chore: install lint tools explicitly for baseline v0.6.2

.github/actions/bump-shared-workflow-version/action.yml

@@ -0,0 +1,22 @@
+name: Bump shared workflow embedder version
+description: Bump the embedder pip install version in update-fragments-shared.yml, commit and push.
+inputs:
+  version:
+    description: Release version without v prefix.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Bump and commit
+      shell: bash
+      run: |
+        set -euo pipefail
+        file=.github/workflows/update-fragments-shared.yml
+        if ! grep -q 'install-embedder@v' "$file" 2>/dev/null; then
+          exit 0
+        fi
+        sed -i "s|/install-embedder@v[^'\"]*|/install-embedder@v${{ inputs.version }}|" "$file"
+        git config user.name "github-actions[bot]"
+        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git add "$file"
+        git diff --cached --quiet || git commit -m "chore: bump shared workflow to ${{ inputs.version }}"

.github/actions/install-embedder/action.yml

@@ -0,0 +1,8 @@
+name: Install embedder
+description: Install embedder from this repository's source tree.
+runs:
+  using: composite
+  steps:
+    - name: Install
+      shell: bash
+      run: pip install -e "${{ github.action_path }}/../../.."

.github/actions/open-fragments-pr/action.yml

@@ -0,0 +1,30 @@
+name: Open fragments PR
+description: "Commit fragment updates and open a pull request."
+inputs:
+  branch:
+    description: Branch name for the PR.
+    required: false
+    default: embedder/update-fragments
+runs:
+  using: composite
+  steps:
+    - name: Commit and open pull request
+      shell: bash
+      env:
+        GH_TOKEN: ${{ github.token }}
+        BRANCH: ${{ inputs.branch }}
+      run: |
+        stat=$(git diff --stat)
+        git config user.name "github-actions[bot]"
+        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git checkout -b "$BRANCH"
+        git add -A
+        git commit -m "chore: update embedded fragments"
+        git push origin "$BRANCH" --force
+        existing=$(gh pr list --head "$BRANCH" --json number --jq '.[0].number // empty')
+        if [ -z "$existing" ]; then
+          gh pr create \
+            --title "chore: update embedded fragments" \
+            --body "$stat" \
+            --head "$BRANCH"
+        fi

.github/actions/refresh-local-fragments/action.yml

@@ -0,0 +1,18 @@
+name: Refresh local fragments
+description: "Re-embed all local: fragment refs in the workspace without bumping external dependencies."
+inputs:
+  paths:
+    description: Files or directories to scan. Defaults to the current directory.
+    required: false
+    default: "."
+runs:
+  using: composite
+  steps:
+    - name: Refresh local fragments
+      shell: bash
+      env:
+        EMBEDDER_PATHS: ${{ inputs.paths }}
+      run: |
+        pip install -e "${{ github.action_path }}/../../.."
+        read -ra paths <<< "$EMBEDDER_PATHS"
+        embedder update "${paths[@]}" --local-only

.github/dependabot.yml

@@ -0,0 +1,12 @@
+# embedder local:fragments/dependabot.yaml
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+# /embedder

.github/workflows/lint.yml

@@ -9,11 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: rubykatzen/baseline/.github/actions/lint-yamllint@v0.5.2
-      - uses: rubykatzen/baseline/.github/actions/lint-ruff@v0.5.2
-      - uses: rubykatzen/baseline/.github/actions/lint-actionlint@v0.5.2
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.13"
-      - run: pip install -e . pytest
-      - run: pytest
+      - uses: rubykatzen/baseline/.github/actions/setup-runtimes@v0.6.2
+      - uses: rubykatzen/baseline/.github/actions/lint-yamllint@v0.6.2
+      - uses: rubykatzen/baseline/.github/actions/lint-ruff@v0.6.2
+      - uses: rubykatzen/baseline/.github/actions/lint-actionlint@v0.6.2

.github/workflows/prepare-release.yml

@@ -39,6 +39,10 @@ jobs:
       - uses: rubykatzen/releaser/.github/actions/bump-pyproject-version@v0.3.4
         with:
           version: ${{ inputs.version }}
+      - uses: ./.github/actions/bump-shared-workflow-version
+        with:
+          version: ${{ inputs.version }}
+      - uses: ./.github/actions/refresh-local-fragments
       - uses: rubykatzen/releaser/.github/actions/push-release-branch@v0.3.4
         with:
           version: ${{ inputs.version }}

.github/workflows/spec.yml

@@ -0,0 +1,16 @@
+name: Spec
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+  workflow_dispatch:
+jobs:
+  spec:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - run: pip install -e . pytest
+      - run: pytest

.github/workflows/update-fragments-shared.yml

@@ -19,18 +19,14 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
-        with:
-          python-version: "3.13"
-      - name: Install embedder
-        run: pip install "git+https://github.com/rubykatzen/embedder.git@v0.0.5"
+      - uses: rubykatzen/embedder/.github/actions/install-embedder@v0.0.6
       - name: Run embedder update
         env:
           GH_TOKEN: ${{ secrets.token || github.token }}
           EMBEDDER_PATHS: ${{ inputs.paths }}
         run: |
           read -ra paths <<< "$EMBEDDER_PATHS"
-          embedder update "${paths[@]}" --json > /tmp/embedder-result.json
+          embedder update "${paths[@]}"
       - name: Detect changes
         id: diff
         run: |
@@ -41,26 +37,4 @@ jobs:
           fi
       - name: Open pull request
         if: steps.diff.outputs.changed == 'true'
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          branch="embedder/update-fragments"
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git checkout -b "$branch"
-          git add -A
-          git commit -m "chore: update embedded fragments"
-          git push origin "$branch" --force
-          body=$(jq -r '
-            "## Embedded fragment updates\n\n| File | Source | Asset | Old | New |\n|---|---|---|---:|---:|\n" +
-            ([.changed[] | .changed_blocks[] |
-              "| \(.block.path) | \(.block.ref.owner)/\(.block.ref.repo) | \(.block.ref.asset) | \(.block.ref.tag) | \(.latest_tag) |"
-            ] | join("\n"))
-          ' /tmp/embedder-result.json)
-          existing=$(gh pr list --head "$branch" --json number --jq '.[0].number // empty')
-          if [ -z "$existing" ]; then
-            gh pr create \
-              --title "chore: update embedded fragments" \
-              --body "$body" \
-              --head "$branch"
-          fi
+        uses: ./.github/actions/open-fragments-pr

.github/workflows/update-fragments.yml

@@ -0,0 +1,30 @@
+name: Update embedded fragments
+on:
+  schedule:
+    - cron: '0 8 * * *'  # 10:00 Berlin (CEST, UTC+2)
+  workflow_dispatch:
+jobs:
+  update:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v7
+      - name: Run embedder update
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          pip install -e .
+          embedder update .
+      - name: Detect changes
+        id: diff
+        run: |
+          if git diff --quiet; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Open pull request
+        if: steps.diff.outputs.changed == 'true'
+        uses: ./.github/actions/open-fragments-pr

fragments/dependabot.yaml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly