- .pre-commit-config.yaml with standard Go hooks: gofmt, go vet,
go mod tidy, plus trailing whitespace, end-of-file, yaml check,
large file check, merge conflict check
- go vet runs as a local hook with ./... to work correctly with
Go modules (the dnephin hook runs per-file which breaks)
- Woodpecker pre-commit pipeline updated to use almalinux9-gobuilder
image with uvx pre-commit run --all-files
- Pre-commit hooks installed into the repo
- Rebase Dockerfile onto almalinux9-base, install via uv tool install
- Remove dev artifacts (remotes.yaml, ca-bundle.pem) from image
- Mount gitignored dev files via docker-compose volumes instead
- Add .dockerignore to keep secrets out of build context
- Track docker-compose.yml in git (no secrets; dev files mounted as volumes)