Update CI dependencies (#3741)

* Update CI dependencies

* Apply pre-commit fix

From the artifact of the previous workflow run

* Add copyright headers, fix ISC004, RUF036 and BLE001 ruff v0.16.0 violations

* Add missing copyright header to docker/run

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: geo-ghci-int[bot] <146321879+geo-ghci-int[bot]@users.noreply.github.com>
Co-authored-by: Stéphane Brunner <stephane.brunner@camptocamp.com>

Author: 3 people

.github/publish.yaml

@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.1.1/tag_publish/schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.2.2/tag_publish/schema.json
 
 docker:
   images:

.github/workflows/main.yaml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - run: docker system prune --all --force
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
@@ -38,7 +38,7 @@ jobs:
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       - run: python3 -m pip install --requirement=ci/requirements.txt
 
-      - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}

.github/workflows/rebuild.yaml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - run: docker system prune --all --force
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ matrix.branch }}
 

.pre-commit-config.yaml

@@ -93,7 +93,7 @@ repos:
         args:
           - --test=utils:tests
   - repo: https://github.com/codespell-project/codespell
-    rev: v2.4.2
+    rev: v2.4.3
     hooks:
       - id: codespell
         exclude: ^(.*/)?(poetry\.lock|package-lock\.json)$
@@ -104,7 +104,7 @@ repos:
     hooks:
       - id: shellcheck
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.37.3
+    rev: 0.37.4
     hooks:
       - id: check-github-actions
       - id: check-github-workflows
@@ -121,11 +121,11 @@ repos:
     hooks:
       - id: ripsecrets
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.19
+    rev: v0.16.1
     hooks:
       - id: ruff-format
   - repo: https://github.com/prospector-dev/prospector
-    rev: v1.19.0
+    rev: v1.19.1
     hooks:
       - id: prospector
         args:
@@ -141,7 +141,7 @@ repos:
           - prospector-profile-duplicated==1.12.0 # pypi
           - prospector-profile-utils==1.27.0 # pypi
           - pylint[spelling]==4.0.6 # pypi
-          - ruff==0.15.19 # pypi
+          - ruff==0.16.1 # pypi
       - id: prospector
         args:
           - --die-on-tool-error
@@ -150,7 +150,7 @@ repos:
           - --profile=utils:pre-commit
         additional_dependencies:
           - prospector-profile-utils==1.27.0 # pypi
-          - ruff==0.15.19 # pypi
+          - ruff==0.16.1 # pypi
   - repo: https://github.com/sbrunner/jsonschema-validator
     rev: 1.0.0
     hooks:
@@ -162,7 +162,7 @@ repos:
             |jsonschema\-gentypes\.yaml
           )$
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 43.242.0
+    rev: 43.288.0
     hooks:
       - id: renovate-config-validator
   - repo: https://github.com/sbrunner/python-versions-hook

.prospector.yaml

@@ -21,4 +21,5 @@ ruff:
   options:
     target-version: py311
   disable:
+    - BLE001 # No blind except (already suppressed with # noqa in the code)
     - PLC0415 # `import` should be at the top-level of a file (present in pre-commit but not in checks)

ci/requirements.txt

@@ -1,5 +1,5 @@
 c2cciutils==1.7.5
 poetry-plugin-export==1.10.0
-pre-commit==4.6.0
+pre-commit==4.6.1
 importlib-metadata<9.0.1
-tag-publish==1.1.1
+tag-publish==1.2.2

docker/run

@@ -1,4 +1,5 @@
 #!/usr/bin/python
+# Copyright (c) 2026 by Camptocamp
 
 import os
 import stat

poetry.lock

@@ -5,7 +5,7 @@ exclude = ["test_*.py", "tilecloud_chain/tests/__init__.py", "tilecloud_chain/co
 
 [tool.ruff.lint]
 select = []
-ignore = ["ANN401", "C90", "COM812", "D100", "D104", "D105", "D107", "D200", "D202", "D207", "D208", "D212", "E501", "EM101", "EM102", "ERA001", "FA", "FBT001", "FBT002", "FIX002", "I001", "PERF203", "PLC0415", "PLR09", "PLR2004", "Q000", "S101", "S113", "SIM105", "T201", "TD002", "W293"]
+ignore = ["ANN401", "BLE001", "C90", "COM812", "D100", "D104", "D105", "D107", "D200", "D202", "D207", "D208", "D212", "E501", "EM101", "EM102", "ERA001", "FA", "FBT001", "FBT002", "FIX002", "I001", "PERF203", "PLC0415", "PLR09", "PLR2004", "Q000", "S101", "S113", "SIM105", "T201", "TD002", "W293"]
 extend-select = ["UP", "I", "S", "B", "ALL"]
 
 [tool.ruff.lint.pydocstyle]
@@ -47,7 +47,7 @@ pydantic-settings = "2.14.2"
 mapnik = "4.2.2"
 
 [tool.poetry.group.dev.dependencies]
-prospector = { extras = ["with_mypy", "with_bandit", "with_pyroma", "with_ruff"], version = "1.19.0" }
+prospector = { extras = ["with_mypy", "with_bandit", "with_pyroma", "with_ruff"], version = "1.19.1" }
 prospector-profile-duplicated = "1.12.0"
 prospector-profile-utils = "1.27.0"
 c2cwsgiutils = { version = "6.1.9", extras = ["test_images"] }

pyproject.toml

@@ -1,3 +1,4 @@
+# Copyright (c) 2026 by Camptocamp
 """TileCloud Chain."""
 
 import asyncio