chore: merge current main into PR branch to resolve conflicts

.all-contributorsrc

@@ -1065,6 +1065,112 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "sborx12",
+      "name": "sborx12",
+      "avatar_url": "https://avatars.githubusercontent.com/u/213525933?v=4",
+      "profile": "https://github.com/sborx12",
+      "contributions": [
+        "translation"
+      ]
+    },
+    {
+      "login": "alexarmstrongvi",
+      "name": "Alex Armstrong",
+      "avatar_url": "https://avatars.githubusercontent.com/u/10343299?v=4",
+      "profile": "https://github.com/alexarmstrongvi",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "gchambers11",
+      "name": "gchambers11",
+      "avatar_url": "https://avatars.githubusercontent.com/u/67167140?v=4",
+      "profile": "https://github.com/gchambers11",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "ericdill",
+      "name": "Eric Dill",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6223243?v=4",
+      "profile": "http://www.linkedin.com/pub/eric-dill/41/1b2/b48/",
+      "contributions": [
+        "doc",
+        "review"
+      ]
+    },
+    {
+      "login": "susannamau",
+      "name": "Susanna Maugeri",
+      "avatar_url": "https://avatars.githubusercontent.com/u/95857629?v=4",
+      "profile": "https://github.com/susannamau",
+      "contributions": [
+        "translation",
+        "doc"
+      ]
+    },
+    {
+      "login": "eleni-tkm",
+      "name": "eleni-tkm",
+      "avatar_url": "https://avatars.githubusercontent.com/u/68957419?v=4",
+      "profile": "https://github.com/eleni-tkm",
+      "contributions": [
+        "translation",
+        "doc"
+      ]
+    },
+    {
+      "login": "nikitaanand16",
+      "name": "nikitaanand16",
+      "avatar_url": "https://avatars.githubusercontent.com/u/46649840?v=4",
+      "profile": "https://github.com/nikitaanand16",
+      "contributions": [
+        "translation",
+        "doc"
+      ]
+    },
+    {
+      "login": "kenty002",
+      "name": "kenty002",
+      "avatar_url": "https://avatars.githubusercontent.com/u/161883477?v=4",
+      "profile": "https://github.com/kenty002",
+      "contributions": [
+        "translation",
+        "doc"
+      ]
+    },
+    {
+      "login": "chatniko",
+      "name": "chatniko",
+      "avatar_url": "https://avatars.githubusercontent.com/u/45994556?v=4",
+      "profile": "https://github.com/chatniko",
+      "contributions": [
+        "translation",
+        "doc"
+      ]
+    },
+    {
+      "login": "vladimir-slavov-iob",
+      "name": "Vladimir Slavov",
+      "avatar_url": "https://avatars.githubusercontent.com/u/99480713?v=4",
+      "profile": "http://slavov.substack.com",
+      "contributions": [
+        "doc",
+        "translation"
+      ]
+    },
+    {
+      "login": "wahajmasood",
+      "name": "Wahaj Masood",
+      "avatar_url": "https://avatars.githubusercontent.com/u/54262736?v=4",
+      "profile": "https://github.com/wahajmasood",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/workflows/build-book.yml

@@ -21,7 +21,7 @@ jobs:
   build-test-book:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
 
@@ -31,7 +31,7 @@ jobs:
           git restore-mtime
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.13"
 
@@ -44,7 +44,7 @@ jobs:
         run: echo "::set-output name=dir::$(pip cache dir)"
 
       - name: Cache dependencies
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0
         with:
           path: ${{ steps.pip-cache.outputs.dir }}
           key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}

.github/workflows/crowdin_sync.yml

@@ -9,7 +9,7 @@ jobs:
 
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Sync with Crowdin
         uses: crowdin/github-action@v2

.github/workflows/label-translations.yml

@@ -0,0 +1,49 @@
+name: Label translation PRs
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+    paths:
+      - "locales/**/*.po"
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Apply translation labels
+        uses: actions/github-script@v9
+        with:
+          script: |
+            const files = await github.paginate(github.rest.pulls.listFiles, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              per_page: 100,
+            });
+
+            const languages = new Set();
+            for (const file of files) {
+              const match = file.filename.match(/^locales\/([^/]+)\/.*\.po$/);
+              if (match) {
+                languages.add(match[1].toUpperCase());
+              }
+            }
+
+            if (languages.size === 0) {
+              core.info('No .po files under locales/ changed; nothing to label.');
+              return;
+            }
+
+            const labels = ['translations', ...[...languages].map(l => `lang-${l}`)];
+            core.info(`Applying labels: ${labels.join(', ')}`);
+
+            await github.rest.issues.addLabels({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              labels,
+            });

.github/workflows/main.yml

@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Add issue to project
         id: add-to-project
-        uses: actions/add-to-project@v1.0.2
+        uses: actions/add-to-project@v2.0.0
         with:
           project-url: https://github.com/orgs/pyOpenSci/projects/3
           # This is a organization level token so it can be used across all repos in our org

.github/workflows/track-english-changes.yml

@@ -0,0 +1,121 @@
+name: Track English text changes for translators
+
+# The `.po` catalogs are generated from the English pages, so changes to the guide
+# on `main` can leave every locale short of strings. This posts to the translation
+# maintenance issue to inform maintainers that updates are needed, rather than to
+# the pull request to avoid putting the burden on a beginner contributor.
+#
+# `push` rather than a pull-request trigger because that way it cannot be bypassed by
+# an admin pushing straight to `main`, or an edit made in the web editor.
+on:
+  push:
+    branches: [main]
+    # Broad on purpose: a filter that misses a source change loses the
+    # notification, one that is too wide costs a run that posts nothing.
+    paths-ignore:
+      - "locales/**"
+      - "scripts/**"
+      - ".github/**"
+
+permissions:
+  contents: read
+  issues: write
+
+env:
+  # The tracking issue is found by this label, not by number, so it can be closed
+  # and replaced without editing this file. Apply it to exactly one issue.
+  TRACKER_LABEL: po-refresh-tracker
+
+jobs:
+  track:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      # The whole push, not just its last commit. This repository merges by
+      # rebasing, so one pull request lands as several commits in a single push,
+      # and `HEAD^..HEAD` would see only the last of them.
+      - name: List the files this push touched
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          BEFORE: ${{ github.event.before }}
+          AFTER: ${{ github.event.after }}
+        run: |
+          # A branch creation or a force push reports an all-zero `before`, which
+          # the compare endpoint cannot use. There is nothing to diff against.
+          if [ -z "${BEFORE//0/}" ]; then
+            echo "No usable base for the comparison; nothing to report."
+            : > changed.txt
+          else
+            gh api "repos/${{ github.repository }}/compare/${BEFORE}...${AFTER}" \
+              --jq '.files[].filename' > changed.txt
+          fi
+          echo "Files this push touched:"
+          cat changed.txt
+
+      - name: Work out which catalogs could be affected
+        id: report
+        run: |
+          : > report.md
+          if [ -s changed.txt ]; then
+            python scripts/translation/check_source_changes.py changed.txt > report.md
+          fi
+          if [ -s report.md ]; then
+            echo "affected=true" >> "$GITHUB_OUTPUT"
+            cat report.md
+          else
+            echo "affected=false" >> "$GITHUB_OUTPUT"
+            echo "No English source that the guide translates was changed."
+          fi
+
+      - name: Tell the tracking issue
+        if: steps.report.outputs.affected == 'true'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            const label = process.env.TRACKER_LABEL;
+            const { owner, repo } = context.repo;
+
+            const found = await github.paginate(github.rest.issues.listForRepo, {
+              owner, repo, labels: label, state: 'all', per_page: 100,
+            });
+            // This endpoint counts pull requests as issues, so they are dropped.
+            const issues = found.filter(i => !i.pull_request);
+
+            if (issues.length === 0) {
+              // If no issue with the correct label is found, fail.
+              core.setFailed(
+                `No issue with the \`${label}\` label, so there is nowhere to ` +
+                `report this. Create the tracking issue and apply that label.`,
+              );
+              return;
+            }
+            // If multiple issues with the correct label are found, warn and use the
+            // lowest-numbered one.
+            if (issues.length > 1) {
+              core.warning(
+                `${issues.length} issues carry \`${label}\`: ` +
+                `${issues.map(i => '#' + i.number).join(', ')}. ` +
+                `Using the lowest-numbered one.`,
+              );
+            }
+            const issue = issues.sort((a, b) => a.number - b.number)[0];
+
+            if (issue.state === 'closed') {
+              core.info(`Reopening #${issue.number}: the English text has changed again.`);
+              await github.rest.issues.update(
+                { owner, repo, issue_number: issue.number, state: 'open' },
+              );
+            }
+
+            const body = fs.readFileSync('report.md', 'utf8')
+              + `\nChanged on \`main\`: ${context.payload.compare}\n`;
+            await github.rest.issues.createComment(
+              { owner, repo, issue_number: issue.number, body },
+            );
+            core.info(`Commented on #${issue.number}.`);

.pre-commit-config.yaml

@@ -25,7 +25,7 @@ repos:
       - id: trailing-whitespace
 
   - repo: https://github.com/codespell-project/codespell
-    rev: 2ccb47ff45ad361a21071a7eedda4c37e6ae8c5a # frozen: v2.4.2
+    rev: 57b21406f092110c18776e39b0bda50d37c945c8 # frozen: v2.4.3
     hooks:
       - id: codespell
         additional_dependencies:
@@ -36,12 +36,12 @@ repos:
           )$
 
   - repo: https://github.com/errata-ai/vale
-    rev: 41f3b223e8cc669d1309a2104e5b70df2ae6a5a8 # frozen: v3.14.1
+    rev: fe71481c95665a2343d81874489f8b012442a377 # frozen: v3.17.0
     hooks:
       - id: vale
 
   - repo: https://github.com/rbubley/mirrors-prettier
-    rev: 515f543f5718ebfd6ce22e16708bb32c68ff96e1 # frozen: v3.8.3
+    rev: 0ee178619d696787ca73d210cc191d720868c631 # frozen: v3.9.6
     hooks:
       - id: prettier
         types_or: [yaml, html, css, scss, javascript, json, toml]

CONTRIBUTING.md

@@ -150,9 +150,13 @@ To build the guide locally, you need to create a virtual environment and install
 To install the development dependencies, run the following command in your terminal:
 
 ```bash
-python -m pip install -e .[dev]
+python -m pip install -e '.[dev]'
 ```
 
+The quotes around `'.[dev]'` matter if you use zsh, the default shell on macOS. Without them, zsh treats the square brackets as a filename pattern and fails with `no matches found`.
+
+On Windows they are harmless in PowerShell, but if you use the older `cmd.exe` prompt you need to remove them and run `python -m pip install -e .[dev]` instead, because `cmd.exe` does not strip single quotes.
+
 ### Commit your changes
 
 After making your changes, you need to commit them to your local repository. To do this, run the following commands in your terminal: