chore: add Dependabot and test across Python 3.10-3.14

.github/actions/setup-python-poetry/action.yml

@@ -5,7 +5,7 @@ inputs:
   python-version:
     description: Python version
     required: false
-    default: '3.12'
+    default: '3.13'
   install-dependencies:
     description: Whether to install project dependencies
     required: false

.github/dependabot.yml

@@ -0,0 +1,32 @@
+version: 2
+updates:
+  # Python dependencies (Poetry, via pyproject.toml + poetry.lock) with grouped
+  # patch/minor updates. Major bumps are ignored here and handled deliberately.
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+      semver-minor-days: 7
+      semver-patch-days: 5
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+    versioning-strategy: "increase"
+    groups:
+      python-packages:
+        patterns:
+          - "*"
+        update-types: ["patch", "minor"]
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"

.github/workflows/ci.yml

@@ -93,8 +93,29 @@ jobs:
             --compare-branch=origin/main \
             --fail-under=80
 
+  test-matrix:
+    name: Tests (Python ${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Setup Python and Poetry
+        uses: ./.github/actions/setup-python-poetry
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Run tests
+        run: poetry run pytest tests/ -v
+
   auto-tag:
-    needs: lint-and-test
+    needs: [lint-and-test, test-matrix]
     if: github.event_name == 'push' && needs.lint-and-test.outputs.code_changed == 'true'
     runs-on: ubuntu-latest
     timeout-minutes: 5

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.poetry]
 name = "squawk-alembic"
-version = "0.3.5"
+version = "0.3.6"
 description = "Pre-commit hook to lint Alembic migration SQL with squawk"
 packages = [{include = "squawk_alembic"}]
 readme = "README.md"
@@ -22,6 +22,8 @@ classifiers = [
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
 ]
 
 [tool.poetry.dependencies]

squawk_alembic/__init__.py

@@ -1 +1 @@
-__version__ = "0.3.5"
+__version__ = "0.3.6"