See here for more details:
https://ansible.readthedocs.io/projects/lint/rules/schema/#schemameta

Also add comments explaining when dependencies should be listed in
meta/main.yml versus meta/requirements.yml.

This is done to be consistent with the language used in the Ansible project.

Co-authored-by: Nick <[email protected]>

Co-authored-by: Nick <[email protected]>

Co-authored-by: Nick <[email protected]>

Co-authored-by: Nick <[email protected]>

This is being done for testing purposes, and this commit can be
reverted (or removed) once cisagov/setup-env-github-action#65 is
merged.

Co-authored-by: Nick <[email protected]>

Co-authored-by: Nick <[email protected]>

The repo name we were using redirects to the correct place, but we may
as well cut out the middle man.

…orrect staticcheck package URL

Co-Authored By: @mcdonnnj <[email protected]>

Co-authored-by: Shane Frasier <[email protected]>

We generally only use quotes when they are strictly necessary to ensure
data is interpreted as a string value.

Our standard practice for YAML files is to sort keys alphabetically.

Co-authored-by: David Harris <[email protected]>

Co-authored-by: Nick <[email protected]>

…b-action"

This reverts commit ddbf6f7.

This can be done now that cisagov/setup-env-github-action#65 has been
merged.

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Add crazy-max/ghaction-github-labeler as a commented out dependency to
ignore in the dependabot configuration file. This should be enabled in
downstream projects to consolidate updating this Action to the
cisagov/skeleton-generic repository.

Add go packages for pre-commit

Use the correct repo name for the ansible-lint pre-commit hook

…nfiguration

Update the Dependabot configuration

Delete duplicate word "are"

Add nixfmt pre-commit hook

…s/checkout-4

Bump actions/checkout from 3 to 4

Update the version of the `crazy-max/ghaction-github-labeler` Action and add a dependabot ignore directive

This is done automatically with the `pre-commit autoupdate` command.

This mirror was created to leverage performance optimizations from
mypyc wheels that are available if black is installed from PyPI. These
wheels are not available if black is installed from source as it would
be using the old URL. Please see psf/black#3828 and psf/black#3405 for
more information.

This action is added in a separate "diagnostics" job.  As configured
it will never fail, but it will print out the status of the various
GitHub components.  This information will sometimes be useful when
determining why builds fail after the fact.

Co-authored-by: Mark Feldhousen <[email protected]>
Co-authored-by: Nick <[email protected]>

Even though the diagnostics job is not currently configured to fail
due to the GitHub status, it is still true that if the job is unable
to run that does not bode well for the lint job's successful
execution.

Co-authored-by: Nick <[email protected]>

This can be useful when debugging why a GH Action failed.

Co-authored-by: felddy <[email protected]>

This GH Action is being configured to run in audit mode.  It should
warn us if an Action is reaching out to an unexpected web address,
overwriting source code, etc.

Co-authored-by: felddy <[email protected]>

This task can only provide coverage for the job that contains it.

We need a reminder add the step-security/harden-runner action at the
top of every job.

Co-authored-by: Nick <[email protected]>

Update `pre-commit` hooks

Change the source repository for the `black` hook

Add a job that runs diagnostics

Enable the new dependabot ignore directives that were added in
cisagov/skeleton-generic.

We generally only use quotes when they are strictly necessary to ensure
data is interpreted as a string value. This mirrors what was done to
the configurations inherited from cisagov/skeleton-generic.

Co-authored-by: Shane Frasier <[email protected]>

This updates the `test` job to match what was pulled down from
cisagov/skeleton-generic.

Add the `diagnostics` job as a dependency for the `test` job.

This aligns with what was done to the `lint` job of the build.yml
workflow that was inherited from cisagov/skeleton-generic.

Ensure that top-level keys except for `steps` are alphabetically sorted.

We generally only use quotes when they are strictly necessary to ensure
data is interpreted as a string value. This mirrors what was done to
the configurations inherited from cisagov/skeleton-generic.

⚠️ CONFLICT! Lineage pull request for: skeleton

…e-to-yes-and-no-in-yaml

Prefer true/false to yes/no in YAML files

…ributes

Alphabetize YAML attributes

Add an empty meta/requirements.yml file

…le-metadata

Add a standalone attribute to the role metadata

Add SystemD-enabled molecule scenario

…eage/skeleton