Skip to content

Align the repository with the other MQT repositories - #4

Merged
DRovara merged 10 commits into
mainfrom
chore/polish
Oct 29, 2026
Merged

DRovara merged 10 commits into
mainfrom
chore/polish

Conversation

@DRovara

@DRovara DRovara commented Oct 29, 2026

Copy link
Copy Markdown
Collaborator

Brings the repository in line with the other MQT repositories, and fixes the three CodeQL alerts.

  • CodeQL alerts: the overlay sync read files after checking for them (file system race), and the qubit parser stripped the first ] instead of the closing one.
  • Templating: adds templating.yml, as in NAViz and DDVis. After merging, it opens a pull request with the shared MQT files: issue and PR templates, SECURITY.md, SUPPORT.md, the Renovate config, docs/ai_usage.md and the shared docs files. The changelog, Release Drafter, .gitignore and the contribution and installation guides are not synced, since this repository has no releases and its own guides. The scratchblocks styles moved from custom.css to scratchblocks.css, so the sync doesn't overwrite them. The project name is "Scratch Quantum" ("MQT Scratch Quantum" in the synced files).
  • Workflow hardening (zizmor, pedantic): checkouts don't keep the token, permissions default to none and are commented, and a new push to a pull request cancels its older run.
  • Pre-commit: adds check-github-workflows, check-renovate, zizmor, license-tools and pyproject-fmt, like the templates repository. rumdl is left out because it would reflow all docs.
  • License headers: MIT headers on scripts/ and the docs code. vm/, gui/ and patches/ (AGPL-3.0) are excluded.
  • Polish: README license and CI badges, .github/CONTRIBUTING.md pointing to the docs, a clearer setup error message, and git 2.32 named in the requirements.

🤖 Generated with Claude Code

DRovara and others added 10 commits October 29, 2026 10:29
CodeQL flagged the check-then-read as a file system race.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
CodeQL flagged the replace as incomplete because it removed the first ']' anywhere.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
custom.css is synced from the MQT templates, which would overwrite them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Checkouts no longer keep the token, permissions default to none and say why each job needs them, and a new push to a pull request cancels its older run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 29, 2026 •

Copy link
Copy Markdown
PR Preview Action v1.8.2
Preview removed because the pull request was closed.
2026-10-29 10:19 UTC

@DRovara
DRovara merged commit 7c3c68a into main Oct 29, 2026
10 checks passed
@DRovara
DRovara deleted the chore/polish branch October 29, 2026 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant