J. Nick Koston
769031b724
reduce api calls
2026-03-02 16:01:23 -10:00
J. Nick Koston
d9b5f54cf6
Pin codeowner-review-request checkout to base SHA
...
Explicitly checkout the base branch SHA for consistency and to
ensure the shared codeowners.js script is always loaded from
trusted code, not the PR head.
2026-03-02 15:53:14 -10:00
J. Nick Koston
ca600a45a2
Address review feedback
...
- Actually filter bot reviews (not just comment about it)
- Use core.setFailed() instead of silently swallowing errors
- Remove unused getEffectiveOwners import from detectors.js
2026-03-02 15:52:04 -10:00
J. Nick Koston
55fc563c69
Checkout base branch to prevent PR author code injection
...
pull_request_review checks out the PR merge commit by default,
which means require() would load the PR author's version of
shared scripts. Explicitly checkout the base branch SHA instead.
2026-03-02 15:50:54 -10:00
J. Nick Koston
ed63f51fcb
[github-actions] Add code-owner-approved label workflow
...
Add a workflow that automatically manages a code-owner-approved label
on PRs when component-specific codeowners submit approvals. This helps
maintainers prioritize PRs that have domain-expert sign-off.
The workflow triggers on pull_request_review events and recalculates
the label based on all current reviews. Only individual component
codeowners count - the catch-all @esphome/core team is excluded.
Uses last-match-wins semantics for CODEOWNERS pattern matching.
Also extracts shared CODEOWNERS parsing logic into a reusable module
at .github/scripts/codeowners.js and updates codeowner-review-request
and auto-label-pr workflows to use it.
2026-03-02 15:45:08 -10:00
Jonathan Swoboda and Claude Opus 4.6
7a87348855
[ci] Skip PR title check for dependabot PRs ( #14418 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-02 16:49:14 -05:00
dependabot[bot]
727fa07377
Bump github/codeql-action from 4.32.4 to 4.32.5 ( #14416 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 11:44:53 -10:00
Jonathan Swoboda and Copilot
f6755aabae
[ci] Add PR title format check ( #14345 )
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-27 15:18:07 -05:00
dependabot[bot]
edd63e3d2d
Bump actions/download-artifact from 7.0.0 to 8.0.0 ( #14327 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 14:43:10 -05:00
J. Nick Koston
317dd5b2da
[ci] Skip memory impact target branch build when tests don't exist ( #14316 )
2026-02-27 08:42:08 -10:00
dependabot[bot]
07406c96e1
Bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #14326 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-26 21:35:15 -10:00
dependabot[bot]
b85a49cdb3
Bump github/codeql-action from 4.32.3 to 4.32.4 ( #14161 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:27:15 -06:00
dependabot[bot]
5bb863f7da
Bump actions/stale from 10.1.1 to 10.2.0 ( #14036 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 13:24:39 -06:00
dependabot[bot]
931b47673c
Bump github/codeql-action from 4.32.2 to 4.32.3 ( #13981 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 16:22:26 -06:00
Jonathan Swoboda and Claude Opus 4.6
db6aea8969
Allow Python 3.14 ( #13945 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-11 22:11:48 -05:00
dependabot[bot]
6decdfad26
Bump github/codeql-action from 4.32.1 to 4.32.2 ( #13781 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 10:05:10 +01:00
dependabot[bot]
efecea9450
Bump github/codeql-action from 4.32.0 to 4.32.1 ( #13726 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 02:27:34 +01:00
dependabot[bot]
cd43f8474e
Bump actions/cache from 5.0.2 to 5.0.3 ( #13621 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 14:35:32 -06:00
Clyde Stubbs
6d8294c2d3
[workflows] Refactor auto-label-pr script into modular JS ( #13582 )
2026-01-29 09:42:55 +13:00
dependabot[bot]
6f22509883
Bump docker/login-action from 3.6.0 to 3.7.0 in the docker-actions group ( #13606 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 09:42:05 -10:00
dependabot[bot]
dd91039ff1
Bump github/codeql-action from 4.31.11 to 4.32.0 ( #13559 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 15:43:16 -10:00
dependabot[bot]
42e50ca178
Bump github/codeql-action from 4.31.10 to 4.31.11 ( #13488 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 16:26:11 -10:00
dependabot[bot]
04e102f344
Bump actions/setup-python from 6.1.0 to 6.2.0 ( #13454 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 11:16:27 -10:00
dependabot[bot]
bb67b1ca1e
Bump actions/checkout from 6.0.1 to 6.0.2 ( #13452 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 11:16:15 -10:00
dependabot[bot]
673f46f761
Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ( #13430 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-21 09:37:18 -10:00
dependabot[bot]
bc78f80f77
Bump actions/cache from 5.0.1 to 5.0.2 ( #13276 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-16 09:36:29 -10:00
dependabot[bot]
5890cdf69a
Bump github/codeql-action from 4.31.9 to 4.31.10 ( #13173 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 16:31:51 -10:00
dependabot[bot]
59b38d79b4
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 in the docker-actions group ( #12574 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 09:18:52 -10:00
dependabot[bot]
1b5af7d21d
Bump github/codeql-action from 4.31.8 to 4.31.9 ( #12524 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-17 15:22:19 -10:00
dependabot[bot]
4993bb2f49
Bump github/codeql-action from 4.31.7 to 4.31.8 ( #12451 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:16:41 -06:00
dependabot[bot]
2b40af3459
Bump actions/cache from 4.3.0 to 5.0.1 ( #12450 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:16:29 -06:00
dependabot[bot]
b3e967a233
Bump actions/download-artifact from 6.0.0 to 7.0.0 ( #12449 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:15:41 -06:00
dependabot[bot]
26a08e3ae3
Bump actions/upload-artifact from 5.0.0 to 6.0.0 ( #12452 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:15:28 -06:00
dependabot[bot]
1f0a27b181
Bump codecov/codecov-action from 5.5.1 to 5.5.2 ( #12408 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 22:34:24 +01:00
dependabot[bot]
22918d3bd5
Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 ( #12409 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 22:21:29 +01:00
dependabot[bot]
d1d376ebc8
Bump actions/create-github-app-token from 2.2.0 to 2.2.1 ( #12370 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 13:05:01 +01:00
J. Nick Koston
5919355d18
[ci] Allow memory impact target branch build to fail without blocking CI ( #12381 )
2025-12-10 00:26:24 +01:00
dependabot[bot]
10b54df771
Bump github/codeql-action from 4.31.6 to 4.31.7 ( #12304 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 15:17:10 -06:00
dependabot[bot]
bbb71b5359
Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 ( #12303 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 15:16:55 -06:00
Jesse Hills
78b2ae8a35
[CI] Trigger generic version notifier job on release ( #12292 )
2025-12-05 14:00:08 +13:00
Jesse Hills
8caaf53ef0
[CI] Update renamed action repo ( #12290 )
2025-12-05 12:53:13 +13:00
dependabot[bot]
fb331e1c5a
Bump actions/stale from 10.1.0 to 10.1.1 ( #12270 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-03 21:04:09 +00:00
dependabot[bot]
708496c101
Bump actions/checkout from 6.0.0 to 6.0.1 ( #12259 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 13:45:38 -06:00
dependabot[bot]
c45cd44bb8
Bump github/codeql-action from 4.31.5 to 4.31.6 ( #12234 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 21:49:25 -06:00
Jesse Hills
50bdcdee0c
Add developer-breaking-change labelling ( #12095 )
2025-11-26 12:39:41 +13:00
dependabot[bot]
70df4ecaa9
Bump actions/setup-python from 6.0.0 to 6.1.0 ( #12106 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-25 13:35:40 -06:00
dependabot[bot]
e2cd0ccd0e
Bump actions/create-github-app-token from 2.1.4 to 2.2.0 ( #12081 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 13:44:43 -06:00
dependabot[bot]
378fc4120a
Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 ( #12082 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 13:44:27 -06:00
dependabot[bot]
0dd842744a
Bump github/codeql-action from 4.31.4 to 4.31.5 ( #12080 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 13:44:09 -06:00
dependabot[bot]
01addeae08
Bump actions/checkout from 5.0.1 to 6.0.0 ( #12022 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-20 13:11:41 -06:00