Switch to uv and prek, and enforce the shared lint suite

[rtibbles]

❌ This issue is not open for contribution. Visit Contributing guidelines to learn about the contributing process and how to find suitable issues.

Overview

Nothing in this repo enforces the JS or Python linting our other repos run: ESLint reports 13 errors and Prettier flags 9 files on main. This brings its tooling in line with Kolibri, Studio, and Morango.

Complexity: Low
Target branch: main

Context

• .pre-commit-config.yaml runs pre-commit-hooks v4.1.0, yamlfmt v0.14.0, actionlint v1.7.7, and the local generate-automation drift check.
• requirements-dev.txt lists pre-commit; pre-commit.yml installs prek with pipx install prek.
• The repo has JS under scripts/ (ESLint and Prettier configured in package.json, .eslintrc.js, .prettierrc.js) and two Python scripts under scripts/.
• .github/dependabot.yml covers npm, pip, and github-actions monthly with a 7-day cooldown.

The Change

• The repo should be a uv project like Kolibri, Studio, and Morango, declaring requests for the Python scripts and prek in a dev group.
• .pre-commit-config.yaml should run the suite our other repos run: pre-commit-hooks, ruff and ruff-format, yamlfmt, actionlint, zizmor, uv-lock, and ESLint and Prettier on the JS, alongside the existing generate-automation check.
• Existing violations should be fixed, not excluded.
• Dependabot should replace its pip entry with uv and add the pre-commit ecosystem, monthly with the 7-day cooldown, hook bumps grouped into one PR.

Out of Scope

• Autofixing lint failures on PRs, including restoring the pre-commit.ci lite action.

Acceptance Criteria

• On a clean checkout, uv sync --group dev then uv run prek run --all-files passes.
• pre-commit.yml runs the same hooks through uv and passes on main.
• requirements-dev.txt is removed and no workflow runs pip install.
• Insights > Dependency graph > Dependabot lists uv, pre-commit, npm, and github-actions, and no pip.
• A page in docs/ covers setting up a dev environment: installing the Python and JS dependencies and the prek git hook.

References

• Kolibri's hook set: https://github.com/learningequality/kolibri/blob/develop/.pre-commit-config.yaml
• Dependabot pre-commit ecosystem: https://github.blog/changelog/2026-03-10-dependabot-now-supports-pre-commit-hooks/

AI usage

I chose the scope: prek and uv as in our other repos, Dependabot over a scheduled autoupdate job, and autofix left out. Claude Code surveyed this repo's and Kolibri's configs and drafted the sections, which I reviewed one by one.