chore(ci): workflow updates and pre-commit changes and configurations…

… added and applied

[batch update]

.github/workflows/call-publish.yml

@@ -0,0 +1,10 @@
+name: Call Publish Workflow
+
+on:
+  push:
+    branches:
+      - main  # Runs only on push (merge) to main
+
+jobs:
+  call-publish:
+    uses: splunk-soar-connectors/.github/.github/workflows/publish.yml@main

.github/workflows/call-push.yml

@@ -0,0 +1,13 @@
+name: Call Push Workflow
+
+on:
+  pull_request:
+    branches-ignore:
+      - main  # Runs only on non-main branches
+    types:
+      - opened       # When a new PR is opened
+      - synchronize  # When a new commit is pushed to the PR branch
+
+jobs:
+  call-push:
+    uses: splunk-soar-connectors/.github/.github/workflows/push.yml@main

.pre-commit-config.yaml

@@ -1,11 +1,51 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+
+# This is a template for connector pre-commit hooks
 repos:
--   repo: https://github.com/phantomcyber/dev-cicd-tools
-    rev: v1.16
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v3.2.0
     hooks:
-    -   id: org-hook
-    -   id: package-app-dependencies
--   repo: https://github.com/Yelp/detect-secrets
-    rev: v1.4.0
+      - id: check-merge-conflict
+      - id: end-of-file-fixer
+        exclude_types: [ markdown ]
+      - id: trailing-whitespace
+        exclude_types: [ markdown ]
+      - id: requirements-txt-fixer
+      - id: check-json
+      - id: check-yaml
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.9.6
     hooks:
-    -   id: detect-secrets
-        args: ['--no-verify', '--exclude-files', '^pan.json$']
+      - id: ruff
+        args: [ "--fix", "--exit-zero"] # Ignore errors for now, need to fix for all apps (and remove exit-zero)
+      - id: ruff-format
+  - repo: https://github.com/djlint/djLint
+    rev: v1.36.4
+    hooks:
+      - id: djlint-reformat-django
+      - id: djlint-django
+        args: ["--warn"]  # Ignore errors for now, need to fix for all apps (and remove warn)
+  - repo: https://github.com/hukkin/mdformat
+    rev: 0.7.22
+    hooks:
+      - id: mdformat
+        exclude: "release_notes/.*"
+  - repo: https://github.com/returntocorp/semgrep
+    rev: v1.107.0
+    hooks:
+      - id: semgrep
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        args: ['--no-verify']
+        exclude_types: [json]
+        # Central hooks
+  - repo: https://github.com/phantomcyber/dev-cicd-tools
+    rev: feature/frictionless_connector_contributions # TODO: Update when time
+    hooks:
+      - id: build-docs
+      - id: copyright
+      - id: package-app-dependencies
+      - id: static-tests

CONTRIBUTING.md

@@ -1,2 +1,3 @@
 # Contributing
+
 For more information about contributing to Splunk SOAR Apps please take a look at our app [Contribution Guide](https://github.com/splunk-soar-connectors/.github/blob/main/.github/CONTRIBUTING.md)!

LICENSE

@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright (c) 2014-2023 Splunk Inc.
+   Copyright (c) 2014-2025 Splunk Inc.
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
@@ -198,4 +198,4 @@
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
-   limitations under the License.
+   limitations under the License.

NOTICE

@@ -1,9 +1,9 @@
 Splunk SOAR Palo Alto Networks Firewall
-Copyright (c) 2014-2023 Splunk Inc.
+Copyright (c) 2014-2025 Splunk Inc.
 
 Third-party Software Attributions:
 
 Library: xmltodict
 Version: 0.12.0
 License: MIT
-Copyright 2012 Martin Blech and individual contributors
+Copyright 2012-2025 Martin Blech and individual contributors