only used for the branch protection
-    if: always()
+permissions:
+  checks: read
+  contents: read
+  id-token: write
+  packages: write
+  pull-requests: write
 
-    needs:
-      - build
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Decide whether the needed jobs succeeded or failed
-        uses: re-actors/alls-green@release/v1
-        with:
-          jobs: ${{ toJSON(needs) }}
+jobs:
+  tox:
+    uses: ansible/team-devtools/.github/workflows/tox.yml@main
+    with:
+      min_python: "3.10"
+      max_python: "3.13"
+      default_python: "3.13" # used by jobs in other_names
+      skip_explode: "1"
+      other_names: |
+        lint
+        pkg
+        devel
+        py310
+        py311
+        py312
+        py313

.gitignore

@@ -138,3 +138,4 @@ patches
 *.patch
 *.orig
 *.rej
+.ansible