Skip to content

chore(deps): bump rubykatzen/starcast from 0.2 to 0.8 - #81

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/rubykatzen/starcast-0.8
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/rubykatzen/starcast-0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps rubykatzen/starcast from 0.2 to 0.8.

Release notes

Sourced from rubykatzen/starcast's releases.

v0.8.0

Added

  • actions/apply-proposal composite action: copies a proposal's mapped Issue Fields onto its parent (type/parent/labels handled as reserved names via native Issue Type, sub-issue, and Label mutations), then closes the proposal and any open sibling proposals of the same parent. Idempotent — a no-op against an already-closed proposal.
  • actions/reject-proposal composite action: closes a proposal, nothing else.

Changed

  • proposal-shared.yml's apply and reject jobs now run the actions above instead of a placeholder notice.

v0.7.0

Changed

  • Breaking: proposal-lifecycle-shared.yml is renamed to proposal-shared.yml, matching the <name>-shared.yml pattern used by the other reusable workflows. The workflow's name: and its Telegram-report workflow: value change from "Proposal Lifecycle" to "Proposal", and its concurrency group prefixes shorten from proposal-lifecycle-* to proposal-*.

v0.6.0

Added

  • proposal-lifecycle-shared.yml reusable workflow: the contract for the five-job proposal lifecycle (apply, reject, distill, rework, propose) described in #11, with self-gating, an input-invariant check, and per-comment/per-repository concurrency groups. Domain logic for each action is not implemented yet — this release ships the contract and reporting scaffold only.
  • actions/telegram-notify composite action: optionally report a job's triggered action and outcome to a Telegram chat (#46). Opt-in per consumer; a missing chat id/bot token is a no-op and a delivery failure never fails the calling job.

v0.5.0

Added

  • collect-pull-requests-shared.yml reusable workflow and actions/collect-pull-requests composite action: collect open pull requests, including drafts, from configured organizations/repositories into a GitHub Project V2. Existing active and archived Project items are left untouched, and Status is owned by Project automation.

... (truncated)

Changelog

Sourced from rubykatzen/starcast's changelog.

Changelog

[Unreleased]

Added

  • actions/proposal composite action: a single Homebrew-style CLI (proposal.py <mode> --flag value) covering the whole proposal lifecycle's deterministic surface — dequeue, list-fields, propose, apply, reject — sharing transport, field-discovery, and mutation helpers instead of one script per action.
    • dequeue: consumer-owned capacity_query/queue_query gate and source the next proposal candidate, one per run — see capacity_query/queue_query/review_limit inputs on proposal-shared.yml's propose job. capacity_query must alias exactly one scalar numeric field as capacity, queue_query exactly one array-valued field as queue; both are found by a recursive, type-disambiguated alias search rather than a schema-aware mapping. The dequeued candidate's own id is found the same recursive way, not a flat lookup — needed for queue shapes where id is nested (e.g. a Project-based queue_query typically exposes it as content { ... on Issue { id } }).
    • list-fields: discovers the prefixed proposal Issue Fields available in a repository.
    • propose: creates a proposal issue against a parent — Issue Type, sub-issue relationship, field values, and the control comment. Field values are mocked (a trivial type-appropriate placeholder) rather than agent-decided; real regulation-constrained judgment is tracked in #11.
    • apply/reject: unchanged behavior from the actions they replace (below), now reached via mode: apply/mode: reject.
  • proposal-shared.yml's propose job now dequeues a candidate and creates a (mocked) proposal for it, instead of a placeholder notice.
  • entity_query, propose_transition_mutation, and apply_transition_mutation inputs on proposal-shared.yml: optionally transition whatever "controlling entity" tracks an issue's state (e.g. a ProjectV2Item) as it moves through the lifecycle — incoming to review on propose, review to done on apply (#69). All three are independently optional consumer-owned GraphQL text; entity_query uses the same alias+type extraction as capacity/queue. A configured transition mutation that fails after a successful create/apply is a hard error, not swallowed.
  • check-control-comment mode on actions/proposal, run by proposal-shared.yml's validate job on issue_comment runs before apply/reject/distill/rework act: verifies the triggering comment is actually the proposal's first/control comment, not just any comment containing matching checkbox text (#63). A mismatch is a hard error. Success adds a 👀 reaction to the comment, mirroring the Copilot coding agent's own acknowledgment convention.

... (truncated)

Commits
  • ee9293f chore: update changelog for v0.8.0 (#61)
  • c14d9e8 Merge pull request #56 from rubykatzen/feat/apply-reject-proposal
  • 08cf8c4 fix: copy title/body on Apply, and fix a real gh api graphql transport bug
  • 71c9966 feat: implement apply and reject proposal actions
  • 416b3e1 chore: update changelog for v0.7.0 (#52)
  • 5739557 Merge pull request #51 from rubykatzen/fix/proposal-rename-breaking-changelog
  • d12d606 docs: correct v0.6.0 changelog and bump to v0.7 after rename
  • d25f68c Merge pull request #50 from rubykatzen/rename/proposal-shared
  • 841d133 rename: proposal-lifecycle-shared.yml to proposal-shared.yml
  • ee1498d Merge pull request #49 from rubykatzen/release/v0.6.0
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added deps Pull requests that update a dependency file github_actions labels Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/rubykatzen/starcast-0.8 branch from 7f715ed to 2297fe6 Compare August 10, 2026 23:41
Bumps [rubykatzen/starcast](https://github.com/rubykatzen/starcast) from 0.2 to 0.8.
- [Release notes](https://github.com/rubykatzen/starcast/releases)
- [Changelog](https://github.com/rubykatzen/starcast/blob/main/CHANGELOG.md)
- [Commits](v0.2...v0.8)

---
updated-dependencies:
- dependency-name: rubykatzen/starcast
  dependency-version: '0.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/rubykatzen/starcast-0.8 branch from 2297fe6 to 7e29ecd Compare August 11, 2026 00:42
@ineedjet

Copy link
Copy Markdown
Contributor

Superseded by #114, which drops the internal version pins entirely (via $/) instead of just bumping them to v0.8.

@ineedjet ineedjet closed this Sep 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/rubykatzen/starcast-0.8 branch September 12, 2026 20:34
ineedjet added a commit that referenced this pull request Sep 12, 2026
collect-issues-shared.yml, collect-pull-requests-shared.yml, and
proposal-shared.yml pinned their own sibling composite actions to
explicit tags (v0.5/v0.6) or @main, requiring a manual bump in lockstep
with every release -- the exact churn dependabot's #81 was chasing.
rubykatzen/baseline's own shared workflows (e.g. lint-shared.yml) instead
reference sibling actions via $/, which resolves to this repository at
the same ref the caller pinned for the shared workflow itself. Adopting
it here means these internal references can no longer drift out of sync
with a release, and never need bumping again.

Supersedes #81.

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant