chore: sync rhiza template to v1.2.0#887
Merged
Merged
Conversation
Bump the template ref v1.1.3 → v1.2.0, re-sync, and bump the reusable-workflow / action pins to @v1.2.0 in lockstep. v1.2.0 removes all rhiza-tools usage from the template; the CI Python-version matrix is derived by build-and-inspect-python-package. Also removed the duplicate `.github/PULL_REQUEST_TEMPLATE.md` (it case-collided with the template's `pull_request_template.md`). Resolved a .rhiza/rhiza.mk conflict by dropping the old CLI-based sync/materialize/summarise-sync targets, which v1.2.0 removed (sync is now `uvx rhiza sync`). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR re-syncs the repository with the Rhiza template v1.2.0, updating pinned reusable workflows/actions to match and removing legacy rhiza-tools-based Make targets and template-sync plumbing.
Changes:
- Sync Rhiza template ref/lock to v1.2.0 and update template-managed files accordingly.
- Remove retired
rhiza-toolsintegrations from Make targets and related shell completions/docs. - Update GitHub workflows/rulesets and remove the legacy
rhiza_sync.ymlworkflow + duplicate PR template.
Reviewed changes
Copilot reviewed 27 out of 28 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| SECURITY.md | Removes pip-audit from documented code-scanning measures to match new template posture. |
| .rhiza/template.yml | Bumps Rhiza template ref to v1.2.0. |
| .rhiza/template.lock | Updates template lock metadata, file list, and synced timestamp for v1.2.0. |
| .rhiza/rhiza.mk | Removes legacy sync/validate/version-matrix logic tied to rhiza-tools (note: leaves some stale .PHONY entries). |
| .rhiza/make.d/test.mk | Drops pip-audit/benchmark post-analysis steps; keeps bandit-based security scan. |
| .rhiza/make.d/releasing.mk | Removes Make-driven bump/release targets; keeps changelog/release-status helpers and documents new release flow. |
| .rhiza/make.d/quality.mk | Removes suppression-audit target (previously rhiza-tools-based). |
| .rhiza/completions/rhiza-completion.zsh | Removes completion entries for BUMP=... variables tied to removed Make release targets. |
| .rhiza/completions/rhiza-completion.bash | Removes completion entries for BUMP=... variables tied to removed Make release targets. |
| .rhiza/completions/README.md | Updates completion documentation/examples to remove BUMP variable references. |
| .rhiza/.rhiza-version | Removes the pinned Rhiza tools version file (retired in v1.2.0). |
| .pre-commit-config.yaml | Bumps ruff/uv pre-commit hook revisions. |
| .github/workflows/rhiza_weekly.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_sync.yml | Removes the legacy Rhiza template sync workflow file. |
| .github/workflows/rhiza_scorecard.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_release.yml | Updates docs in header and pins configure-git-auth action to v1.2.0. |
| .github/workflows/rhiza_paper.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_mutation.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_marimo.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_fuzzing.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_codeql.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_ci.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_book.yml | Updates reusable workflow pin to v1.2.0. |
| .github/workflows/rhiza_benchmark.yml | Updates reusable workflow pin to v1.2.0. |
| .github/rulesets/tag-protection.json | Adds tag ruleset configuration for protecting version tags. |
| .github/rulesets/main-branch-protection.json | Updates required status checks configuration (adds integration IDs and updates check set). |
| .github/PULL_REQUEST_TEMPLATE.md | Removes the duplicate uppercase PR template to avoid case-collision. |
| .github/CONFIG.md | Updates PAT_TOKEN documentation for template-managed workflows (needs a small clarification tweak). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
60
to
63
| print-logo \ | ||
| readme \ | ||
| summarise-sync \ | ||
| sync \ | ||
| validate \ | ||
| version-matrix \ | ||
| ci-os-matrix |
|
|
||
| If `PAT_TOKEN` is not configured, the workflow falls back to `github.token` and prints a warning. | ||
| Syncs that touch only non-workflow files will still succeed. | ||
| If `PAT_TOKEN` is not configured, workflows fall back to `github.token`. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Re-syncs the Rhiza template to v1.2.0 and bumps the reusable-workflow / action pins to @v1.2.0 in lockstep.
v1.2.0 removes all
rhiza-toolsusage from the template — the.rhiza/make targets no longer shell out touvx rhiza-tools, and the CI Python-version matrix is derived bybuild-and-inspect-python-package.Changes
.github/PULL_REQUEST_TEMPLATE.md— it case-collided with the template'spull_request_template.md(two files that differ only by case; this repo had both). Kept the template's lowercase one..rhiza/template.yml:ref v1.1.3 → v1.2.0rhiza sync(67 files): updated.rhiza/, workflows, rulesets, pre-commit, SECURITY.md; removed retiredrhiza_sync.yml+.rhiza/.rhiza-versionuses: jebel-quant/rhiza/…@v1.1.3 → @v1.2.0(workflows +configure-git-auth) so CI uses the v1.2.0 reusable workflows (no moremake version-matrix).rhiza/rhiza.mk: dropped the old CLI-basedsync/materialize/summarise-synctargets (v1.2.0 removed them; sync is nowuvx rhiza syncdirectly)Part of the rhiza-tools retirement fleet re-sync. jquantstats is a buildable Python package, so the BAIPP matrix is safe here.
🤖 Generated with Claude Code