silverwind
29b99de940
ci: derive topic labels from PR title ( #38595 )
...
Derives topic labels from the PR title scope: `enhance(actions): ...`
gets `topic/gitea-actions`. Scopes map to `topic/<scope>`, with aliases
for names that differ (`oauth` → `topic/authentication`).
Labels stay in sync with the title, while ones applied by hand are left
alone. Scopes with no matching label on the repo are ignored, so no new
labels get created.
---------
Co-authored-by: Giteabot <teabot@gitea.io >
2026-07-24 04:43:42 +00:00
Giteabot
2fec2affc4
chore(deps): update dependencies ( #38538 )
...
Also include:
chore(deps): update npm dependencies #38542
chore(deps): update action dependencies #38541
chore(deps): update module golang.org/x/vuln to v1.6.0 #38540
2026-07-20 09:27:21 +00:00
Giteabot
f12a0a9183
chore(deps): update action dependencies ( #38430 )
2026-07-14 10:24:40 +02:00
silverwind
9cb2719fab
chore: update node.js to v26 ( #38285 )
...
- bump ci, flake and `@types/node` to node 26
- regenerate flake.lock which is needed for that package
- refactor workflow to use shared composite action
2026-07-01 16:28:36 +02:00
Giteabot
2003cf4e87
chore(deps): update actions/checkout action to v7 ( #38199 )
2026-06-22 22:46:55 +02:00
Giteabot
6dcae57b54
chore(deps): update action dependencies ( #38027 )
2026-06-08 07:40:35 +02:00
Nicolas
8d6124a68a
ci: FIX sync PR labels from the conventional-commit title ( #37784 ) ( #37825 )
...
If this also doesnt work we need to revert it ig
---------
Co-authored-by: silverwind <me@silverwind.io >
Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com >
2026-05-23 20:46:36 +00:00
Nicolas
cdee9f5e10
ci: sync PR labels from the conventional-commit title ( #37784 )
...
Syncs `type/*` and `pr/breaking` labels from the PR title (Conventional
Commits) and folds the existing title lint into the same workflow so
labeling only runs once the title is valid.
- `tools/pr-title.ts`: shared title parser and label mapping.
- `tools/set-pr-labels.ts`: adds/removes labels via the GitHub API.
`type/*` and `pr/breaking` are fully synced (added and removed);
`skip-changelog` (chore/ci) and `topic/build` (build) are only added,
never auto-removed, so manual labeling is preserved.
- `pull-labeler.yml` now hosts `lint-pr-title` and `set-pr-labels`
(`needs: lint-pr-title`) under `pull_request_target`, required so fork
PRs get a writable token. Base-branch checkout only; no PR-head code
runs in the elevated context.
- Removes the superseded `pull-pr-title.yml` and the CI-only
`lint-pr-title` Makefile target.
---------
Signed-off-by: silverwind <me@silverwind.io >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: silverwind <me@silverwind.io >
Co-authored-by: TheFox0x7 <thefox0x7@gmail.com >
2026-05-23 16:12:12 +02:00
Giteabot
c81eca9904
chore(deps): update action dependencies ( #37603 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/labeler](https://redirect.github.com/actions/labeler ) |
action | minor | `v6.0.1` → `v6.1.0` |
|
[aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials )
| action | patch | `v6.1.0` → `v6.1.1` |
|
[docker.elastic.co/elasticsearch/elasticsearch](https://www.elastic.co/products/elasticsearch )
([source](https://redirect.github.com/elastic/elasticsearch )) | service
| patch | `8.19.14` → `8.19.15` |
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action )
| action | patch | `v46.1.12` → `v46.1.13` |
---
### Release Notes
<details>
<summary>actions/labeler (actions/labeler)</summary>
###
[`v6.1.0`](https://redirect.github.com/actions/labeler/releases/tag/v6.1.0 )
[Compare
Source](https://redirect.github.com/actions/labeler/compare/v6.0.1...v6.1.0 )
#### Enhancements
- Add changed-files-labels-limit and max-files-changed configuration
options to cap the number of labels added by
[@​bluca](https://redirect.github.com/bluca ) in
[#​923](https://redirect.github.com/actions/labeler/pull/923 )
#### Bug Fixes
- Improve Labeler Action documentation and permission error handling by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
in [#​897](https://redirect.github.com/actions/labeler/pull/897 )
- Preserve manually added labels during workflow runs and refine label
synchronization logic by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
in [#​917](https://redirect.github.com/actions/labeler/pull/917 )
#### Dependency Updates
- Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking
changes in v6 by
[@​dependabot](https://redirect.github.com/dependabot ) in
[#​877](https://redirect.github.com/actions/labeler/pull/877 )
- Upgrade minimatch from 10.0.1 to 10.2.3 by
[@​dependabot](https://redirect.github.com/dependabot ) in
[#​926](https://redirect.github.com/actions/labeler/pull/926 )
- Upgrade dependencies
([@​actions/core](https://redirect.github.com/actions/core ),
[@​actions/github](https://redirect.github.com/actions/github ),
js-yaml, minimatch,
[@​typescript-eslint](https://redirect.github.com/typescript-eslint ))
by [@​Copilot](https://redirect.github.com/Copilot ) in
[#​934](https://redirect.github.com/actions/labeler/pull/934 )
#### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain )
made their first contribution in
[#​897](https://redirect.github.com/actions/labeler/pull/897 )
- [@​bluca](https://redirect.github.com/bluca ) made their first
contribution in
[#​923](https://redirect.github.com/actions/labeler/pull/923 )
- [@​Copilot](https://redirect.github.com/Copilot ) made their
first contribution in
[#​934](https://redirect.github.com/actions/labeler/pull/934 )
**Full Changelog**:
<https://github.com/actions/labeler/compare/v6...v6.1.0 >
</details>
<details>
<summary>aws-actions/configure-aws-credentials
(aws-actions/configure-aws-credentials)</summary>
###
[`v6.1.1`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v6.1.1 )
[Compare
Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.1.0...v6.1.1 )
##### What's Changed
- chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1722](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1722 )
- chore(deps-dev): bump
[@​types/node](https://redirect.github.com/types/node ) from 25.5.0
to 25.5.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1723](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1723 )
- chore(deps-dev): bump
[@​smithy/property-provider](https://redirect.github.com/smithy/property-provider )
from 4.2.12 to 4.2.13 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1724](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1724 )
- chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1726](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1726 )
- chore(deps): bump
[@​smithy/node-http-handler](https://redirect.github.com/smithy/node-http-handler )
from 4.5.1 to 4.5.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1725](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1725 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1020.0 to 3.1025.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1727](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1727 )
- chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1728](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1728 )
- chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1729](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1729 )
- chore(deps-dev): bump
[@​types/node](https://redirect.github.com/types/node ) from 25.5.2
to 25.6.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1730](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1730 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.24 to 3.972.25 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1733](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1733 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1025.0 to 3.1030.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1732](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1732 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.10 to 2.4.11 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1734](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1734 )
- chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1736](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1736 )
- chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1737](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1737 )
- chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1740](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1740 )
- chore(deps-dev): bump
[@​smithy/property-provider](https://redirect.github.com/smithy/property-provider )
from 4.2.13 to 4.2.14 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1741](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1741 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.25 to 3.972.28 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1742](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1742 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1030.0 to 3.1033.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1743](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1743 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.11 to 2.4.12 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1739](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1739 )
- chore(deps-dev): bump
[@​biomejs/biome](https://redirect.github.com/biomejs/biome ) from
2.4.12 to 2.4.13 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1747](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1747 )
- chore(deps): bump postcss from 8.5.6 to 8.5.12 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1752](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1752 )
- chore(deps): bump
[@​smithy/node-http-handler](https://redirect.github.com/smithy/node-http-handler )
from 4.6.0 to 4.6.1 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1750](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1750 )
- chore(deps-dev): bump
[@​aws-sdk/credential-provider-env](https://redirect.github.com/aws-sdk/credential-provider-env )
from 3.972.28 to 3.972.32 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1751](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1751 )
- chore(deps): bump
[@​aws-sdk/client-sts](https://redirect.github.com/aws-sdk/client-sts )
from 3.1033.0 to 3.1038.0 by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​1749](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1749 )
- chore: release 6.1.1 by
[@​lehmanmj](https://redirect.github.com/lehmanmj ) in
[#​1757](https://redirect.github.com/aws-actions/configure-aws-credentials/pull/1757 )
**Full Changelog**:
<https://github.com/aws-actions/configure-aws-credentials/compare/v6...v6.1.1 >
</details>
<details>
<summary>elastic/elasticsearch
(docker.elastic.co/elasticsearch/elasticsearch)</summary>
###
[`v8.19.15`](https://redirect.github.com/elastic/elasticsearch/releases/tag/v8.19.15 ):
Elasticsearch 8.19.15
[Compare
Source](https://redirect.github.com/elastic/elasticsearch/compare/v8.19.14...v8.19.15 )
Downloads: <https://elastic.co/downloads/elasticsearch >
Release notes:
<https://www.elastic.co/guide/en/elasticsearch/reference/8.19/release-notes-8.19.15.html >
</details>
<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>
###
[`v46.1.13`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.13 )
[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.1.12...v46.1.13 )
##### Documentation
- update references to renovatebot/github-action to v46.1.12
([a871d4d](a871d4d546https://redirect.github.com/commitlint/cli ) to
v20.5.2
([67a74d1](67a74d123d5932d6c4e6580c97f45bd044e7df57a7db9c38fdf9133ef80d212d52574ee3443ceef9833041bb6860cc8654e12c7567a8f835caad2c6ahttps://redirect.github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuNSIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: Nicolas <bircni@icloud.com >
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com >
2026-05-08 18:30:53 +00:00
silverwind
99cd4f6b22
Integrate renovate bot for all dependency updates ( #37050 )
...
Replaces Dependabot with Renovate. The new setup:
- One PR per ecosystem (GitHub Actions, Go modules + Makefile go-tool
pins, npm, Python via uv, Nix flake), opened weekly on Mondays with a
5-day release-age cooldown. Vulnerability PRs ship next-day via daily
cron + Renovate's `vulnerabilityAlerts` schedule bypass.
- All `uses:` action refs SHA-pinned with patch-level version comments
(same format as #36971 , which this supersedes);
`helpers:pinGitHubActionDigests` keeps future bumps in that format.
- `renovatebot/github-action` runtime image pinned via the
upstream-recommended `RENOVATE_VERSION` env + magic comment +
`customManagers:githubActionsVersions` preset, so Renovate keeps the pin
updated.
- Custom regex manager tracks the `*_PACKAGE ?= <import-path>@<version>`
lines in `Makefile` (golangci-lint, swagger, actionlint, etc.) and
groups them into the same Go PR via `matchDatasources: ["go"]`.
- Post-upgrade tasks regenerate `assets/go-licenses.json` (`make tidy`)
and the SVG sprite (`make svg`), gated by an env-level command
allowlist.
- Replaces the standalone `cron-flake-updater` workflow — Renovate's nix
manager tracks `flake.nix` inputs and produces the same `flake.lock`
bump PRs on the regular weekly schedule.
- npm and gomod-replace pins live in `renovate.json5` only;
`updates@17.16 .3` reads them from there too, so the standalone
`updates.config.ts` is gone and one source of truth covers both tools.
Fixes: https://github.com/go-gitea/gitea/issues/33386
Signed-off-by: silverwind <me@silverwind.io >
Signed-off-by: TheFox0x7 <thefox0x7@gmail.com >
Co-authored-by: Claude (Opus 4.6) <noreply@anthropic.com >
Co-authored-by: TheFox0x7 <thefox0x7@gmail.com >
Co-authored-by: Nicolas <bircni@icloud.com >
Co-authored-by: Giteabot <teabot@gitea.io >
2026-04-26 14:25:22 +00:00
silverwind
5bf7cf788d
Bump actions/labeler to v6 ( #35681 )
...
https://github.com/actions/labeler/releases/tag/v6.0.0
2025-10-16 19:00:41 +02:00
Denys Konovalov
225fc40528
Update to labeler v5 ( #29721 )
...
Updated to actions/labeler@v5
Updated labeler config accordingly, also improved the config and added
more labels.
---------
Co-authored-by: Giteabot <teabot@gitea.io >
2024-03-12 22:09:02 +00:00
silverwind
ab074c9b98
Tweak labeler config ( #27502 )
...
Alternative to https://github.com/go-gitea/gitea/pull/27439 . Removes a
few spammy labels, and disables `sync-labels` which make it never remove
labels (which is default behaviour).
2023-10-08 13:11:26 +00:00
silverwind
cfa3527118
Add actions/labeler ( #26962 )
...
Implements https://github.com/GiteaBot/gitea-backporter/issues/93 using
[`actions/labeler`](https://github.com/actions/labeler ). Very basic
configuration, can be extended later.
2023-09-07 21:30:03 +00:00
