J. Nick Koston
55fc563c69
Checkout base branch to prevent PR author code injection
...
pull_request_review checks out the PR merge commit by default,
which means require() would load the PR author's version of
shared scripts. Explicitly checkout the base branch SHA instead.
2026-03-02 15:50:54 -10:00
J. Nick Koston
ed63f51fcb
[github-actions] Add code-owner-approved label workflow
...
Add a workflow that automatically manages a code-owner-approved label
on PRs when component-specific codeowners submit approvals. This helps
maintainers prioritize PRs that have domain-expert sign-off.
The workflow triggers on pull_request_review events and recalculates
the label based on all current reviews. Only individual component
codeowners count - the catch-all @esphome/core team is excluded.
Uses last-match-wins semantics for CODEOWNERS pattern matching.
Also extracts shared CODEOWNERS parsing logic into a reusable module
at .github/scripts/codeowners.js and updates codeowner-review-request
and auto-label-pr workflows to use it.
2026-03-02 15:45:08 -10:00
Jonathan Swoboda and Claude Opus 4.6
7a87348855
[ci] Skip PR title check for dependabot PRs ( #14418 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-02 16:49:14 -05:00
dependabot[bot]
727fa07377
Bump github/codeql-action from 4.32.4 to 4.32.5 ( #14416 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 11:44:53 -10:00
Jonathan Swoboda and Copilot
f6755aabae
[ci] Add PR title format check ( #14345 )
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-27 15:18:07 -05:00
dependabot[bot]
edd63e3d2d
Bump actions/download-artifact from 7.0.0 to 8.0.0 ( #14327 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 14:43:10 -05:00
J. Nick Koston
317dd5b2da
[ci] Skip memory impact target branch build when tests don't exist ( #14316 )
2026-02-27 08:42:08 -10:00
dependabot[bot]
07406c96e1
Bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #14326 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-26 21:35:15 -10:00
J. Nick Koston
be000eab4e
[ci] Add undocumented C++ API change checkbox and auto-label ( #14317 )
2026-02-26 08:02:52 -10:00
dependabot[bot]
b85a49cdb3
Bump github/codeql-action from 4.32.3 to 4.32.4 ( #14161 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 13:27:15 -06:00
dependabot[bot]
5bb863f7da
Bump actions/stale from 10.1.1 to 10.2.0 ( #14036 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 13:24:39 -06:00
dependabot[bot]
931b47673c
Bump github/codeql-action from 4.32.2 to 4.32.3 ( #13981 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 16:22:26 -06:00
dependabot[bot]
bbc88d92ea
Bump docker/build-push-action from 6.19.1 to 6.19.2 in /.github/actions/build-image ( #13965 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 14:31:43 -06:00
Jonathan Swoboda and Claude Opus 4.6
db6aea8969
Allow Python 3.14 ( #13945 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-11 22:11:48 -05:00
dependabot[bot]
7287a43f2a
Bump docker/build-push-action from 6.18.0 to 6.19.1 in /.github/actions/build-image ( #13937 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 15:12:05 -06:00
dependabot[bot]
6decdfad26
Bump github/codeql-action from 4.32.1 to 4.32.2 ( #13781 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 10:05:10 +01:00
dependabot[bot]
efecea9450
Bump github/codeql-action from 4.32.0 to 4.32.1 ( #13726 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 02:27:34 +01:00
dependabot[bot]
6de2049076
Bump actions/cache from 5.0.2 to 5.0.3 in /.github/actions/restore-python ( #13622 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 14:35:52 -06:00
dependabot[bot]
cd43f8474e
Bump actions/cache from 5.0.2 to 5.0.3 ( #13621 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 14:35:32 -06:00
Clyde Stubbs
a382383d83
[workflows] Add deprecation check ( #13584 )
2026-01-29 12:08:45 +13:00
Clyde Stubbs
6d8294c2d3
[workflows] Refactor auto-label-pr script into modular JS ( #13582 )
2026-01-29 09:42:55 +13:00
dependabot[bot]
6f22509883
Bump docker/login-action from 3.6.0 to 3.7.0 in the docker-actions group ( #13606 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 09:42:05 -10:00
dependabot[bot]
dd91039ff1
Bump github/codeql-action from 4.31.11 to 4.32.0 ( #13559 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 15:43:16 -10:00
dependabot[bot]
42e50ca178
Bump github/codeql-action from 4.31.10 to 4.31.11 ( #13488 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 16:26:11 -10:00
dependabot[bot]
6008abae62
Bump actions/setup-python from 6.1.0 to 6.2.0 in /.github/actions/restore-python ( #13453 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 11:16:40 -10:00
dependabot[bot]
04e102f344
Bump actions/setup-python from 6.1.0 to 6.2.0 ( #13454 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 11:16:27 -10:00
dependabot[bot]
bb67b1ca1e
Bump actions/checkout from 6.0.1 to 6.0.2 ( #13452 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 11:16:15 -10:00
dependabot[bot]
673f46f761
Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ( #13430 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-21 09:37:18 -10:00
dependabot[bot]
3057a0484f
Bump actions/cache from 5.0.1 to 5.0.2 in /.github/actions/restore-python ( #13277 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-16 09:36:42 -10:00
dependabot[bot]
bc78f80f77
Bump actions/cache from 5.0.1 to 5.0.2 ( #13276 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-16 09:36:29 -10:00
J. Nick Koston
3d74d1e7f0
[libretiny] Regenerate boards, enable Cortex-M4 atomics, and consolidate platform code ( #13191 )
2026-01-13 21:39:11 +00:00
dependabot[bot]
5890cdf69a
Bump github/codeql-action from 4.31.9 to 4.31.10 ( #13173 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 16:31:51 -10:00
dependabot[bot]
59b38d79b4
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 in the docker-actions group ( #12574 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 09:18:52 -10:00
dependabot[bot]
1b5af7d21d
Bump github/codeql-action from 4.31.8 to 4.31.9 ( #12524 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-17 15:22:19 -10:00
dependabot[bot]
9126b32c35
Bump actions/cache from 4.3.0 to 5.0.1 in /.github/actions/restore-python ( #12453 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:17:08 -06:00
dependabot[bot]
4993bb2f49
Bump github/codeql-action from 4.31.7 to 4.31.8 ( #12451 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:16:41 -06:00
dependabot[bot]
2b40af3459
Bump actions/cache from 4.3.0 to 5.0.1 ( #12450 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:16:29 -06:00
dependabot[bot]
b3e967a233
Bump actions/download-artifact from 6.0.0 to 7.0.0 ( #12449 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:15:41 -06:00
dependabot[bot]
26a08e3ae3
Bump actions/upload-artifact from 5.0.0 to 6.0.0 ( #12452 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:15:28 -06:00
dependabot[bot]
1f0a27b181
Bump codecov/codecov-action from 5.5.1 to 5.5.2 ( #12408 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 22:34:24 +01:00
dependabot[bot]
22918d3bd5
Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 ( #12409 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 22:21:29 +01:00
dependabot[bot]
d1d376ebc8
Bump actions/create-github-app-token from 2.2.0 to 2.2.1 ( #12370 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 13:05:01 +01:00
J. Nick Koston
5919355d18
[ci] Allow memory impact target branch build to fail without blocking CI ( #12381 )
2025-12-10 00:26:24 +01:00
dependabot[bot]
10b54df771
Bump github/codeql-action from 4.31.6 to 4.31.7 ( #12304 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 15:17:10 -06:00
dependabot[bot]
bbb71b5359
Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 ( #12303 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-05 15:16:55 -06:00
Jesse Hills
78b2ae8a35
[CI] Trigger generic version notifier job on release ( #12292 )
2025-12-05 14:00:08 +13:00
Jesse Hills
8caaf53ef0
[CI] Update renamed action repo ( #12290 )
2025-12-05 12:53:13 +13:00
dependabot[bot]
fb331e1c5a
Bump actions/stale from 10.1.0 to 10.1.1 ( #12270 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-03 21:04:09 +00:00
dependabot[bot]
708496c101
Bump actions/checkout from 6.0.0 to 6.0.1 ( #12259 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 13:45:38 -06:00
dependabot[bot]
c45cd44bb8
Bump github/codeql-action from 4.31.5 to 4.31.6 ( #12234 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 21:49:25 -06:00