add dependabot and update workflows

Signed-off-by: Rafał Safin <rafal.safin@rafsaf.pl>

Author: Rafał Safin

.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    allow:
+      - dependency-type: "all"
+    groups:
+      all-dependencies:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "pytest-asyncio"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/dev_build.yml

@@ -0,0 +1,36 @@
+name: dev-build
+on:
+  workflow_run:
+    workflows: ["tests"]
+    branches: [main]
+    types:
+      - completed
+
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Docker image tag"
+        required: true
+        default: "latest"
+
+env:
+  IMAGE_TAG: ${{ github.event.inputs.tag || 'latest' }}
+
+jobs:
+  dev_build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USER }}
+          password: ${{ secrets.DOCKER_PASS }}
+
+      - name: Build and push image
+        uses: docker/build-push-action@v5
+        with:
+          file: Dockerfile
+          push: true
+          tags: rafsaf/minimal-fastapi-postgres-template:${{ env.IMAGE_TAG }}

.github/workflows/manual_build_docker_image.yml

@@ -1,11 +1,14 @@
-name: Run tests
-
+name: tests
 on:
   push:
+    branches:
+      - "**"
+    tags-ignore:
+      - "*.*"
 
 jobs:
-  build:
-    runs-on: ubuntu-20.04
+  tests:
+    runs-on: ubuntu-latest
     services:
       postgres:
         image: postgres
@@ -17,35 +20,37 @@ jobs:
           --health-timeout 5s
           --health-retries 5
         ports:
-          - 31234:5432
+          - 5432:5432
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
-          python-version: "3.12"
+          python-version: "3.12.2"
 
       - name: Install Poetry
         uses: snok/install-poetry@v1
         with:
           virtualenvs-create: true
-          virtualenvs-in-project: true
+          virtualenvs-in-project: false
+          virtualenvs-path: /opt/venv
 
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
-          path: .venv
-          key: venv-${{ runner.os }}-${{ hashFiles('poetry.lock') }}
+          path: /opt/venv
+          key: venv-${{ runner.os }}-python-3.12.2-${{ hashFiles('poetry.lock') }}
 
-      - name: Run poetry install
+      - name: Install dependencies and actiavte virtualenv
         if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
         run: |
           poetry install --no-interaction --no-root
 
       - name: Run tests
         env:
+          SECURITY__JWT_SECRET_KEY: very-not-secret
           DATABASE__HOSTNAME: localhost
           DATABASE__PASSWORD: postgres
         run: |

.github/workflows/tests.yml

@@ -0,0 +1,51 @@
+name: type-check
+on:
+  push:
+    branches:
+      - "**"
+    tags-ignore:
+      - "*.*"
+
+jobs:
+  type_check:
+    strategy:
+      matrix:
+        check: ["ruff check", "mypy --check", "ruff format --check"]
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12.2"
+
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          virtualenvs-create: true
+          virtualenvs-in-project: false
+          virtualenvs-path: /opt/venv
+
+      - name: Load cached venv
+        id: cached-poetry-dependencies
+        uses: actions/cache@v4
+        with:
+          path: /opt/venv
+          key: venv-${{ runner.os }}-python-3.12.2-${{ hashFiles('poetry.lock') }}
+
+      - name: Install dependencies and actiavte virtualenv
+        if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
+        run: |
+          poetry install --no-interaction --no-root
+
+      - name: Run ${{ matrix.check }}
+        run: |
+          poetry run ${{ matrix.check }} .

.github/workflows/type_check.yml

@@ -1,11 +1,11 @@
-FROM python:3.12.1-slim-bullseye as base
+FROM python:3.12.2-slim-bullseye as base
 
 ENV PYTHONUNBUFFERED 1
 WORKDIR /build
 
 # Create requirements.txt file
 FROM base as poetry
-RUN pip install poetry==1.7.1
+RUN pip install poetry==1.8.2
 COPY poetry.lock pyproject.toml ./
 RUN poetry export -o /requirements.txt --without-hashes