Copier update: CI success check (#84)

Pull in upstream template changes

Tested in downstream repo

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Updated development tools and dependencies (Python, Node packages,
linters, formatters, GitHub Actions).
* Upgraded Docker development environment base image and Python
features.
  * Enhanced CI/CD workflows with improved job validation logic.
  * Updated Python version from 3.13.2 to 3.13.9 for CI testing.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: ejfine

.copier-answers.yml

@@ -1,11 +1,11 @@
 # Changes here will be overwritten by Copier
-_commit: v0.0.94
+_commit: v0.0.97
 _src_path: gh:LabAutomationAndScreening/copier-base-template.git
 description: Copier template for creating Python libraries and executables
 install_claude_cli: false
 python_ci_versions:
 - 3.12.7
-- 3.13.2
+- 3.13.9
 python_version: 3.12.7
 repo_name: copier-python-package-template
 repo_org_name: LabAutomationAndScreening

.devcontainer/Dockerfile

@@ -1,12 +1,13 @@
 # base image tags available at https://mcr.microsoft.com/v2/devcontainers/universal/tags/list
 # added the platform flag to override any local settings since this image is only compatible with linux/amd64. since this image is only x64 compatible, suppressing the hadolint rule
 # hadolint ignore=DL3029
-FROM --platform=linux/amd64 mcr.microsoft.com/devcontainers/universal:5.1.1-noble
+FROM --platform=linux/amd64 mcr.microsoft.com/devcontainers/universal:5.1.4-noble
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 # temporary hack until yarn updates its GPG key
-RUN rm /etc/apt/sources.list.d/yarn.list || true
+RUN rm /etc/apt/sources.list.d/yarn.list || true && \
+    curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | gpg --dearmor | tee /etc/apt/keyrings/yarn-archive-keyring.gpg > /dev/null
 
 RUN apt-get update -y && apt-get install -y \
     "bash-completion=$(apt-cache madison bash-completion | awk '{print $3}' | grep '^1:2.11' | head -n 1)" --no-install-recommends \

.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
   "service": "devcontainer",
   "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
   "features": {
-    "ghcr.io/devcontainers/features/python:1.7.1": {
+    "ghcr.io/devcontainers/features/python:1.8.0": {
       // https://github.com/devcontainers/features/blob/main/src/python/devcontainer-feature.json
       "version": "3.12.7",
       "installTools": false,
@@ -16,24 +16,24 @@
       "extensions": [
         // basic tooling
         // "eamodio.gitlens@15.5.1",
-        "coderabbit.coderabbit-vscode@0.16.6",
+        "coderabbit.coderabbit-vscode@0.17.0",
         "ms-vscode.live-server@0.5.2025051301",
         "MS-vsliveshare.vsliveshare@1.0.5905",
         "github.copilot@1.388.0",
-        "github.copilot-chat@0.36.2026010502",
+        "github.copilot-chat@0.38.2026022001",
 
         // Python
-        "ms-python.python@2025.21.2026010501",
-        "ms-python.vscode-pylance@2025.10.100",
+        "ms-python.python@2026.2.2026021801",
+        "ms-python.vscode-pylance@2026.1.1",
         "ms-vscode-remote.remote-containers@0.414.0",
-        "charliermarsh.ruff@2025.32.0",
+        "charliermarsh.ruff@2026.36.0",
 
         // Misc file formats
         "bierner.markdown-mermaid@1.29.0",
         "samuelcolvin.jinjahtml@0.20.0",
         "tamasfe.even-better-toml@0.19.2",
         "emilast.LogFileHighlighter@3.3.3",
-        "esbenp.prettier-vscode@11.0.2"
+        "esbenp.prettier-vscode@12.3.0"
       ],
       "settings": {
         "editor.accessibilitySupport": "off", // turn off sounds
@@ -58,5 +58,5 @@
   "initializeCommand": "sh .devcontainer/initialize-command.sh",
   "onCreateCommand": "sh .devcontainer/on-create-command.sh",
   "postStartCommand": "sh .devcontainer/post-start-command.sh"
-  // Devcontainer context hash (do not manually edit this, it's managed by a pre-commit hook): 69bb472f # spellchecker:disable-line
+  // Devcontainer context hash (do not manually edit this, it's managed by a pre-commit hook): 91027588 # spellchecker:disable-line
 }

.devcontainer/install-ci-tooling.py

@@ -7,9 +7,9 @@
 import tempfile
 from pathlib import Path
 
-UV_VERSION = "0.9.26"
-PNPM_VERSION = "10.28.1"
-COPIER_VERSION = "==9.11.2"
+UV_VERSION = "0.10.4"
+PNPM_VERSION = "10.30.0"
+COPIER_VERSION = "==9.11.3"
 COPIER_TEMPLATE_EXTENSIONS_VERSION = "==0.3.3"
 PRE_COMMIT_VERSION = "4.5.1"
 GITHUB_WINDOWS_RUNNER_BIN_PATH = r"C:\Users\runneradmin\.local\bin"

.github/actions/update-devcontainer-hash/action.yml

@@ -24,7 +24,7 @@ runs:
       shell: bash
 
     - name: Checkout code
-      uses: actions/checkout@v6.0.1
+      uses: actions/checkout@v6.0.2
       with:
         persist-credentials: true
         fetch-depth: 1

.github/pull_request_template.md

@@ -1,21 +1,21 @@
- ## Link to Issue or Message thread
+## Link to Issue or Message thread
 
 
 
- ## Why is this change necessary?
+## Why is this change necessary?
 
 
 
- ## How does this change address the issue?
+## How does this change address the issue?
 
 
 
- ## What side effects does this change have?
+## What side effects does this change have?
 
 
 
- ## How is this change tested?
+## How is this change tested?
 
 
 
- ## Other
+## Other

.github/reusable_workflows/build-docker-image.yaml

@@ -66,7 +66,7 @@ jobs:
         shell: bash
 
       - name: Checkout code
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false
 

.github/workflows/ci.yaml

@@ -40,7 +40,7 @@ jobs:
 
           - 3.12.7
 
-          - 3.13.2
+          - 3.13.9
 
         copier: [
           '--data-file tests/copier_data/data1.yaml',
@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false
 
@@ -151,9 +151,14 @@ jobs:
     if: always()
     steps:
       - name: fail if prior job failure
-        if: needs.lint-matrix.result != 'success'
         run: |
-          exit 1
+          success_pattern="^(skipped|success)$" # these are the possibilities: https://docs.github.com/en/actions/reference/workflows-and-actions/contexts#needs-context
+
+          if [[ ! "${{ needs.lint-matrix.result }}" =~ $success_pattern ]]; then
+            echo "❌ One or more jobs did not finish with skipped or success"
+            exit 1
+          fi
+          echo "✅ All jobs finished with skipped or success"
       - name: Mark updated dependabot hash commit as succeeded
         if: needs.get-values.outputs.dependabot-commit-created == 'true'
         env:

.github/workflows/get-values.yaml

@@ -35,7 +35,7 @@ jobs:
           JSON
 
       - name: Checkout code
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false
 

.github/workflows/pre-commit.yaml

@@ -33,14 +33,14 @@ jobs:
     steps:
       - name: Checkout code during push
         if: ${{ github.event_name == 'push' }}
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           ref: ${{ github.ref_name }} # explicitly get the head of the branch, which will include any new commits pushed if this is a dependabot branch
           persist-credentials: false
 
       - name: Checkout code not during push
         if: ${{ github.event_name != 'push' }}
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false