Merge in upstream changes for 0.13.1

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      weekly-batch:
+        patterns:
+          - "*"

.github/workflows/release.yaml

@@ -36,39 +36,23 @@ env:
     VENV_PATH: .venv
 
 jobs:
-    # Wait for the testing pipeline to finish
-    wait-for-testing:
-        name: 🕒 Wait for Testing Pipeline
-        runs-on: ubuntu-latest
+    # Run the test workflow as a prerequisite for release builds.
+    test:
+        name: 🧪 Run tests
+        uses: ./.github/workflows/testing.yaml
         if: ${{ github.repository == 'crs4/rocrate-validator' }}
-        steps:
-            - name: Wait for testing pipeline to succeed
-              uses: fountainhead/action-wait-for-check@v1.2.0
-              id: wait-for-testing
-              with:
-                token: ${{ secrets.GITHUB_TOKEN }}
-                checkName: ⌛ Run tests
-                ref: ${{ github.sha }}
-
-            - name: Do something with a passing build
-              if: steps.wait-for-testing.outputs.conclusion == 'success'
-              run: echo "Testing pipeline passed" && exit 0
-
-            - name: Do something with a failing build
-              if: steps.wait-for-testing.outputs.conclusion == 'failure'
-              run: echo "Testing pipeline failed" && exit 1
     # Check and Build Distribution
     build:
         name: 🏗 Check and Build Distribution
         runs-on: ubuntu-latest
-        needs: wait-for-testing
+        needs: test
         if: ${{ github.repository == 'crs4/rocrate-validator' }}
         steps:
-            # Access the tag from the first workflow's outputs
+            # Checkout the commit associated with the release tag.
             - name: ⬇️ Checkout code
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
             - name: 🐍 Set up Python
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@v7
               with:
                   python-version: "3.x"
             - name: 🚧 Set up Python Environment
@@ -156,7 +140,7 @@ jobs:
                   name: python-package-distributions
                   path: dist/
             - name: 🖊️ Sign the dists with Sigstore
-              uses: sigstore/gh-action-sigstore-python@v3.3.0
+              uses: sigstore/gh-action-sigstore-python@v3.5.0
               with:
                   inputs: >-
                       ./dist/*.tar.gz

.github/workflows/testing.yaml

@@ -14,14 +14,11 @@
 
 name: 🧪 CI Pipeline 1 -- Testing
 
-# Controls when the action will run. Triggers the workflow on push or pull request
-# events but only for the master branch
+# Runs on pushes and pull requests, and can be called by the release workflow.
 on:
     push:
         branches:
             - "**"
-        tags:
-            - "*.*.*"
         paths:
             - "**"
             - "!docs/**"
@@ -31,6 +28,7 @@ on:
             - "**"
             - "!docs/**"
             - "!examples/**"
+    workflow_call:
 
 env:
     TERM: xterm
@@ -46,9 +44,9 @@ jobs:
         steps:
             # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
             - name: ⬇️ Checkout code
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
             - name: 🐍 Set up Python v${{ env.PYTHON_VERSION }}
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@v7
               with:
                   python-version: ${{ env.PYTHON_VERSION }}
             - name: 🔽 Install ruff (version from pyproject.toml)
@@ -74,7 +72,7 @@ jobs:
                 # Emit a compact rule-count summary and fail the job if needed.
                 ruff check rocrate_validator tests --statistics
             - name: ⌛ Spell check code and profiles (covers Python and SHACL)
-              uses: crate-ci/typos@v1.47.0
+              uses: crate-ci/typos@v1.51.1
 
     # Runs the tests
     test:
@@ -83,9 +81,9 @@ jobs:
         needs: [lint]
         steps:
             - name: ⬇️ Checkout
-              uses: actions/checkout@v6
+              uses: actions/checkout@v7
             - name: 🐍 Set up Python v${{ env.PYTHON_VERSION }}
-              uses: actions/setup-python@v6
+              uses: actions/setup-python@v7
               with:
                   python-version: ${{ env.PYTHON_VERSION }}
             - name: 🔄 Upgrade pip

.pre-commit-config.yaml

@@ -15,7 +15,7 @@
 repos:
   # Run typos to check for common spelling mistakes in the codebase.
   - repo: https://github.com/crate-ci/typos
-    rev: v1.47.2
+    rev: v1.50.3
     hooks:
       - id: typos
         # Pre-commit passes explicit file paths to the hook, bypassing the