🔧 chore: improve task configuration and add new dev tools

Taskfile.yaml & toast.yml improvements:
- Add pip-audit for security vulnerability scanning
- Add code:lint and code:check tasks for ruff linting
- Add dependencies:security and dependencies:tree tasks
- Rename upgrade:package to dependencies:upgrade:package
- Fix incorrect/missing task descriptions

requirements/dev.in:
- Add pip-audit dependency

Author: matrixise

Taskfile.yaml

@@ -13,6 +13,7 @@ dotenv: ['production.env']
 
 tasks:
   database:drop:
+    desc: Drop the local PostgreSQL database
     cmds:
       - docker compose exec -u postgres postgres dropdb --if-exists pythonie
 
@@ -48,12 +49,12 @@ tasks:
       - docker compose run --remove-orphans --detach --service-ports postgres
 
   run:
-    desc: Run a local version of PythonIE (works)
+    desc: Run a local version of PythonIE
     cmds:
       - docker compose run --rm --service-ports web python pythonie/manage.py runserver 0.0.0.0:8000
 
   django:shell-plus:
-    desc: Run a local version of PythonIE
+    desc: Run Django shell_plus
     cmds:
       - docker compose run --rm web python pythonie/manage.py shell_plus
 
@@ -68,12 +69,12 @@ tasks:
       - docker compose run --rm web python pythonie/manage.py makemigrations
 
   django:migrate:
-    desc: Make migrations
+    desc: Run database migrations
     cmds:
       - docker compose run --rm web python pythonie/manage.py migrate
 
   django:collect-static:
-    desc: Make migrations
+    desc: Collect static files
     cmds:
       - docker compose run --rm web python pythonie/manage.py collectstatic
 
@@ -93,15 +94,25 @@ tasks:
       - toast deps:upgrade
 
   dependencies:upgrade:django:
-    desc: Upgrade the dependencies
+    desc: Upgrade Django to the latest compatible version
     cmds:
       - toast deps:upgrade:django
 
   dependencies:upgrade:wagtail:
-    desc: Upgrade the dependencies
+    desc: Upgrade Wagtail to the latest compatible version
     cmds:
       - toast deps:upgrade:wagtail
 
+  dependencies:security:
+    desc: Check dependencies for known security vulnerabilities
+    cmds:
+      - toast deps:security
+
+  dependencies:tree:
+    desc: Show the dependencies tree
+    cmds:
+      - toast deps:tree
+
   docker:build:
     desc: Build the docker image
     cmds:
@@ -131,7 +142,19 @@ tasks:
     desc: Format the code
     cmds:
       - toast code:format
-  upgrade:package:
+
+  code:lint:
+    desc: Lint the code and fix issues
+    cmds:
+      - toast code:lint
+
+  code:check:
+    desc: Check code formatting and linting without changes
+    cmds:
+      - toast code:check
+
+  dependencies:upgrade:package:
+    desc: "Upgrade a specific package (usage: task dependencies:upgrade:package PACKAGE=django)"
     cmds:
       - python -m uv pip compile --upgrade-package $PACKAGE --output-file requirements/main.txt requirements/main.in
       - python -m uv pip compile --upgrade-package $PACKAGE --output-file requirements/dev.txt requirements/dev.in

requirements/dev.in

@@ -5,6 +5,7 @@ django-debug-toolbar
 fakeredis
 isort
 model-mommy
+pip-audit
 pipdeptree
 ruff
 uv

toast.yml

@@ -28,7 +28,7 @@ tasks:
       python -m uv pip compile --upgrade --output-file requirements/production.txt requirements/production.in
 
   deps:upgrade:django:
-    description: Upgrade the Django dependencies
+    description: Upgrade Django to the latest compatible version
     cache: false
     mount_paths:
       - .:/app
@@ -39,7 +39,7 @@ tasks:
       python -m uv pip compile --upgrade-package django --output-file requirements/production.txt requirements/production.in
 
   deps:upgrade:wagtail:
-    description: Upgrade the Wagtail dependencies
+    description: Upgrade Wagtail to the latest compatible version
     cache: false
     mount_paths:
       - .:/app
@@ -49,6 +49,11 @@ tasks:
       python -m uv pip compile --upgrade-package wagtail --output-file requirements/dev.txt requirements/dev.in
       python -m uv pip compile --upgrade-package wagtail --output-file requirements/production.txt requirements/production.in
 
+  deps:security:
+    description: Check dependencies for known security vulnerabilities
+    cache: false
+    command: pip-audit
+
   deps:tree:
     description: Show the dependencies tree
     cache: false
@@ -63,8 +68,27 @@ tasks:
     command: |
       python -m ruff format pythonie
 
+  code:lint:
+    description: Lint the code and fix issues
+    cache: false
+    mount_paths:
+      - .:/app
+    location: /app
+    command: |
+      python -m ruff check --fix pythonie
+
+  code:check:
+    description: Check code formatting and linting without changes
+    cache: false
+    mount_paths:
+      - .:/app
+    location: /app
+    command: |
+      python -m ruff format --check pythonie
+      python -m ruff check pythonie
+
   fish:
-    description: Run a Shell
+    description: Run a shell
     cache: false
     mount_paths:
       - .:/app