Skip to content

Refresh shared release checks and Dependabot labels #149

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
woksin merged 2 commits into from
Oct 1, 2026
Merged

Refresh shared release checks and Dependabot labels #149

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
88d4294
Refresh release-intent and release-notes callers
woksin Oct 1, 2026
b210dab
Describe when the release-notes gate fails or warns
woksin Oct 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions .github/workflows/verify-release-notes.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,11 @@ name: Verify Release Notes
#
# `edited` re-runs the check when the description changes and `labeled` and
# `unlabeled` when the release label does. There is no branch or label filter: the
# gate itself only checks pull requests into the default branch that carry exactly
# one of major, minor or patch, and passes the rest (no release label yet,
# no-release, Dependabot) with a notice.
# gate itself checks pull requests into the default branch: a description that breaks
# the release-note contract fails when the pull request carries major, minor or patch
# and is reported as a warning when it is labelled no-release or not labelled yet.
# Dependabot's pass with a notice. `pull-requests: read` lets it read the pull
# request as it is now, so a re-run sees the current labels and description.
#
# The job is named release-notes so the check reads `release-notes / verify` and
# does not collide with other `verify / verify` gates.
Expand All @@ -32,6 +34,7 @@ on:

permissions:
contents: read
pull-requests: read

jobs:
release-notes:
Expand Down
32 changes: 32 additions & 0 deletions .github/workflows/verify-semver-label.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
# Copyright (c) Cratis. All rights reserved.
# Licensed under the MIT license. See LICENSE file in the project root for full license information.
name: Verify Semver Label

# Installed through a reviewed change: the organization bootstrap ignores this repository.
# Correct Dependabot's dependency-version labels before reading the live release intent.
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

on:
pull_request:
types: [opened, reopened, synchronize, labeled, unlabeled]
branches: [main]

permissions:
contents: read

jobs:
dependabot-labels:
if: github.event.pull_request.user.login == 'dependabot[bot]'
uses: Cratis/Workflows/.github/workflows/normalize-dependabot-labels.yml@main
permissions:
pull-requests: write

release-intent:
needs: dependabot-labels
if: ${{ !cancelled() }}
uses: Cratis/Workflows/.github/workflows/verify-release-intent.yml@main
permissions:
contents: read
pull-requests: read
Loading