[dependabot]

Bumps gojiplus/py-canon/.github/workflows/reusable-ci.yml from 21622c7d616fa4ae611f13e15db49764bae169d1 to a856c9da32b74c706c52a87a603d4c9dc04618a2.

Changelog

Sourced from gojiplus/py-canon/.github/workflows/reusable-ci.yml's changelog.

Changelog

All notable changes to this project are documented here.

The format follows Keep a Changelog. Release tags match the version committed in pyproject.toml; the fleet-facing v1 tag is a moving pointer advanced by the promote workflow after green CI, not a release of its own.

[Unreleased]

Removed

• reusable-release's publish job and its publish-pypi / testpypi inputs. PyPI trusted publishing cannot work from a reusable workflow, so no caller used it (checked across all 56 fleet release.yml files), but its id-token: write forced every caller to grant that permission to the reusable workflow. The template's release job no longer grants it; the caller's own publish job keeps it.

Changed

• Reusable CI runs preen 0.8.0. Its duplicate-code check runs jscpd instead of pylint's similarity checker, so it also catches copies within one module and copies with consistently renamed names; mark a deliberate copy with # jscpd:ignore-start/# jscpd:ignore-end, since # pylint: disable=duplicate-code no longer applies. Its audit check also scans optional-dependency extras. Through 0.7.2, deptree no longer counts imports inside functions or under if TYPE_CHECKING: as circular-import edges.
• Jobs outside the test matrix (lint, wheel, docs build, release test and build) request the lowest minor version requires-python allows, intersected with dependency groups' own requires-python (for example ==3.13.*,>=3.13). They used the runner's Python (3.12) when it qualified and otherwise the newest release uv could download: in-rolls/indicate (>=3.13) got Python 3.15, for which torch has no wheels, and every one of those jobs failed. A repo's .python-version or a caller's UV_PYTHON takes precedence.
• Reusable CI runs Preen 0.7.0, which adds two gates: duplicate-code (pylint's similarity checker, failing on 12+ lines copied between package modules) and US English in codespell. STANDARD.md describes both and no longer calls ruff the only linter. Before the bump, all 47 FLEET repositories were checked under 0.6.2 and 0.7.0: the only one that newly fails is themains/piedomains, on duplicate code.
• Docs carry content, not just configuration. The template's home page includes the README (after a <!-- SPHINX-START --> marker), the API page is an autosummary reference with one page per public object from __all__, and a changelog page includes CHANGELOG.md. configure() ships short-title autosummary templates. STANDARD.md now says what a docs site must contain, including a tested user guide for packages with more than one workflow.

... (truncated)

Commits

• a856c9d Give the README a descriptive title
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)