Generify comicvine funcs

.github/dependabot.yaml

@@ -8,6 +8,8 @@ updates:
       github_actions:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: uv
     directory: /
@@ -17,3 +19,5 @@ updates:
       python:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7

.github/workflows/linting.yaml

@@ -1,28 +1,33 @@
 name: Linting
-
 on:
-  push:
+  pull_request:
     branches:
       - main
     paths-ignore:
       - docs/**
-  pull_request:
+  push:
     branches:
       - main
     paths-ignore:
       - docs/**
 
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
 env:
-  PY_VERSION: "3.10"
+  PY_VERSION: '3.10'
+permissions: {}
 
 jobs:
   prek:
     permissions:
       contents: read
-    runs-on: ubuntu-latest
 
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7.0.0
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ env.PY_VERSION }}

.github/workflows/publishing.yaml

@@ -1,18 +1,23 @@
 name: Publishing
-
 on: push
 
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
 env:
-  PY_VERSION: "3.14"
+  PY_VERSION: '3.14'
+permissions: {}
 
 jobs:
   build:
     permissions:
       contents: read
-    runs-on: ubuntu-latest
 
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7.0.0
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ env.PY_VERSION }}
@@ -28,9 +33,8 @@ jobs:
   validate:
     needs:
       - build
-    permissions: {}
-    runs-on: ubuntu-latest
 
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/download-artifact@v8.0.1
         with:
@@ -45,15 +49,15 @@ jobs:
   publish:
     environment:
       name: pypi
-      url: https://pypi.org/p/Simyan
+      url: 'https://pypi.org/p/Simyan'
     if: startsWith(github.ref, 'refs/tags/')
     needs:
       - build
       - validate
     permissions:
       id-token: write
-    runs-on: ubuntu-latest
 
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/download-artifact@v8.0.1
         with:

.github/workflows/testing.yaml

@@ -1,43 +1,44 @@
 name: Testing
-
 on:
-  push:
+  pull_request:
     branches:
       - main
     paths-ignore:
       - docs/**
-  pull_request:
+  push:
     branches:
       - main
     paths-ignore:
       - docs/**
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+permissions: {}
 
 jobs:
   pytest:
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
-        python-version:
-          - "3.10"
-          - "3.11"
-          - "3.12"
-          - "3.13"
-          - "3.14"
         os:
           - ubuntu-latest
           - macos-latest
           - windows-latest
+        python-version:
+          - '3.10'
+          - '3.11'
+          - '3.12'
+          - '3.13'
+          - '3.14'
 
-    permissions:
-      contents: read
     runs-on: ${{ matrix.os }}
-
     steps:
       - uses: actions/checkout@v7.0.0
+        with:
+          persist-credentials: false
       - uses: astral-sh/setup-uv@v8.3.2
         with:
           python-version: ${{ matrix.python-version }}
@@ -50,9 +51,8 @@ jobs:
     if: always()
     needs:
       - pytest
-    permissions: {}
-    runs-on: ubuntu-latest
 
+    runs-on: ubuntu-latest
     steps:
       - uses: re-actors/alls-green@v1.2.2
         with:

.github/zizmor.yaml

@@ -0,0 +1,17 @@
+rules:
+  unpinned-uses:
+    ignore:
+      - linting.yaml
+      - testing.yaml
+      - publishing.yaml
+  anonymous-definition:
+    ignore:
+      - 'linting.yaml:22'
+      - 'testing.yaml:20'
+      - 'testing.yaml:50'
+      - 'publishing.yaml:12'
+      - 'publishing.yaml:33'
+      - 'publishing.yaml:49'
+  undocumented-permissions:
+    ignore:
+      - 'publishing.yaml:58'

pdm.toml

@@ -0,0 +1,2 @@
+[lock]
+format = "pylock"

prek.toml

@@ -1,27 +1,50 @@
 [[repos]]
 hooks = [
-  {args = ["--all", "--in-place"], entry = "toml-sort", exclude = ".*.lock", id = "toml-sort", language = "system", name = "toml sort", types = ["toml"]},
+  {args = ["--all", "--ignore-case", "--in-place", "--trailing-comma-inline-array"], entry = "toml-sort", exclude = ".*.lock|pylock.toml", id = "toml-sort", language = "system", name = "toml sort", types = ["toml"]},
   {args = ["--number", "--wrap=keep"], entry = "mdformat", exclude = "(.github/ISSUE_TEMPLATE/.*|docs/simyan/schemas/_base).md", id = "mdformat", language = "system", name = "mdformat", types = ["markdown"]},
   {entry = "ruff check .", id = "ruff-check", language = "system", name = "ruff check", pass_filenames = false, types = ["python"]},
   {entry = "ruff format .", id = "ruff-format", language = "system", name = "ruff format", pass_filenames = false, types = ["python"]},
   {entry = "ty check .", id = "ty", language = "system", name = "ty", pass_filenames = false, types = ["python"]},
 ]
 repo = "local"
 
+[[repos]]
+hooks = [
+  {id = "check-ast"},
+  {id = "check-builtin-literals"},
+  {id = "check-docstring-first"},
+  {id = "debug-statements"},
+  {id = "forbid-submodules"},
+]
+repo = "https://github.com/pre-commit/pre-commit-hooks"
+rev = "v6.0.0"
+
+[[repos]]
+hooks = [
+  {args = ["--fix=all", "--no-progress", "--persona=auditor"], id = "zizmor"},
+]
+repo = "https://github.com/zizmorcore/zizmor-pre-commit"
+rev = "v1.26.1"
+
 [[repos]]
 hooks = [
   {args = ["--allow-multiple-documents"], id = "check-yaml"},
   {args = ["--assume-in-merge"], id = "check-merge-conflict"},
+  # {args = ["--autofix", "--indent=2", "--no-ensure-ascii"], id = "pretty-format-json"},
   {args = ["--markdown-linebreak-ext=md"], id = "trailing-whitespace"},
   {exclude_types = ["json", "svg", "xml"], id = "end-of-file-fixer"},
   {id = "check-added-large-files"},
   {id = "check-case-conflict"},
-  {id = "check-executables-have-shebangs"},
-  {id = "check-json"},
-  {id = "check-json5"},
-  {id = "check-symlinks"},
+  # {id = "check-executables-have-shebangs"},
+  # {id = "check-illegal-windows-names"},
+  # {id = "check-json"},
+  # {id = "check-json5"},
+  {id = "check-shebang-scripts-are-executable"},
+  # {id = "check-symlinks"},
   {id = "check-toml"},
-  {id = "check-xml"},
+  {id = "check-vcs-permalinks"},
+  # {id = "check-xml"},
+  {id = "destroyed-symlinks"},
   {id = "detect-private-key"},
   {id = "fix-byte-order-marker"},
   {id = "mixed-line-ending"},
@@ -30,24 +53,7 @@ repo = "builtin"
 
 [[repos]]
 hooks = [
-  {args = ["--autofix", "--indent=2"], id = "pretty-format-json"},
-  {id = "check-ast"},
-  {id = "check-builtin-literals"},
-  {id = "check-docstring-first"},
-  {id = "check-illegal-windows-names"},
-  {id = "check-merge-conflict"},
-  {id = "check-shebang-scripts-are-executable"},
-  {id = "check-vcs-permalinks"},
-  {id = "debug-statements"},
-  {id = "forbid-submodules"},
-  {id = "name-tests-test"},
-]
-repo = "https://github.com/pre-commit/pre-commit-hooks"
-rev = "v6.0.0"
-
-[[repos]]
-hooks = [
-  # {id = "check-hooks-apply"},
+  {id = "check-hooks-apply"},
   {id = "check-useless-excludes"},
 ]
 repo = "meta"