Update project template cruft, dependencies

Applied updates from upstream project template commits:

7025e55...9a783dd

*   9a783dd Merge pull request #120 from smkent/ruff
|\
| * 5f80cc9 Update README.md for migration to `ruff`
|/
*   a462a7d Merge pull request #119 from smkent/ruff
|\
| * 37e016c Move `ruff` select config to correct section
|/
*   58fcbd7 Merge pull request #118 from smkent/update
|\
| * 08c7942 Update pre-commit hook versions in template
| * 4982dd0 Update template `.pre-commit-config.yaml` whitespace
| * dc91253 Replace multiple Python linters with `ruff`
| * 9288b41 Update Poetry, Python versions in template
|/
* e7df558 Merge pull request #117 from smkent/manage-cookie
* 0200edc Update project template cruft, dependencies

Updated project dependencies via `poetry update`:

Package operations: 3 installs, 41 updates, 17 removals

- Removing astor (0.8.1)
- Removing attrs (25.3.0)
- Removing black (25.1.0)
- Removing deprecated (1.2.18)
- Removing flake8 (7.2.0)
- Removing flake8-bugbear (24.12.12)
- Removing flake8-pyproject (1.2.3)
- Removing flake8-simplify (0.21.0)
- Removing isort (6.0.1)
- Removing mccabe (0.7.0)
- Removing pbr (6.1.1)
- Removing pep8-naming (0.15.1)
- Removing pycodestyle (2.13.0)
- Removing pyflakes (3.3.2)
- Removing setuptools (80.9.0)
- Removing types-python-dateutil (2.9.0.20250516)
- Removing wrapt (1.17.2)
- Updating pycparser (2.22 -> 2.23)
- Updating certifi (2025.4.26 -> 2026.1.4)
- Updating cffi (1.17.1 -> 2.0.0)
- Updating charset-normalizer (3.4.2 -> 3.4.4)
- Updating idna (3.10 -> 3.11)
- Updating markdown-it-py (3.0.0 -> 4.0.0)
- Updating markupsafe (3.0.2 -> 3.0.3)
- Updating pygments (2.19.1 -> 2.19.2)
- Installing tzdata (2025.3)
- Updating urllib3 (2.4.0 -> 2.6.3)
- Updating arrow (1.3.0 -> 1.4.0)
- Updating click (8.1.8 -> 8.3.1)
- Updating cryptography (43.0.3 -> 46.0.3)
- Updating distlib (0.3.9 -> 0.4.0)
- Updating filelock (3.18.0 -> 3.20.3)
- Updating iniconfig (2.1.0 -> 2.3.0)
- Updating platformdirs (4.3.8 -> 4.5.1)
- Updating pyyaml (6.0.2 -> 6.0.3)
- Updating requests (2.32.3 -> 2.32.5)
- Updating rich (14.0.0 -> 14.2.0)
- Updating typing-extensions (4.13.2 -> 4.15.0)
- Updating cfgv (3.4.0 -> 3.5.0)
- Updating coverage (7.8.2 -> 7.13.1)
- Updating identify (2.6.12 -> 2.6.16)
- Updating gitpython (3.1.44 -> 3.1.46)
- Installing librt (0.7.7)
- Updating pynacl (1.5.0 -> 1.6.2)
- Updating pathspec (0.12.1 -> 1.0.3)
- Updating nodeenv (1.9.1 -> 1.10.0)
- Updating stevedore (5.4.1 -> 5.6.0)
- Updating termcolor (3.1.0 -> 3.3.0)
- Updating typer (0.16.0 -> 0.21.1)
- Updating pytest (8.3.5 -> 9.0.2)
- Updating virtualenv (20.31.2 -> 20.36.1)
- Updating bandit (1.8.3 -> 1.9.2)
- Updating build (1.2.2.post1 -> 1.4.0)
- Updating mypy (1.16.0 -> 1.19.1)
- Updating poethepoet (0.34.0 -> 0.40.0)
- Updating pre-commit (4.2.0 -> 4.5.1)
- Updating pygithub (2.6.1 -> 2.8.1)
- Updating pytest-cov (6.1.1 -> 7.0.0)
- Updating pytest-sugar (1.0.0 -> 1.1.1)
- Installing ruff (0.14.11)
- Updating types-pyyaml (6.0.12.20250516 -> 6.0.12.20250915)

Writing lock file

Author: smkent

.cruft.json

@@ -1,6 +1,6 @@
 {
   "template": ".",
-  "commit": "7025e55adab820dd8e63d8be0e0ec0cabad0d830",
+  "commit": "9a783dd51cc0195a994c510e5f0eeb2d730a7e49",
   "context": {
     "cookiecutter": {
       "project_name": "cookie-python",
@@ -14,7 +14,7 @@
       "author_email": "smkent@smkent.net",
       "github_user": "smkent",
       "_template": ".",
-      "_commit": "7025e55adab820dd8e63d8be0e0ec0cabad0d830"
+      "_commit": "9a783dd51cc0195a994c510e5f0eeb2d730a7e49"
     }
   },
   "directory": null,

.github/workflows/cd.yml

@@ -4,8 +4,8 @@ name: Release
 env:
   ENABLE_PYPI_PUBLISH: true
   ENABLE_TEST_PYPI_PUBLISH: false
-  RELEASE_PYTHON_VERSION: "3.12"
-  RELEASE_POETRY_VERSION: "2.0"
+  RELEASE_PYTHON_VERSION: "3.14"
+  RELEASE_POETRY_VERSION: "2.2"
 
 on:
   push:

.github/workflows/ci.yml

@@ -25,8 +25,9 @@ jobs:
           - "3.11"
           - "3.12"
           - "3.13"
+          - "3.14"
         poetry-version:
-          - "2.0"
+          - "2.2"
 
     runs-on: ${{ matrix.os }}-latest
     steps:

.pre-commit-config.yaml

@@ -1,52 +1,30 @@
 exclude: '^{{cookiecutter.project_name}}/'
 repos:
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
-    hooks:
-    - id: check-yaml
-    - id: check-merge-conflict
-    - id: debug-statements
-    - id: end-of-file-fixer
-    - id: trailing-whitespace
-  - repo: https://github.com/psf/black
-    rev: 25.1.0
-    hooks:
-    - id: black
-      args: ["--config", "pyproject.toml"]
-  - repo: https://github.com/pycqa/isort
-    rev: 6.0.1
-    hooks:
-    - id: isort
-      args: ["--show-config"]
-  - repo: https://github.com/pycqa/bandit
-    rev: 1.8.3
-    hooks:
-    - id: bandit
-      additional_dependencies: ['.[toml]']
-      args: ["--configfile", "pyproject.toml"]
-      exclude: '^tests/'
-  - repo: https://github.com/pycqa/flake8
-    rev: 7.2.0
-    hooks:
-    - id: flake8
-      additional_dependencies:
-      - flake8-bugbear
-      - flake8-pyproject
-      - flake8-simplify
-      - pep8-naming
-  - repo: https://github.com/pycqa/autoflake
-    rev: v2.3.1
-    hooks:
-    - id: autoflake
-  - repo: https://github.com/asottile/pyupgrade
-    rev: v3.20.0
-    hooks:
-    - id: pyupgrade
-      args: ["--py39-plus", "--keep-runtime-typing"]
-  - repo: local
-    hooks:
-    - id: mypy
-      name: mypy
-      language: python
-      types_or: [python, pyi]
-      entry: env -u VIRTUAL_ENV poetry run mypy
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v6.0.0
+  hooks:
+  - id: check-yaml
+  - id: check-merge-conflict
+  - id: debug-statements
+  - id: end-of-file-fixer
+  - id: trailing-whitespace
+- repo: https://github.com/astral-sh/ruff-pre-commit
+  rev: v0.14.11
+  hooks:
+  - id: ruff
+    args: ["--fix"]
+  - id: ruff-format
+- repo: https://github.com/pycqa/bandit
+  rev: 1.9.2
+  hooks:
+  - id: bandit
+    additional_dependencies: ['.[toml]']
+    args: ["--configfile", "pyproject.toml"]
+    exclude: '^tests/'
+- repo: local
+  hooks:
+  - id: mypy
+    name: mypy
+    language: python
+    types_or: [python, pyi]
+    entry: env -u VIRTUAL_ENV poetry run mypy

cookie_python/manage/github.py

@@ -1,7 +1,6 @@
 import contextlib
 import os
 from functools import cached_property, lru_cache
-from typing import Optional
 
 import github
 from github.PullRequest import PullRequest
@@ -27,11 +26,12 @@ def find_repo(self, search: str) -> Repository:
 
     def find_pr(
         self, repo: Repository, head: str, base: str = "main"
-    ) -> Optional[PullRequest]:
+    ) -> PullRequest | None:
         pulls = [
             pr
             for pr in repo.get_pulls(
-                head=f"{self.username}:{head}", base=base  # noqa: E231
+                head=f"{self.username}:{head}",
+                base=base,  # noqa: E231
             )
         ]
         if not pulls:

cookie_python/manage/main.py

@@ -2,9 +2,9 @@
 
 import argparse
 import sys
+from collections.abc import Callable
 from enum import Enum
 from pathlib import Path
-from typing import Callable
 
 from loguru import logger
 

cookie_python/manage/update.py

@@ -1,6 +1,5 @@
 import os
 from pathlib import Path
-from typing import Optional
 
 from .repo import RepoSandbox
 
@@ -13,7 +12,7 @@ def reset_cruft_json(repo: RepoSandbox) -> None:
     )
 
 
-def update_cruft(repo: RepoSandbox) -> Optional[str]:
+def update_cruft(repo: RepoSandbox) -> str | None:
     before_ref = repo.cruft_attr("commit")
     repo.run(["poetry", "env", "remove", "--all"], check=False)
     repo.run(["poetry", "env", "use", "/usr/bin/python3"])
@@ -87,7 +86,7 @@ def update_cruft(repo: RepoSandbox) -> Optional[str]:
     )
 
 
-def update_dependencies(repo: RepoSandbox) -> Optional[str]:
+def update_dependencies(repo: RepoSandbox) -> str | None:
     repo.run(["poetry", "run", "pre-commit", "autoupdate"])
     updates = repo.run(
         ["poetry", "update", "--no-cache"], capture_output=True

cookie_python/new.py

@@ -54,9 +54,10 @@ def locate_new_project(parent_dir: str) -> str:
                 .strip()
                 == "?? .cruft.json"
             ), f"Detected project directory {sub_dir} has unexpected contents"
-            assert (
-                time.time() - os.stat(sub_dir).st_ctime < 60
-            ), f"Detected project directory {sub_dir} was not created just now"
+            assert time.time() - os.stat(sub_dir).st_ctime < 60, (
+                f"Detected project directory {sub_dir}"
+                " was not created just now"
+            )
             return sub_dir
     raise Exception("Unable to locate newly-created project directory")