Merge develop to main

.github/ISSUE_TEMPLATE/feature_or_integration_request.yml

@@ -0,0 +1,62 @@
+name: Feature or Integration Request
+description: Request a new feature or integration
+title: "[FEATURE]: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: Thanks for the suggestion. Share as much context as you can so we can assess and prioritise it.
+
+  - type: dropdown
+    id: request-type
+    attributes:
+      label: Request type
+      description: Is this a product feature or an integration request?
+      options:
+        - Feature
+        - Integration
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      description: Which area does this request apply to?
+      options:
+        - Model provider
+        - Logging platform
+        - Remote code repository
+        - Notification channel
+        - Remote deployment target
+        - CLI/UX
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: What problem are you trying to solve?
+      description: Tell us what is missing today and why it matters.
+      placeholder: We need...
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What would you like to see implemented?
+      placeholder: It would help if...
+    validations:
+      required: true
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Extra context
+      description: Include links, examples, constraints, or anything else useful.
+      placeholder: Related docs, APIs, screenshots, etc.
+    validations:
+      required: false

.github/workflows/ci.yml

@@ -17,62 +17,53 @@ on:
 
 jobs:
   pre-commit:
-    name: Pre-commit CI
+    name: Pre-commit Hooks CI
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version: ["3.12"]
-    timeout-minutes: 15
+    timeout-minutes: 10
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - name: Setup Python
-        uses: actions/setup-python@v4
+      - name: "Set up Python"
+        uses: actions/setup-python@v6
         with:
-          python-version: ${{ matrix.python-version }}
+          python-version-file: "pyproject.toml"
 
-      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
         with:
-          enable-cache: true
-          cache-dependency-glob: ".pre-commit-config.yaml"
+          version: "0.10.9"
 
-      - name: Install dependencies
-        run: |
-          uv sync --group ci
-          alias pip="uv pip"  # Trick pre-commit to use uv
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Run Pre-commit
         run: |
           uv run pre-commit run --show-diff-on-failure --color=always --all-files
+
   unit_tests:
     name: Unit Tests
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - name: Setup Python
-        uses: actions/setup-python@v4
+      - name: "Set up Python"
+        uses: actions/setup-python@v6
         with:
-          python-version: 3.12
+          python-version-file: "pyproject.toml"
 
-      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v5
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
         with:
-          enable-cache: true
-          cache-dependency-glob: ".pre-commit-config.yaml"
+          version: "0.10.9"
 
-      - name: Install dependencies
-        run: |
-          uv sync --group ci
-          alias pip="uv pip"  # T
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
 
       - name: Run Tests
         run: |
-          uv run pytest tests/unit_tests
+          uv run pytest tests
 
   # Llama firewall is not yet supported
   # security_tests:

.github/workflows/publish.yml

@@ -0,0 +1,34 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment: pypi
+    permissions:
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version-file: "pyproject.toml"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          version: "0.10.9"
+
+      - name: Build package
+        run: uv build
+
+      - name: Publish to PyPI
+        run: uv publish --trusted-publishing always

.github/workflows/scan-dependencies.yml

@@ -9,32 +9,32 @@ on:
       - main
       - develop
     paths:
-      - '**/poetry.lock'
+      - '**/uv.lock'
   push:
     branches:
       - main
       - develop
     paths:
-      - '**/poetry.lock'
+      - '**/uv.lock'
 
 jobs:
-  safety_scan:
-    name: Safety Scan
+  pip_audit:
+    name: pip-audit
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
-      - name: Set up Python
-        uses: actions/setup-python@v4
+      - name: "Set up Python"
+        uses: actions/setup-python@v6
         with:
-          python-version: '3.10'
+          python-version-file: "pyproject.toml"
 
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install safety
-      - name: Run safety check
-        run: |
-          safety check --full-report
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+
+      - name: Install the project
+        run: uv sync --locked --all-extras --dev
+
+      - uses: pypa/gh-action-pip-audit@v1.1.0