chore: harden CI, add code of conduct, link community docs

- Bump CI actions (checkout v6, setup-uv v8) and fold Python setup into
  setup-uv; add a least-privilege contents:read permissions block.
- Add CODE_OF_CONDUCT.md (Contributor Covenant 2.1).
- Link CONTRIBUTING/SECURITY/CODE_OF_CONDUCT from the README.
- Add the openapi keyword to dexpace-sdk-core.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: OmarAlJarrah

.github/workflows/ci.yml

@@ -10,6 +10,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: test (Python ${{ matrix.python-version }})
@@ -20,17 +23,13 @@ jobs:
         python-version: ["3.12", "3.13", "3.14"]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python-version }}
+        uses: actions/checkout@v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v8
         with:
           enable-cache: true
+          python-version: ${{ matrix.python-version }}
 
       - name: Sync workspace
         run: uv sync

CODE_OF_CONDUCT.md

@@ -0,0 +1,40 @@
+# Code of Conduct
+
+## Our pledge
+
+We as members, contributors, and maintainers pledge to make participation in
+this project a harassment-free experience for everyone, regardless of age,
+body size, visible or invisible disability, ethnicity, sex characteristics,
+gender identity and expression, level of experience, education, socio-economic
+status, nationality, personal appearance, race, religion, or sexual identity
+and orientation.
+
+## Our standards
+
+Examples of behaviour that contributes to a positive environment:
+
+- Showing empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Focusing on what is best for the community
+
+Examples of unacceptable behaviour:
+
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behaviour may be
+reported to the maintainers at
+[o.mazari.om63@gmail.com](mailto:o.mazari.om63@gmail.com). All complaints will
+be reviewed and investigated promptly and fairly. Maintainers are obligated to
+respect the privacy and security of the reporter of any incident.
+
+## Attribution
+
+This Code of Conduct is adapted from the
+[Contributor Covenant](https://www.contributor-covenant.org), version 2.1.

README.md

@@ -244,8 +244,14 @@ Documented in [`CLAUDE.md`](CLAUDE.md). The short version:
 
 ## Contributing
 
-External pull requests are welcome. Run the gates above before opening
-one, and follow the conventions in [`CLAUDE.md`](CLAUDE.md).
+External pull requests are welcome. See [`CONTRIBUTING.md`](CONTRIBUTING.md)
+for setup, the quality gates, and commit conventions, and
+[`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) for community expectations.
+
+## Security
+
+To report a vulnerability, follow [`SECURITY.md`](SECURITY.md) — please do
+not open a public issue.
 
 ## License
 

packages/dexpace-sdk-core/pyproject.toml

@@ -11,7 +11,7 @@ requires-python = ">=3.12"
 license = "MIT"
 license-files = ["LICENSE.md"]
 authors = [{ name = "Omar Aljarrah", email = "o.mazari.om63@gmail.com" }]
-keywords = ["sdk", "http", "client", "toolkit", "pipeline"]
+keywords = ["sdk", "http", "client", "toolkit", "pipeline", "openapi"]
 classifiers = [
     "Development Status :: 3 - Alpha",
     "Intended Audience :: Developers",