- Add code-quality.yml: Black formatting check, flake8 linting, bandit security scan - Add dependabot.yml: weekly updates for pip deps and GitHub Actions - Add requirements-dev.txt: single source of truth for CI dependencies - Harden test.yml: add permissions, pip caching, use requirements-dev.txt - Add Black/flake8/bandit config to pyproject.toml (line-length=88)
12 lines
153 B
Plaintext
12 lines
153 B
Plaintext
# Runtime dependencies
|
|
watchdog>=2.1.0
|
|
Pillow>=8.0.0
|
|
aiohttp>=3.8.0
|
|
|
|
# Code quality
|
|
black>=24.0.0
|
|
flake8>=7.0.0
|
|
|
|
# Security scanning
|
|
bandit[toml]>=1.7.0
|