chore: update rhiza template ref to v0.10.1#197
Conversation
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Automatically synced template files after updating .rhiza/template.yml Co-Authored-By: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
Caution Review failedPull request was closed or merged during review 📝 WalkthroughWalkthroughThis PR applies a comprehensive template sync that removes agentic workflow tooling (agents, hooks, GitHub Actions agentic setup), updates CI tooling (uv 0.11.6→0.11.7, mkdocs→zensical for documentation builds), consolidates Bandit configuration into a Changes
Sequence Diagram(s)The changes do not meet the criteria for sequence diagram generation. While this is a substantial template sync, the modifications are primarily: configuration updates, file removals, build tooling replacements, and test additions—none of which introduce new feature flows or multi-component interactions that would benefit from sequence visualization. The marimo workflow change and book build refactoring are implementation-level adjustments rather than architectural flow changes. Estimated code review effort🎯 4 (Complex) | ⏱️ ~45 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR updates the repository’s Rhiza template reference to v0.10.1 and applies the corresponding template sync changes across docs, Make targets, CI workflows, and Rhiza’s internal test suite.
Changes:
- Bump
.rhiza/template.yml/.rhiza/template.lockto Rhiza templatev0.10.1. - Update build/CI tooling (weekly workflow additions, CodeQL and uv version bumps, Semgrep target, coverage badge behavior).
- Adjust docs and security configuration (MkDocs base config changes, Bandit config moved to
.bandit, docs dev instructions refreshed).
Reviewed changes
Copilot reviewed 50 out of 52 changed files in this pull request and generated 5 comments.
Show a summary per file
| File | Description |
|---|---|
| docs/mkdocs-base.yml | Updates base MkDocs configuration (theme/features/extensions/plugins) and output dirs. |
| docs/development/TESTS.md | Switches “direct pytest” examples to uv run pytest; clarifies benchmarks section. |
| docs/development/MARIMO.md | Updates Marimo documentation wording and workflow name reference. |
| docs/adr/0000-adr-template.md | Removes ADR template file. |
| Makefile | Updates default AI model and adds MKDOCS_EXTRA_PACKAGES override. |
| .rhiza/tests/utils/test_git_repo_fixture.py | Adds Bandit suppression comments for subprocess usage in tests. |
| .rhiza/tests/sync/test_rhiza_version.py | Adds Bandit suppression comments for subprocess usage in tests. |
| .rhiza/tests/sync/test_readme_validation.py | Adds Bandit suppression comments for subprocess import. |
| .rhiza/tests/stress/test_makefile_stress.py | Adds Bandit suppression comments for subprocess import. |
| .rhiza/tests/stress/test_git_stress.py | Adds Bandit suppression comments for subprocess import. |
| .rhiza/tests/security/test_security_patterns.py | Adds test asserting .bandit exists and is used as Bandit config source. |
| .rhiza/tests/integration/test_sbom.py | Expands Bandit suppressions for uvx subprocess calls. |
| .rhiza/tests/integration/test_docs_targets.py | Removes tests tied to old mkdocs build/serve command splicing. |
| .rhiza/tests/integration/test_book_targets.py | Updates expected phony targets set (drops mkdocs-build). |
| .rhiza/tests/api/test_weekly_workflow.py | Adds structure and Makefile dry-run tests for rhiza_weekly.yml. |
| .rhiza/tests/api/test_makefile_targets.py | Updates coverage badge expectations (XML-based, local output). |
| .rhiza/tests/api/test_github_targets.py | Skips GitHub targets tests if github.mk is absent. |
| .rhiza/tests/api/test_gh_aw_targets.py | Skips gh-aw targets tests if gh-aw.mk is absent. |
| .rhiza/template.yml | Bumps template ref to v0.10.1. |
| .rhiza/template.lock | Updates locked template SHA/ref and synced file list/timestamp. |
| .rhiza/requirements/docs.txt | Updates docs requirement set (now includes mike, zensical). |
| .rhiza/requirements/README.md | Updates docs requirements description (but now diverges from docs.txt). |
| .rhiza/make.d/test.mk | Updates security (bandit config), adds PIP_AUDIT_ARGS, changes coverage-badge to local generation. |
| .rhiza/make.d/quality.mk | Adds semgrep target and updates phony list. |
| .rhiza/make.d/github.mk | Removes GitHub helper Make targets file. |
| .rhiza/make.d/gh-aw.mk | Removes gh-aw helper Make targets file. |
| .rhiza/make.d/book.mk | Reworks book build (zensical), report/notebook handling, adds serve target. |
| .rhiza/make.d/agentic.mk | Removes agentic helper Make targets file. |
| .rhiza/make.d/README.md | Removes template “cookbook” documentation. |
| .rhiza/docs/WORKFLOWS.md | Removes Rhiza workflow guidance doc. |
| .rhiza/docs/TOKEN_SETUP.md | Removes PAT token setup doc. |
| .rhiza/docs/RELEASING.md | Removes releasing guide doc. |
| .rhiza/docs/PRIVATE_PACKAGES.md | Removes private packages guide doc. |
| .rhiza/docs/LFS.md | Removes Git LFS guide doc. |
| .rhiza/docs/CONFIG.md | Removes Rhiza config index doc. |
| .rhiza/docs/ASSETS.md | Removes Rhiza assets doc. |
| .pre-commit-config.yaml | Updates Bandit args to .bandit, bumps uv-pre-commit, adds interrogate hook, bumps rhiza-hooks. |
| .gitignore | Stops ignoring docs/notebooks.md. |
| .github/workflows/rhiza_weekly.yml | Bumps uv version used in the workflow to 0.11.7. |
| .github/workflows/rhiza_release.yml | Bumps uv version used in the workflow to 0.11.7. |
| .github/workflows/rhiza_marimo.yml | Bumps uv version; switches notebook execution to uv run --script. |
| .github/workflows/rhiza_codeql.yml | Updates CodeQL action versions and clarifies comment. |
| .github/workflows/rhiza_ci.yml | Bumps uv versions and removes coverage-badge job. |
| .github/workflows/rhiza_book.yml | Bumps uv version used in the workflow to 0.11.7. |
| .github/workflows/copilot-setup-steps.yml | Removes Copilot agent setup workflow file. |
| .github/hooks/session-start.sh | Removes Copilot session start hook script. |
| .github/hooks/session-end.sh | Removes Copilot session end hook script. |
| .github/hooks/hooks.json | Removes Copilot hook configuration. |
| .github/copilot-instructions.md | Removes Copilot instruction file. |
| .github/agents/summarise.md | Removes summarise agent definition. |
| .github/agents/analyser.md | Removes analyser agent definition. |
| .bandit | Adds Bandit INI config file (skipping B101). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| # refuses to serve gitignored directories like _book) is not needed. | ||
| serve: book ## build and serve the book at http://localhost:8000 | ||
| @printf "${BLUE}[INFO] Serving book at http://localhost:8000 (Ctrl-C to stop)${RESET}\n" | ||
| @cd $(BOOK_OUTPUT) && python3 -m http.server 8000 |
There was a problem hiding this comment.
The serve target runs python3 -m http.server, which assumes a system Python is available. Elsewhere the repo relies on uv-managed Python (so Python isn't a prerequisite). Consider invoking the server via the uv-managed interpreter (e.g., ${UV_BIN} run python -m http.server 8000) to keep behavior consistent and avoid failures on minimal environments.
| @cd $(BOOK_OUTPUT) && python3 -m http.server 8000 | |
| @cd $(BOOK_OUTPUT) && ${UV_BIN} run python -m http.server 8000 |
| name=$$(basename "$$nb" .py); \ | ||
| printf "${BLUE}[INFO] Exporting $$nb${RESET}\n"; \ | ||
| abs_output="$$(pwd)/docs/notebooks/$$name.html"; \ | ||
| mkdir -p docs/notebooks; \ | ||
| printf "${BLUE}[INFO] Exporting $$nb -> ${ROOT}/docs/notebooks/$$name.html${RESET}\n"; \ | ||
| abs_output="${ROOT}/docs/notebooks/$$name.html"; \ | ||
| (cd "$$(dirname "$$nb")" && ${UV_BIN} run marimo export html --sandbox "$$(basename "$$nb")" -o "$$abs_output"); \ |
There was a problem hiding this comment.
_book-notebooks always writes exports to ${ROOT}/docs/notebooks/... but doesn't ensure that output directory exists. This works only if MARIMO_FOLDER is also docs/notebooks; if a project overrides MARIMO_FOLDER to another location, the export can fail due to a missing ${ROOT}/docs/notebooks directory. Add a mkdir -p ${ROOT}/docs/notebooks before exporting.
| - **marimo.txt** - Marimo notebook dependencies | ||
| - **docs.txt** - Documentation generation dependencies (pdoc, interrogate, mkdocs, mkdocs-material, mkdocstrings) | ||
| - **docs.txt** - Documentation generation dependencies (interrogate, mkdocs, mkdocs-material, mkdocstrings) | ||
| - **tools.txt** - Development tools (pre-commit, python-dotenv, typer, ty) |
There was a problem hiding this comment.
The description of docs.txt here doesn't match the actual contents of .rhiza/requirements/docs.txt after this sync (it now lists mike and zensical, and no longer lists mkdocs/material/mkdocstrings). Update this line to reflect the real docs toolchain, or adjust docs.txt so the README stays accurate.
| book:: _book-reports _book-notebooks ## compile the companion book via MkDocs | ||
| @if [ -n "$(_MKDOCS_CFG)" ]; then \ | ||
| rm -rf "$(BOOK_OUTPUT)"; \ | ||
| ${UVX_BIN} --with "mkdocs-material<10.0" --with "pymdown-extensions>=10.0" --with "mkdocs<2.0" $(MKDOCS_EXTRA_PACKAGES) mkdocs build \ | ||
| -f "$(_MKDOCS_CFG)" \ | ||
| -d "$$(pwd)/$(BOOK_OUTPUT)"; \ | ||
| else \ | ||
| printf "${YELLOW}[WARN] No mkdocs config found, skipping MkDocs build${RESET}\n"; \ | ||
| fi | ||
| @mkdir -p "$(BOOK_OUTPUT)" | ||
| @rm -rf "$(BOOK_OUTPUT)" | ||
| @${UVX_BIN} $(MKDOCS_EXTRA_PACKAGES) zensical build -f "$(ROOT)/mkdocs.yml" |
There was a problem hiding this comment.
make book now runs zensical build -f "$(ROOT)/mkdocs.yml", but this repository has no root-level mkdocs.yml (only docs/mkdocs-base.yml). This will make the book target fail. Either add a root mkdocs.yml (likely inheriting from docs/mkdocs-base.yml) or update the target to fall back to docs/mkdocs-base.yml when mkdocs.yml is absent.
| docs_dir: docs | ||
| site_dir: _book |
There was a problem hiding this comment.
docs/mkdocs-base.yml lives under docs/, so setting docs_dir: docs will resolve to docs/docs when this base config is used directly (as the header comments describe), and docs/docs does not exist in this repo. This will break mkdocs/zensical builds that point at docs/mkdocs-base.yml. Consider using docs_dir: . in the base config (and overriding to docs only from a root-level mkdocs.yml if needed).
Summary
.rhiza/template.ymlref fromv0.9.5tov0.10.1Test plan
🤖 Generated with Claude Code
Summary by CodeRabbit
New Features
make serve.Updates
Removals