Remove unused or rarely used features

.github/workflows/automerge.yml

@@ -1,35 +1,9 @@
-# The pull_request_target workflow trigger is dangerous. Do not add unrelated logic to this workflow.
-# https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
-# https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target
 name: Auto-merge
 on: pull_request_target
-permissions:
-  pull-requests: write  # to approve the PR
-  contents: write  # to merge the PR
 jobs:
-  dependabot:
-    if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
-    runs-on: ubuntu-latest
-    steps:
-      - id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v2
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-      - if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' || steps.dependabot-metadata.outputs.package-ecosystem == 'github_actions' }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh pr review --approve ${{ github.event.pull_request.html_url }}
-      - if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' || steps.dependabot-metadata.outputs.package-ecosystem == 'github_actions' }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
-  precommit:
-    if: ${{ github.event.pull_request.user.login == 'pre-commit-ci[bot]' }}
-    runs-on: ubuntu-latest
-    steps:
-      - env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh pr review --approve ${{ github.event.pull_request.html_url }}
-      - env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
+  automerge:
+    uses: open-contracting/.github/.github/workflows/automerge.yml@main
+    permissions:
+      actions: write
+      contents: write
+      pull-requests: write

.github/workflows/ci.yml

@@ -18,7 +18,6 @@ jobs:
       - run: ./manage.py --help
       - run: pip install -r requirements_dev.txt
       - run: playwright install chromium
-      # Compile messages, so that lib-cove-web translations are available.
       - name: Install gettext
         run: |
           sudo apt update
@@ -29,11 +28,13 @@ jobs:
         env:
           PYTHONWARNINGS: error
         shell: bash
-        # https://github.com/OpenDataServices/flatten-tool/pull/458
+        # https://github.com/OpenDataServices/flatten-tool/pull/458 > 0.20.0
         # https://github.com/OpenDataServices/flatten-tool/issues/412
         run: |
           ./manage.py migrate
           ./manage.py makemigrations --check --dry-run
           ./manage.py check --fail-level WARNING
           coverage run --source=core,cove_ocds -m pytest -W error -W ignore::DeprecationWarning:ijson.compat -W ignore::ResourceWarning
-      - uses: coverallsapp/github-action@v2
+      - uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
+        with:
+          fail_ci_if_error: true

.github/workflows/docker.yml

@@ -7,32 +7,6 @@ on:
       - completed
 jobs:
   docker:
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      # https://github.com/docker/login-action#github-container-registry
-      - uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      # https://github.com/docker/setup-buildx-action#usage
-      - uses: docker/setup-buildx-action@v3
-      # https://github.com/docker/build-push-action#usage
-      - uses: docker/build-push-action@v6
-        with:
-          push: true
-          file: Dockerfile_django
-          tags: |
-            ghcr.io/${{ github.repository }}-django:latest
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-      - uses: docker/build-push-action@v6
-        with:
-          push: true
-          file: Dockerfile_static
-          tags: |
-            ghcr.io/${{ github.repository }}-static:latest
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+    uses: open-contracting/.github/.github/workflows/docker-django.yml@main
+    permissions:
+      packages: write

.github/workflows/i18n.yml

@@ -4,24 +4,7 @@ on:
   push:
     branches: [main]
 jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.11'
-          cache: pip
-          cache-dependency-path: '**/requirements*.txt'
-      - name: Install translate-toolkit
-        run: |
-          sudo apt update
-          sudo apt install gettext translate-toolkit
-      - run: pip install -r requirements.txt
-      - run: python manage.py makemessages -a
-      - name: Count incomplete translations
-        shell: bash
-        run: |
-          output=$(find . -name LC_MESSAGES -not -path "*/en/*" -exec pocount --incomplete --short "{}" +)
-          echo $output
-          [ "$output" = "" ]
+  i18n:
+    uses: open-contracting/.github/.github/workflows/i18n-django.yml@main
+    permissions:
+      contents: read

.github/workflows/lint.yml

@@ -7,6 +7,3 @@ jobs:
       contents: write
     secrets:
       personal-access-token: ${{ secrets.PAT }}
-    with:
-      # https://github.com/OpenDataServices/lib-cove-web/pull/153
-      standard-maintenance-scripts-ignore: cove

.pre-commit-config.yaml

@@ -7,7 +7,7 @@ repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
     rev: v0.12.2
     hooks:
-      - id: ruff
+      - id: ruff-check
       - id: ruff-format
   - repo: https://github.com/astral-sh/uv-pre-commit
     rev: 0.7.19