Working on updates

.dockerignore

@@ -0,0 +1,3 @@
+.github
+Old
+tests

.github/workflows/build_container.yml

@@ -0,0 +1,37 @@
+---
+name: 'Build container'
+"on":
+  push:
+    branches:
+      - master
+  pull_request:
+jobs:
+  docker:
+    permissions:
+      contents: read
+      packages: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - # https://github.com/docker/login-action/#github-container-registry
+        name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push
+        id: docker_build
+        uses: docker/build-push-action@v6
+        with:
+          push: ${{ github.ref == 'refs/heads/master' }}
+          platforms: linux/amd64,linux/arm64
+          # https://github.com/docker/build-push-action/issues/254
+          tags: ghcr.io/${{ github.repository }}:latest
+      - name: Image digest
+        run: echo ${{ steps.docker_build.outputs.digest }}

.github/workflows/dependabot_auto_merge.yml

@@ -0,0 +1,40 @@
+---
+# yamllint disable rule:line-length
+name: Dependabot auto-approval and auto-merge
+"on": pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    # limit this to PRs opened by dependabot
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          alert-lookup: true
+          compat-lookup: true
+      - uses: actions/checkout@v4
+      - name: Approve a PR if not already approved
+
+        run: |
+          # sets the upstream metadata for `gh pr status`
+          gh pr checkout "$PR_URL"
+          if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ];
+          then gh pr review --approve "$PR_URL"
+          else echo "PR already approved, skipping additional approvals to minimize emails/notification noise.";
+          fi
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/mypy.yml

@@ -0,0 +1,24 @@
+---
+name: Run mypy
+
+"on":
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  mypy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Running mypy
+        run: |
+          python -m pip install --quiet --no-cache-dir --upgrade uv
+          uv run mypy --strict $(basename $(pwd | sed -e 's/-/_/g')) tests

.github/workflows/pylint.yml

@@ -0,0 +1,24 @@
+---
+name: Run pylint
+
+"on":
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  pylint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Running ruff
+        run: |
+            python -m pip install --quiet --no-cache-dir --upgrade uv
+            uv run ruff check $(basename $(pwd | sed -e 's/-/_/g'))

.github/workflows/pytest.yml

@@ -0,0 +1,24 @@
+---
+name: Run pytest
+
+"on":
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  pytest:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Running pytest
+        run: |
+          python -m pip install --quiet --no-cache-dir --upgrade uv
+          uv run pytest

.gitignore

@@ -108,3 +108,4 @@ venv.bak/
 
 # exclude logs
 logs/*
+

Dockerfile

@@ -1,22 +1,19 @@
 # Use the official Python image from the Docker Hub
-FROM python:3.8
+FROM python:3.13-slim
 
 # These two environment variables prevent __pycache__/ files.
-ENV PYTHONUNBUFFERED 1
-ENV PYTHONDONTWRITEBYTECODE 1
+ENV PYTHONUNBUFFERED=1
+ENV PYTHONDONTWRITEBYTECODE=1
 
 #RUN git clone https://github.com/yaleman/sam-bot /code/
 
 WORKDIR /code
 
 COPY ./ /code/
 
-#RUN git checkout docker
+RUN adduser sambot
+RUN chown sambot:sambot /code -R
+USER sambot
+RUN pip install .
 
-RUN pip install -r requirements.txt
-
-
-#COPY *.py /code/
-COPY config.json /code/
-
-CMD python main.py
+CMD ["/home/sambot/.local/bin/sam-bot"]