Skip to content

Update milestone and label workflows for maintainers, developers, and bots #3342

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mergify merged 3 commits into from
Feb 22, 2026
Merged

Update milestone and label workflows for maintainers, developers, and bots #3342

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
13a85c4
Initial plan
Copilot Feb 22, 2026
b4e5f0b
Update milestone workflow: rename and add BornToBeRoot maintainer
Copilot Feb 22, 2026
c115055
Add label workflow and remove duplicate labels from dependabot config
Copilot Feb 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ updates:
target-branch: main
commit-message:
prefix: "Dependency (dependabot/nuget):"
labels:
- ":heavy_check_mark: dependencies"
- package-ecosystem: "dotnet-sdk"
directory: "/Source"
ignore:
Expand All @@ -20,14 +18,10 @@ updates:
target-branch: main
commit-message:
prefix: "Dependency (dependabot/dotnet-sdk):"
labels:
- ":heavy_check_mark: dependencies"
- package-ecosystem: "npm"
directory: "/Website"
schedule:
interval: weekly
target-branch: main
commit-message:
prefix: "Dependency (dependabot/npm):"
labels:
- ":heavy_check_mark: dependencies"
25 changes: 25 additions & 0 deletions .github/workflows/label.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: Assign label to PRs
Copy link

Copilot AI Feb 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow name is quite generic, but the workflow only assigns a single, specific label (dependencies). Renaming it to something like "Assign dependencies label" would make it easier to identify in the Actions UI and in audit logs.

Suggested change
name: Assign label to PRs
name: Assign dependencies label

Copilot uses AI. Check for mistakes.

on:
pull_request_target:
types: [opened, reopened]

jobs:
assign-dependencies-label:
name: Assign dependencies label
runs-on: ubuntu-latest
if: contains(fromJSON('["dependabot[bot]", "transifex-integration[bot]", "imgbot[bot]"]'), github.event.pull_request.user.login)
permissions:
issues: write
pull-requests: write
Copy link

Copilot AI Feb 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The job grants pull-requests: write, but the step only uses github.rest.issues.addLabels (Issues API). Consider removing pull-requests: write and keeping only issues: write to minimize the token’s scope.

Suggested change
pull-requests: write

Copilot uses AI. Check for mistakes.
steps:
- name: Assign label
uses: actions/github-script@v7
with:
script: |
await github.rest.issues.addLabels({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: context.payload.pull_request.number,
labels: [':heavy_check_mark: dependencies']
});
4 changes: 2 additions & 2 deletions .github/workflows/milestone.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: Assign milestone to automated PRs
name: Assign milestone to PRs

on:
pull_request_target:
Expand All @@ -8,7 +8,7 @@ jobs:
assign-milestone:
name: Assign next-release milestone
runs-on: ubuntu-latest
if: contains(fromJSON('["dependabot[bot]", "transifex-integration[bot]", "imgbot[bot]", "Copilot"]'), github.event.pull_request.user.login)
if: contains(fromJSON('["dependabot[bot]", "transifex-integration[bot]", "imgbot[bot]", "Copilot", "BornToBeRoot"]'), github.event.pull_request.user.login)
permissions:
issues: write
pull-requests: write
Copy link

Copilot AI Feb 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The job requests both issues: write and pull-requests: write, but the script only calls the Issues API (listMilestones / issues.update). Consider dropping pull-requests: write here to follow least-privilege permissions.

Suggested change
pull-requests: write

Copilot uses AI. Check for mistakes.
Expand Down