chore(deps): update from template

Author: helmut-hoffer-von-ankershoffen

.copier-answers.yml

@@ -1,4 +1,4 @@
-_commit: v0.8.15
+_commit: v0.8.27
 _src_path: gh:helmut-hoffer-von-ankershoffen/oe-python-template
 attestations_enabled: true
 author_email: helmuthva@gmail.com

.github/workflows/test-and-report.yml

@@ -26,7 +26,7 @@ jobs:
           wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
           echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
           sudo apt-get update
-          sudo apt-get install -y curl jq xsltproc gnupg2 trivy
+          sudo apt-get install -y curl jq xsltproc gnupg2 imagemagick trivy
 
       - name: Install project specific dependencies
         run: |

.github/workflows/test-scheduled.yml

@@ -0,0 +1,38 @@
+name: "CI Scheduled"
+
+on:
+  schedule:
+    - cron: '0 7 * * *'
+
+jobs:
+  test-scheduled:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
+        with:
+          version: "0.6.3"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+
+      - name: Install Python, venv and dependencies
+        run: |
+          uv sync --all-extras --frozen --link-mode=copy
+
+      - name: Create .env file
+        uses: SpicyPizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f # v2.0.3
+        with:
+          envkey_ENV_KEY: "ENV_VALUE"
+          fail_on_empty: true
+
+      - name: Run tests marked as scheduled
+        run: |
+          uv run --all-extras nox -s test -p 3.11 -- -m scheduled

.github/workflows/vercel-preview.yml

@@ -9,6 +9,10 @@ jobs:
   deploy-preview:
     if: "!contains(github.event.head_commit.message, '[skip ci]')"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      deployments: write
+      id-token: write  
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 

.github/workflows/vercel-production.yml

@@ -9,6 +9,10 @@ jobs:
   deploy-production:
     if: "!contains(github.event.head_commit.message, '[skip ci]')"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      deployments: write
+      id-token: write  
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 

.pre-commit-config.yaml

@@ -57,7 +57,7 @@ repos:
       - id: requirements-txt-fixer
         exclude: "dist_vercel/requirements.txt"
       - id: trailing-whitespace
-        exclude: "docs/source/_static|ATTRIBUTIONS.md"
+        exclude: "docs/source/_static|ATTRIBUTIONS.md||API_REFEREENCE"
   - repo: https://github.com/Yelp/detect-secrets
     rev: v1.5.0
     hooks:

.readthedocs.yml

@@ -9,7 +9,7 @@ version: 2
 sphinx:
   builder: html
   configuration: docs/source/conf.py
-  fail_on_warning: true
+  fail_on_warning: false
 
 # Formats of the documentation to be built
 formats: