chore: use safer justfile bash config

justfile

@@ -23,6 +23,8 @@ clean:
 # ensure valid virtualenv
 virtualenv:
     #!/usr/bin/env bash
+    set -euo pipefail
+
     # allow users to specify python version in .env
     PYTHON_VERSION=${PYTHON_VERSION:-python3.10}
 
@@ -35,6 +37,8 @@ virtualenv:
 
 _compile src dst *args: virtualenv
     #!/usr/bin/env bash
+    set -euo pipefail
+
     # exit if src file is older than dst file (-nt = 'newer than', but we negate with || to avoid error exit code)
     test "${FORCE:-}" = "true" -o {{ src }} -nt {{ dst }} || exit 0
     {{ COMPILE }} --output-file={{ dst }} {{ src }} {{ args }}
@@ -55,7 +59,7 @@ requirements-dev *args: virtualenv
 # ensure prod requirements installed and up to date
 #prodenv: requirements-prod
 #    #!/usr/bin/env bash
-#    set -eu
+#    set -euo pipefail
 #    # exit if .txt file has not changed since we installed them (-nt == "newer than', but we negate with || to avoid error exit code)
 #    test requirements.prod.txt -nt $VIRTUAL_ENV/.prod || exit 0
 #
@@ -69,7 +73,8 @@ requirements-dev *args: virtualenv
 # ensure dev requirements installed and up to date
 devenv: requirements-dev && install-precommit
     #!/usr/bin/env bash
-    set -eu
+    set -euo pipefail
+
     # exit if .txt file has not changed since we installed them (-nt == "newer than', but we negate with || to avoid error exit code)
     test requirements.dev.txt -nt $VIRTUAL_ENV/.dev || exit 0
 
@@ -80,13 +85,17 @@ devenv: requirements-dev && install-precommit
 # ensure precommit is installed
 install-precommit:
     #!/usr/bin/env bash
+    set -euo pipefail
+
     BASE_DIR=$(git rev-parse --show-toplevel)
     test -f $BASE_DIR/.git/hooks/pre-commit || $BIN/pre-commit install
 
 
 # upgrade dev or prod dependencies (specify package to upgrade single package, all by default)
 upgrade env package="": virtualenv
     #!/usr/bin/env bash
+    set -euo pipefail
+
     opts="--upgrade"
     test -z "{{ package }}" || opts="--upgrade-package {{ package }}"
     FORCE=true {{ just_executable() }} requirements-{{ env }} $opts