Merge pull request #245 from casework/add_unscheduled_supply_chain_review

Add supply-chain review target

Author: plbt5

.gitmodules

@@ -1,12 +1,16 @@
 [submodule "dependencies/CASE-develop"]
 	path = dependencies/CASE-develop
 	url = https://github.com/casework/CASE.git
+	branch = develop
 [submodule "dependencies/CASE-develop-2.0.0"]
 	path = dependencies/CASE-develop-2.0.0
 	url = https://github.com/casework/CASE.git
+	branch = develop-2.0.0
 [submodule "dependencies/CASE-unstable"]
 	path = dependencies/CASE-unstable
 	url = https://github.com/casework/CASE-Archive.git
+	branch = unstable
 [submodule "dependencies/CASE-unstable-2.0.0"]
 	path = dependencies/CASE-unstable-2.0.0
 	url = https://github.com/casework/CASE-Archive.git
+	branch = unstable-2.0.0

Makefile

@@ -34,7 +34,10 @@ all: \
   all-ontology \
   check-examples \
   check-migration-0.2.0 \
-  check-ontology
+  check-ontology \
+  check-supply-chain \
+  check-supply-chain-pre-commit \
+  check-supply-chain-submodules
 
 .dependencies.done.log: \
   .venv.done.log
@@ -138,6 +141,28 @@ check-ontology: \
 	  --directory ontology \
 	  check
 
+# This target's dependencies potentially modify the working directory's Git state, so it is intentionally not a dependency of check.
+check-supply-chain: \
+  check-supply-chain-pre-commit \
+  check-supply-chain-submodules
+
+check-supply-chain-pre-commit: \
+  .venv-pre-commit/var/.pre-commit-built.log
+	source .venv-pre-commit/bin/activate \
+	  && pre-commit autoupdate
+	git diff \
+	  --exit-code \
+	  .pre-commit-config.yaml
+
+check-supply-chain-submodules: \
+  .git_submodule_init.done.log
+	git submodule update \
+	  --remote
+	git diff \
+	  --exit-code \
+	  --ignore-submodules=dirty \
+	  dependencies
+
 clean:
 	@$(MAKE) \
 	  --directory examples \