chore: update CI config

Author: ssbarnea

.github/dependabot.yml

@@ -1,2 +1,3 @@
-# see https://github.com/ansible-community/devtools
-_extends: ansible-community/devtools
+---
+# see https://github.com/ansible/team-devtools
+_extends: ansible/team-devtools

.github/release-drafter.yml

@@ -1,4 +1,3 @@
----
 # See https://github.com/ansible/team-devtools/blob/main/.github/workflows/ack.yml
 name: ack
 
@@ -13,3 +12,4 @@ on:
 jobs:
   ack:
     uses: ansible/team-devtools/.github/workflows/ack.yml@main
+    secrets: inherit

.github/workflows/ack.yml

@@ -1,73 +1,44 @@
 ---
 name: tox
 
-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#concurrency
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
 on:
-  push: # only publishes pushes to the main branch to TestPyPI
-    branches: # any integration branch but not tag
+  merge_group:
+    branches:
+      - "main"
+  push:
+    branches:
       - "main"
   pull_request:
+    branches:
+      - "main"
+  schedule:
+    - cron: "0 0 * * *"
+  workflow_call:
 
-jobs:
-  pre:
-    name: pre
-    runs-on: ubuntu-24.04
-    outputs:
-      matrix: ${{ steps.generate_matrix.outputs.matrix }}
-    steps:
-      - name: Determine matrix
-        id: generate_matrix
-        uses: coactions/dynamic-matrix@v1
-        with:
-          min_python: "3.10"
-          max_python: "3.13"
-          default_python: "3.13" # used by jobs in other_names
-          other_names: |
-            lint
-            pkg
-            devel
-  build:
-    name: ${{ matrix.name }}
-    runs-on: ubuntu-24.04
-    needs: pre
-    env:
-      PYTEST_REQPASS: 14
-    strategy:
-      fail-fast: false
-      matrix: ${{ fromJson(needs.pre.outputs.matrix) }}
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0 # needed by setuptools-scm
-
-      - name: Install Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python_version }}
-
-      - name: Install dependencies
-        run: |
-          python -m pip install -U pip
-          pip install 'tox>=4.2.3'
-
-      - name: Run tox run -e ${{ matrix.passed_name }}
-        run: |
-          ${{ matrix.PREFIX }} tox run -e ${{ matrix.passed_name }}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
 
-  check: # This job does nothing and is only used for the branch protection
-    if: always()
+permissions:
+  checks: read
+  contents: read
+  id-token: write
+  packages: write
+  pull-requests: write
 
-    needs:
-      - build
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Decide whether the needed jobs succeeded or failed
-        uses: re-actors/alls-green@release/v1
-        with:
-          jobs: ${{ toJSON(needs) }}
+jobs:
+  tox:
+    uses: ansible/team-devtools/.github/workflows/tox.yml@main
+    with:
+      min_python: "3.10"
+      max_python: "3.13"
+      default_python: "3.13" # used by jobs in other_names
+      skip_explode: "1"
+      other_names: |
+        lint
+        pkg
+        devel
+        py310
+        py311
+        py312
+        py313

.github/workflows/tox.yml

@@ -138,3 +138,4 @@ patches
 *.patch
 *.orig
 *.rej
+.ansible

.gitignore

@@ -1,8 +1,12 @@
 ---
 ci:
+  # We rely on renovate to update it but there is no way to fully disable it
+  # https://github.com/pre-commit-ci/issues/issues/83
+  autoupdate_schedule: quarterly
   skip:
     # https://github.com/pre-commit-ci/issues/issues/55
     - ansible-lint
+    - renovate-config-validator # container limits
 exclude: >
   (?x)^(
     src/molecule_plugins/_version.py
@@ -11,9 +15,15 @@ default_language_version:
   python: python3
 minimum_pre_commit_version: 1.14.0
 repos:
-  - repo: https://github.com/pycontribs/mirrors-prettier
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 41.91.1
+    hooks:
+      - id: renovate-config-validator
+        alias: renovate
+        args: [--strict]
+  - repo: https://github.com/rbubley/mirrors-prettier
     # keep it before yamllint
-    rev: "v3.4.2"
+    rev: v3.6.2
     hooks:
       - id: prettier
         # Temporary excludes so we can gradually normalize the formatting
@@ -32,15 +42,16 @@ repos:
       - id: black
         language_version: python3
   - repo: https://github.com/pre-commit/pre-commit-hooks.git
-    rev: v4.5.0
+    rev: v6.0.0
     hooks:
       - id: end-of-file-fixer
       - id: trailing-whitespace
       - id: mixed-line-ending
-      - id: check-byte-order-marker
+      - id: fix-byte-order-marker
       - id: check-executables-have-shebangs
       - id: check-merge-conflict
       - id: debug-statements
+        language_version: python3
   - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: "v0.2.0"
     hooks:

.pre-commit-config.yaml

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>ansible/actions//config/renovate.json"]
+}