chore: close #102, add dependabot, codeql

.github/dependabot.yaml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+
+  # Maintain dependencies for pip, pipenv, poetry
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"

.github/workflows/codeql.yaml

@@ -0,0 +1,21 @@
+name: Code scanning (CodeQL)
+
+on:
+  pull_request:
+    types: [ready_for_review, opened, reopened, synchronize]
+    branches:
+      - main
+  push:
+    branches:
+      - master
+
+jobs:
+  codeql:
+    name: Run codeql
+    uses: Informasjonsforvaltning/workflows/.github/workflows/codeql.yaml@main
+    with:
+      language: python
+      python_version: '3.9'
+      python_architecture: x64
+    secrets:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/constraints.txt

@@ -0,0 +1,5 @@
+pip==24.2
+pipx==1.4.3
+nox==2022.8.7
+nox-poetry==1.0.1
+poetry==1.2.2

.github/workflows/tests.yml

@@ -3,18 +3,13 @@ on: push
 
 jobs:
   tests:
-    runs-on: ubuntu-latest
     strategy:
       matrix:
         python-version: ['3.9']
     name: Python ${{ matrix.python-version }}
-    steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-python@v1
-      with:
-        python-version: ${{ matrix.python-version }}
-        architecture: x64
-    - run: pip install nox==2022.8.7
-    - run: pip install poetry==1.2.2
-    - run: pip install nox-poetry==1.0.1
-    - run: nox --python ${{ matrix.python-version }}
+    uses: Informasjonsforvaltning/workflows/.github/workflows/test-nox.yaml@main
+    with:
+      python_version: ${{ matrix.python-version }}
+      python_architecture: x64
+    secrets:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

pyproject.toml

@@ -6,7 +6,7 @@ authors = ["Stig B. Dørmænen <[email protected]>"]
 license = "Apache-2.0"
 
 [tool.poetry.dependencies]
-python = ">=3.9,<3.11"
+python = ">=3.9,<3.10"
 PyYAML = "^6.0"
 click = "^8.1.3"
 jsonpickle = "^2.2.0"