.pre-commit-config.yaml

default_stages: [pre-commit]

default_language_version:
  python: python3.11

repos:
    - repo: https://github.com/pre-commit/pre-commit-hooks
      rev: v5.0.0
      hooks:
          - id: trailing-whitespace
          - id: end-of-file-fixer
          - id: check-json
          - id: check-toml
          - id: check-xml
          - id: check-yaml
          - id: check-added-large-files

    - repo: https://github.com/pre-commit/pygrep-hooks
      rev: 'v1.10.0'
      hooks:
          - id: python-check-blanket-noqa
          - id: python-check-blanket-type-ignore
          - id: python-check-mock-methods
          - id: python-no-eval
          - id: python-use-type-annotations

    - repo: local
      hooks:
          - id: python-check-blanket-nosec
            name: check blanket nosec
            entry: '# nosec(?!: (B[0-9]{3} ?)+( +#.*)*$)'
            language: pygrep
            types: [python]

    - repo: https://github.com/shellcheck-py/shellcheck-py
      rev: 'v0.10.0.1'
      hooks:
          - id: shellcheck
            args: ['-x']

    - repo: https://github.com/astral-sh/ruff-pre-commit
      rev: 'v0.9.2'
      hooks:
          - id: ruff
            args: ['--exit-non-zero-on-fix']

    - repo: https://github.com/psf/black-pre-commit-mirror
      rev: '24.10.0'
      hooks:
          - id: black

    - repo: https://github.com/PyCQA/bandit
      rev: '1.8.2'
      hooks:
          - id: bandit
            additional_dependencies: ['.[toml]']
            args: ['-c', 'pyproject.toml']

    - repo: local
      hooks:
          - id: mypy
            name: mypy
            files: 'cli'
            entry: poetry run mypy
            language: system
            types: [python]
            require_serial: true

    - repo: https://github.com/rubik/xenon/
      rev: 'v0.9.3'
      hooks:
          - id: xenon
            name: xenon
            files: 'cli'
            args: ["--max-average=A", "--max-modules=A", "--max-absolute=A"]

    - repo: https://github.com/python-poetry/poetry
      rev: '1.8.5'  # renovate: poetry
      hooks:
          - id: poetry-check
          - id: poetry-lock
            args: ["--no-update"]
          - id: poetry-install