python · hugovk · Jan 11, 2026 · Jan 2, 2026 · Jan 2, 2026
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -10,6 +10,8 @@ updates:
      pip:
        patterns:
          - "*"
+    cooldown:
+      default-days: 7

  - package-ecosystem: "github-actions"
    directory: "/"
@@ -21,3 +23,5 @@ updates:
      actions:
        patterns:
          - "*"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -2,12 +2,11 @@ name: Lint

 on: [push, pull_request, workflow_dispatch]

+permissions: {}
+
 env:
  FORCE_COLOR: 1

-permissions:
-  contents: read
-
 jobs:
  lint:
    runs-on: ubuntu-latest
@@ -16,7 +15,4 @@ jobs:
      - uses: actions/checkout@v6
        with:
          persist-credentials: false
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.x"
-      - uses: tox-dev/action-pre-commit-uv@v1
+      - uses: j178/prek-action@v1
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -0,0 +1,6 @@
+# https://docs.zizmor.sh/configuration/
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        "*": ref-pin
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -5,15 +5,33 @@ repos:
      - id: python-check-blanket-noqa

  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
+    rev: v6.0.0
    hooks:
      - id: check-added-large-files
      - id: check-case-conflict
      - id: check-merge-conflict
      - id: check-json
      - id: check-yaml
      - id: debug-statements
+      - id: end-of-file-fixer
      - id: forbid-submodules
+      - id: trailing-whitespace
+
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 0.36.0
+    hooks:
+      - id: check-dependabot
+      - id: check-github-workflows
+
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.7.10
+    hooks:
+      - id: actionlint
+
+  - repo: https://github.com/woodruffw/zizmor-pre-commit
+    rev: v1.19.0
+    hooks:
+      - id: zizmor

  - repo: meta
    hooks:

diff --git a/LICENSE b/LICENSE
@@ -199,4 +199,4 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-✕
+✕
diff --git a/static/fonts/fontawesome-webfont.svg b/static/fonts/fontawesome-webfont.svg
diff --git a/templates/base.html b/templates/base.html
@@ -53,4 +53,4 @@ <h5 class="my-0 mr-md-auto font-weight-normal"><a href="/howto">How do I use Blu
        <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js" integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
        <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js" integrity="sha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy" crossorigin="anonymous"></script>
    </body>
-</html>
+</html>
diff --git a/templates/error.html b/templates/error.html
@@ -4,4 +4,4 @@

    <h1>{{ status }}</h1>
    <h1> {{ error_message }}</h1>
-{% endblock %}
+{% endblock %}
diff --git a/templates/howto.html b/templates/howto.html
@@ -18,4 +18,4 @@
        </ol>
    </div>

-{% endblock %}
+{% endblock %}