Bring project scaffolding up to date with current conventions #57

New issue

Closed

opened 2026-07-20 08:25:54 +00:00 by marvin8 · 2 comments

marvin8 commented

2026-07-20 08:25:54 +00:00

(Migrated from codeberg.org)

Apply maintenance tasks from the 2026-07-19/20 sessions that have been applied to other projects:

Update AGENTS.md: fix heading, stale dependency references, trim duplicated Release Notes rules
Align pre-commit hook versions with pyproject.toml (complexipy) and rename legacy ruff hook
Replace .gitleaks.toml stale allowlist with standard form
Remove .editorconfig insert_final_newline override for JSON
Add checksum verification to CI gitleaks step
Switch CI deploy-docs trigger from push to release event
Add publish-container job to CI
Add OCI labels to Containerfile
Stop committing after fediverse-post (leave unstaged for next piece of work)
Add --annotation flags to justfile publish-container
Add missing README badges (ty, complexipy, AI-DECLARATION)

Apply maintenance tasks from the 2026-07-19/20 sessions that have been applied to other projects: - Update AGENTS.md: fix heading, stale dependency references, trim duplicated Release Notes rules - Align pre-commit hook versions with pyproject.toml (complexipy) and rename legacy ruff hook - Replace .gitleaks.toml stale allowlist with standard form - Remove .editorconfig insert_final_newline override for JSON - Add checksum verification to CI gitleaks step - Switch CI deploy-docs trigger from push to release event - Add publish-container job to CI - Add OCI labels to Containerfile - Stop committing after fediverse-post (leave unstaged for next piece of work) - Add --annotation flags to justfile publish-container - Add missing README badges (ty, complexipy, AI-DECLARATION)

marvin8 commented

2026-07-20 08:26:11 +00:00

(Migrated from codeberg.org)

Findings

Already in place

constraint-dependencies for transitive vulnerability fixes
CI renamed to ci.yml with merged pr-review job (WuMing)
CLAUDE.md → AGENTS.md symlink
Release-Notes.md.template, release recipe with ### Commits section
fediverse-validate and fediverse-post recipes
AI-DECLARATION.md, ruff.toml, LICENSE.md
noxfile.py beta sessions install same test plugins as main
uv_build floor current (>=0.11.0,<0.12.0)

Needs work

AGENTS.md — heading says 'Claude Code Instructions', should match filename. Key Dependencies lists httpx/typer/minimal-activitypub (stale — now cyclopts/longwei/msgspec). Release Notes section duplicates global AGENTS.md rules.
.pre-commit-config.yaml — complexipy rev v5.1.0 mismatched with pyproject.toml ~=6.0.1. Ruff hook id uses legacy 'ruff' alias instead of 'ruff-check'.
.gitleaks.toml — stale allowlist with a commit hash; replace with standard form (title + extend useDefault).
.editorconfig — insert_final_newline = ignore for [*.json] conflicts with end-of-file-fixer hook.
CI (ci.yml) — gitleaks step uses curl|tar without checksum verification. deploy-docs triggered on push instead of release. No publish-container job.
Containerfile — only has LABEL maintainer, no OCI labels.
justfile — fediverse-post commits and pushes after reset (should leave unstaged). publish-container recipe lacks --annotation flags.
README.md — missing ty, complexipy, and AI-DECLARATION badges.
ruff.toml — target-version py310 should be py312 (requires-python >=3.12), TID252 not enabled. Listed as off-limits in AGENTS.md; flagged for manual update.
Source files — no per-file directives in src/ (D100/D101/D103/D104 pattern).

Dependency bumps

Several packages have updates within <7 days (zaojun min-age). No urgent bumps needed. complexipy pre-commit rev alignment covers the only actionable item.

Plan

Branch:

Commits (in order):

📝 Update AGENTS.md — fix heading, stale deps, trim Release Notes duplication
🔧 Align pre-commit hooks — complexipy v6.0.1, ruff → ruff-check
🔧 Replace .gitleaks.toml stale allowlist with standard form
🔧 Remove insert_final_newline override for JSON in .editorconfig
🔧 Add checksum verification to CI gitleaks step; switch deploy-docs to release trigger
✨ Add publish-container job to CI
🔧 Add OCI labels to Containerfile and --annotation flags to justfile
🔧 Don't commit after fediverse-post; leave unstaged for next piece of work
📝 Add ty, complexipy, AI-DECLARATION badges to README
🔧 Add per-file ruff noqa directives to src/

PR: fj --host https://codeberg.org pr create "Bring project scaffolding up to date with current conventions" --base main --head wrench/issue-57-scaffolding-alignment -r MarvinsMastodonTools/fedinesia --body "Closes #57"

## Findings ### Already in place - constraint-dependencies for transitive vulnerability fixes - CI renamed to ci.yml with merged pr-review job (WuMing) - CLAUDE.md → AGENTS.md symlink - Release-Notes.md.template, release recipe with ### Commits section - fediverse-validate and fediverse-post recipes - AI-DECLARATION.md, ruff.toml, LICENSE.md - noxfile.py beta sessions install same test plugins as main - uv_build floor current (>=0.11.0,<0.12.0) ### Needs work 1. **AGENTS.md** — heading says 'Claude Code Instructions', should match filename. Key Dependencies lists httpx/typer/minimal-activitypub (stale — now cyclopts/longwei/msgspec). Release Notes section duplicates global AGENTS.md rules. 2. **.pre-commit-config.yaml** — complexipy rev v5.1.0 mismatched with pyproject.toml ~=6.0.1. Ruff hook id uses legacy 'ruff' alias instead of 'ruff-check'. 3. **.gitleaks.toml** — stale allowlist with a commit hash; replace with standard form (title + extend useDefault). 4. **.editorconfig** — insert_final_newline = ignore for [*.json] conflicts with end-of-file-fixer hook. 5. **CI (ci.yml)** — gitleaks step uses curl|tar without checksum verification. deploy-docs triggered on push instead of release. No publish-container job. 6. **Containerfile** — only has LABEL maintainer, no OCI labels. 7. **justfile** — fediverse-post commits and pushes after reset (should leave unstaged). publish-container recipe lacks --annotation flags. 8. **README.md** — missing ty, complexipy, and AI-DECLARATION badges. 9. **ruff.toml** — target-version py310 should be py312 (requires-python >=3.12), TID252 not enabled. Listed as off-limits in AGENTS.md; flagged for manual update. 10. **Source files** — no per-file directives in src/ (D100/D101/D103/D104 pattern). ### Dependency bumps Several packages have updates within <7 days (zaojun min-age). No urgent bumps needed. complexipy pre-commit rev alignment covers the only actionable item. ## Plan **Branch:** **Commits (in order):** 1. :memo: Update AGENTS.md — fix heading, stale deps, trim Release Notes duplication 2. :wrench: Align pre-commit hooks — complexipy v6.0.1, ruff → ruff-check 3. :wrench: Replace .gitleaks.toml stale allowlist with standard form 4. :wrench: Remove insert_final_newline override for JSON in .editorconfig 5. :wrench: Add checksum verification to CI gitleaks step; switch deploy-docs to release trigger 6. :sparkles: Add publish-container job to CI 7. :wrench: Add OCI labels to Containerfile and --annotation flags to justfile 8. :wrench: Don't commit after fediverse-post; leave unstaged for next piece of work 9. :memo: Add ty, complexipy, AI-DECLARATION badges to README 10. :wrench: Add per-file ruff noqa directives to src/ **PR:** `fj --host https://codeberg.org pr create "Bring project scaffolding up to date with current conventions" --base main --head wrench/issue-57-scaffolding-alignment -r MarvinsMastodonTools/fedinesia --body "Closes #57"`

marvin8 commented

2026-07-20 08:26:28 +00:00

(Migrated from codeberg.org)

Findings

Already in place

constraint-dependencies for transitive vulnerability fixes
CI renamed to ci.yml with merged pr-review job (WuMing)
CLAUDE.md → AGENTS.md symlink
Release-Notes.md.template, release recipe with ### Commits section
fediverse-validate and fediverse-post recipes
AI-DECLARATION.md, ruff.toml, LICENSE.md
noxfile.py beta sessions install same test plugins as main
uv_build floor current (>=0.11.0,<0.12.0)

Needs work

AGENTS.md — heading says "Claude Code Instructions", should match filename. Key Dependencies lists httpx/typer/minimal-activitypub (stale — now cyclopts/longwei/msgspec). Release Notes section duplicates global AGENTS.md rules.
.pre-commit-config.yaml — complexipy rev v5.1.0 mismatched with pyproject.toml ~=6.0.1. Ruff hook id uses legacy "ruff" alias instead of "ruff-check".
.gitleaks.toml — stale allowlist with a commit hash; replace with standard form (title + extend useDefault).
.editorconfig — insert_final_newline = ignore for JSON conflicts with end-of-file-fixer hook.
CI (ci.yml) — gitleaks step uses curl|tar without checksum verification. deploy-docs triggered on push instead of release. No publish-container job.
Containerfile — only has LABEL maintainer, no OCI labels.
justfile — fediverse-post commits and pushes after reset (should leave unstaged). publish-container recipe lacks --annotation flags.
README.md — missing ty, complexipy, and AI-DECLARATION badges.
ruff.toml — target-version py310 should be py312 (requires-python >=3.12), TID252 not enabled. Listed as off-limits in AGENTS.md; flagged for manual update.
Source files — no per-file # ruff: noqa: directives in src/ (D100/D101/D103/D104 pattern).

Dependency bumps

Several packages have updates within <7 days (zaojun min-age). No urgent bumps needed. complexipy pre-commit rev alignment covers the only actionable item.

Plan

Branch: wrench/issue-57-scaffolding-alignment

Commits (in order):

📝 Update AGENTS.md — fix heading, stale deps, trim Release Notes duplication
🔧 Align pre-commit hooks — complexipy v6.0.1, ruff → ruff-check
🔧 Replace .gitleaks.toml stale allowlist with standard form
🔧 Remove insert_final_newline override for JSON in .editorconfig
🔧 Add checksum verification to CI gitleaks step; switch deploy-docs to release trigger
✨ Add publish-container job to CI
🔧 Add OCI labels to Containerfile and --annotation flags to justfile
🔧 Don't commit after fediverse-post; leave unstaged for next piece of work
📝 Add ty, complexipy, AI-DECLARATION badges to README
🔧 Add per-file ruff noqa directives to src/

PR: fj pr create with --head wrench/issue-57-scaffolding-alignment targeting main, body includes Closes #57

## Findings ### Already in place - constraint-dependencies for transitive vulnerability fixes - CI renamed to ci.yml with merged pr-review job (WuMing) - CLAUDE.md → AGENTS.md symlink - Release-Notes.md.template, release recipe with ### Commits section - fediverse-validate and fediverse-post recipes - AI-DECLARATION.md, ruff.toml, LICENSE.md - noxfile.py beta sessions install same test plugins as main - uv_build floor current (>=0.11.0,<0.12.0) ### Needs work 1. **AGENTS.md** — heading says "Claude Code Instructions", should match filename. Key Dependencies lists httpx/typer/minimal-activitypub (stale — now cyclopts/longwei/msgspec). Release Notes section duplicates global AGENTS.md rules. 2. **.pre-commit-config.yaml** — complexipy rev v5.1.0 mismatched with pyproject.toml ~=6.0.1. Ruff hook id uses legacy "ruff" alias instead of "ruff-check". 3. **.gitleaks.toml** — stale allowlist with a commit hash; replace with standard form (title + extend useDefault). 4. **.editorconfig** — insert_final_newline = ignore for JSON conflicts with end-of-file-fixer hook. 5. **CI (ci.yml)** — gitleaks step uses curl|tar without checksum verification. deploy-docs triggered on push instead of release. No publish-container job. 6. **Containerfile** — only has LABEL maintainer, no OCI labels. 7. **justfile** — fediverse-post commits and pushes after reset (should leave unstaged). publish-container recipe lacks --annotation flags. 8. **README.md** — missing ty, complexipy, and AI-DECLARATION badges. 9. **ruff.toml** — target-version py310 should be py312 (requires-python >=3.12), TID252 not enabled. Listed as off-limits in AGENTS.md; flagged for manual update. 10. **Source files** — no per-file `# ruff: noqa:` directives in src/ (D100/D101/D103/D104 pattern). ### Dependency bumps Several packages have updates within <7 days (zaojun min-age). No urgent bumps needed. complexipy pre-commit rev alignment covers the only actionable item. ## Plan **Branch:** `wrench/issue-57-scaffolding-alignment` **Commits (in order):** 1. :memo: Update AGENTS.md — fix heading, stale deps, trim Release Notes duplication 2. :wrench: Align pre-commit hooks — complexipy v6.0.1, ruff → ruff-check 3. :wrench: Replace .gitleaks.toml stale allowlist with standard form 4. :wrench: Remove insert_final_newline override for JSON in .editorconfig 5. :wrench: Add checksum verification to CI gitleaks step; switch deploy-docs to release trigger 6. :sparkles: Add publish-container job to CI 7. :wrench: Add OCI labels to Containerfile and --annotation flags to justfile 8. :wrench: Don't commit after fediverse-post; leave unstaged for next piece of work 9. :memo: Add ty, complexipy, AI-DECLARATION badges to README 10. :wrench: Add per-file ruff noqa directives to src/ **PR:** fj pr create with `--head wrench/issue-57-scaffolding-alignment` targeting main, body includes `Closes #57`