fix(ci): clean up CI warnings and update Node.js 20 deprecated actions

- Bump actions/cache v4->v5, upload-artifact v5->v7, setup-uv v4->v7,
  setup-task v1->v2 to resolve Node.js 20 deprecation warnings
- Remove pointless --cov addopts from root pyproject.toml (ai_native_python
  package only has __init__.py metadata, causing "No data collected" warning)
- Add --source-name and --source-version to syft SBOM command to suppress
  "no explicit name and version" warning
- Redirect stderr on docker buildx inspect to suppress expected ERROR when
  multiplatform builder doesn't exist yet
- Register missing pytest.mark.slow marker in template pyproject.toml
- Fix argparse prog name in template main.py (showed "main.py" instead of
  package name in --version output)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: JonZeolla

.github/actions/bootstrap/action.yml

@@ -32,14 +32,14 @@ runs:
         echo "run_script=uv run --frozen" | Tee-Object -Append $env:GITHUB_ENV
 
     - name: Setup uv
-      uses: astral-sh/setup-uv@v4
+      uses: astral-sh/setup-uv@v7
       with:
         enable-cache: true
         cache-dependency-glob: "**/uv.lock"
         python-version: ${{ inputs.python-version }}
 
     - name: Install Task
-      uses: go-task/setup-task@v1
+      uses: go-task/setup-task@v2
       with:
         # Passing a repo token reduces the likelihood of API rate limit exceeded
         repo-token: ${{ inputs.token }}
@@ -102,7 +102,7 @@ runs:
         echo "PY=$hash" | Tee-Object -Append $env:GITHUB_ENV
 
     - name: Cache pre-commit environments
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ~/.cache/pre-commit
         key: pre-commit|${{ env.PY }}|${{ hashFiles(format('{0}/.pre-commit-config.yaml', inputs.working-directory)) }}

.github/workflows/ci.yml

@@ -80,7 +80,7 @@ jobs:
       - name: Run SBOM generation
         run: task -v sbom
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: sbom-files
           path: |
@@ -89,15 +89,15 @@ jobs:
       - name: Check license compliance
         run: task -v license-check
       - name: Upload license check results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: license-check-results
           path: license-check.json
           if-no-files-found: error
       - name: Run vulnerability scan
         run: task -v vulnscan
       - name: Upload vulnerability scan results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: vuln-scan-results
           path: vulns.json
@@ -111,11 +111,11 @@ jobs:
       # out the repo on Windows. Instead, cookiecutter fetches the template
       # directly from the remote branch.
       - name: Setup uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v7
         with:
           python-version: ${{ env.python_version }}
       - name: Install Task
-        uses: go-task/setup-task@v1
+        uses: go-task/setup-task@v2
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Generate project from template

Taskfile.yml

@@ -49,7 +49,7 @@ tasks:
       # This fixes an "ERROR: Multiple platforms feature is currently not supported for docker driver" pipeline error
       # Only create our multiplatform builder if it doesn't already exist; otherwise list information about the one that exists
       # It suppresses the inspect output when it's not running in a GitHub Action
-      - docker buildx inspect multiplatform {{if ne .GITHUB_ACTIONS "true"}}>/dev/null{{end}} || docker buildx create --name multiplatform --driver docker-container --use
+      - docker buildx inspect multiplatform {{if ne .GITHUB_ACTIONS "true"}}>/dev/null{{end}} 2>/dev/null || docker buildx create --name multiplatform --driver docker-container --use
 
   init:
     desc: Initialize the repo for local use; intended to be run after git clone
@@ -152,6 +152,8 @@ tasks:
           -w /src \
           anchore/syft:latest \
           /src \
+          --source-name={{.PROJECT_SLUG}} \
+          --source-version={{.VERSION}} \
           -o syft-json=sbom.syft.json \
           -o spdx-json=sbom.spdx.json \
           -o cyclonedx-json=sbom.cyclonedx.json

pyproject.toml

@@ -50,7 +50,7 @@ ignore = [
 plugins = []
 
 [tool.pytest.ini_options]
-addopts = "--cov=ai_native_python --cov-append --no-cov-on-fail --cov-fail-under=0 --cov-report=html --cov-report=xml --cov-report=term-missing"
+addopts = ""
 pythonpath = ['.']
 markers = [
     "unit: marks tests as unit tests (deselect with '-m \"not unit\"')",
@@ -77,7 +77,6 @@ dev = [
 ]
 
 [tool.coverage.report]
-fail_under = 80
 
 [tool.pyright]
 include = ["ai_native_python", "tests", "hooks"]

{{cookiecutter.project_name|replace(" ", "")}}/.github/actions/bootstrap/action.yml

@@ -24,14 +24,14 @@ runs:
         echo "run_script=${run_script}" | tee -a "${GITHUB_ENV}"
 
     - name: Setup uv
-      uses: astral-sh/setup-uv@v4
+      uses: astral-sh/setup-uv@v7
       with:
         enable-cache: true
         cache-dependency-glob: "**/uv.lock"
         python-version: ${{ "{{ inputs.python-version }}" }}
 
     - name: Install Task
-      uses: go-task/setup-task@v1
+      uses: go-task/setup-task@v2
       with:
         # Passing a repo token reduces the likelihood of API rate limit exceeded
         repo-token: ${{ "{{ inputs.token }}" }}
@@ -74,7 +74,7 @@ runs:
         echo "PY=$(python -VV | sha256sum | cut -d' ' -f1)" | tee -a "${GITHUB_ENV}"
 
     - name: Cache pre-commit environments
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ~/.cache/pre-commit
         key: pre-commit|${{ "{{ env.PY }}" }}|${{ "{{ hashFiles(format('{0}/.pre-commit-config.yaml', inputs.working-directory)) }}" }}

{{cookiecutter.project_name|replace(" ", "")}}/.github/workflows/ci.yml

@@ -101,7 +101,7 @@ jobs:
       - name: Set env var for unique artifact uploads
         run: echo SANITIZED_PLATFORM="$(echo "${{ "{{ matrix.platform }}" }}" | sed 's/\//_/g')" | tee -a "${GITHUB_ENV}"
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: sbom-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: |
@@ -112,7 +112,7 @@ jobs:
         env:
           PLATFORM: ${{ "{{ matrix.platform }}" }}
       - name: Upload license check results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: license-check-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: license-check.*.json
@@ -122,7 +122,7 @@ jobs:
         env:
           PLATFORM: ${{ "{{ matrix.platform }}" }}
       - name: Upload vulnerability scan results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: vulns-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: vulns.*.json

{{cookiecutter.project_name|replace(" ", "")}}/.github/workflows/commit.yml

@@ -76,7 +76,7 @@ jobs:
       - name: Set env var for unique artifact uploads
         run: echo SANITIZED_PLATFORM="$(echo "${{ "{{ matrix.platform }}" }}" | sed 's/\//_/g')" | tee -a "${GITHUB_ENV}"
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: sbom-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: |
@@ -87,7 +87,7 @@ jobs:
         env:
           PLATFORM: ${{ "{{ matrix.platform }}" }}
       - name: Upload license check results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: license-check-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: license-check.*.json
@@ -97,7 +97,7 @@ jobs:
         env:
           PLATFORM: ${{ "{{ matrix.platform }}" }}
       - name: Upload vulnerability scan results
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: vulns-${{ "{{ env.SANITIZED_PLATFORM }}" }}
           path: vulns.*.json

{{cookiecutter.project_name|replace(" ", "")}}/Taskfile.yml

@@ -60,7 +60,7 @@ tasks:
       # This fixes an "ERROR: Multiple platforms feature is currently not supported for docker driver" pipeline error
       # Only create our multiplatform builder if it doesn't already exist; otherwise list information about the one that exists
       # It suppresses the inspect output when it's not running in a GitHub Action
-      - docker buildx inspect multiplatform {{ '{{if ne .GITHUB_ACTIONS "true"}}' }}>/dev/null{{ '{{end}}' }} || docker buildx create --name multiplatform --driver docker-container --use
+      - docker buildx inspect multiplatform {{ '{{if ne .GITHUB_ACTIONS "true"}}' }}>/dev/null{{ '{{end}}' }} 2>/dev/null || docker buildx create --name multiplatform --driver docker-container --use
 
   init:
     desc: Initialize the repo for local use; intended to be run after git clone

{{cookiecutter.project_name|replace(" ", "")}}/pyproject.toml

@@ -35,6 +35,7 @@ pythonpath = ['src']
 markers = [
     "unit: marks tests as unit tests (deselect with '-m \"not unit\"')",
     "integration: marks tests as integration tests (deselect with '-m \"not integration\"')",
+    "slow: marks tests as slow tests (deselect with '-m \"not slow\"')",
 ]
 
 [tool.uv]

{{cookiecutter.project_name|replace(" ", "")}}/src/main.py

@@ -10,7 +10,10 @@
 
 def main():
     """Main entry point for the application."""
-    parser = argparse.ArgumentParser(description="{{ cookiecutter.project_short_description | replace('"', '\\"') | replace("'", "\\\\'") }}")
+    parser = argparse.ArgumentParser(
+        prog="{{ cookiecutter.project_slug }}",
+        description="{{ cookiecutter.project_short_description | replace('"', '\\"') | replace("'", "\\\\'") }}",
+    )
     parser.add_argument(
         "--version", action="version", version=f"%(prog)s {__version__}"
     )