crickets-and-comb/shared

AI Summary: This issue aims to mark several Python packages as typed according to PEP 561, enabling `mypy` to correctly type-check them when used as dependencies. The task involves adding an empty `py.typed` file and updating `setup.cfg` with `[options.package_data]` for each package, followed by deployment to PyPI. The immediate focus is on `comb_utils`, with `reference_package` serving as a proof of concept.

AI Summary: This issue involves integrating `basedpyright` into the `shared` `Makefile`'s `typecheck` recipe, making its execution optional for consuming repositories. The task requires mirroring the existing `pytype` logic for conditional execution and installation checks using a configurable variable, placing it after current typecheckers, and updating the relevant documentation.

AI Summary: This GitHub issue requests the integration of `mypy` into a `shared` `Makefile`'s `typecheck` recipe. The implementation should allow consuming repositories to conditionally run `mypy` by setting a variable, mirroring the existing logic for `pytype` regarding installation checks and skipping. The task involves modifying the `Makefile`, updating documentation, and verifying the integration in a reference package.

AI Summary: This GitHub issue outlines the task of integrating a new type checker, 'ty', into a shared Makefile's `typecheck` recipe. The integration must be conditional, allowing consuming repositories to opt-in via a `RUN_TY` variable, mirroring the existing logic for 'pytype' including skipping if not expected and failing if expected but missing. Documentation updates are also required.

AI Summary: The task involves reviewing all GitHub workflows across multiple repositories within an organization to identify and improve input sanitization. This includes adding regex validation and other transformations (like whitespace stripping) to ensure that workflow inputs are properly cleaned and secured before being used within the workflows. The goal is to prevent potential security vulnerabilities caused by unsanitized inputs.

AI Summary: The task involves creating a reusable GitHub Actions workflow for CodeQL code scanning, addressing limitations of the default configuration. This includes copying an existing workflow, modifying it to use workflow_call triggers, creating a calling workflow in a reference repository, thoroughly testing it across various scenarios (pushes, pull requests, forks), and potentially adapting it for different programming languages. An alternative approach involving a default workflow in the organization's `.github` repository is also considered.

AI Summary: The task requires modifying the GitHub Actions workflow (`block_outside_PRs.yml`) to enhance the pull request (PR) blocking system. Instead of relying solely on an organization membership or a whitelist, the updated workflow should check if a contributor is a GitHub collaborator for the repository. This change aims to simplify the process of adding contributors and eliminate the need for maintaining and updating a whitelist.