From 60802f9c493e0e8788eddbbeb0ba79a38203fe9f Mon Sep 17 00:00:00 2001 From: "tirodkar@google.com" Date: Mon, 25 May 2026 21:48:33 -0700 Subject: [PATCH 1/4] chore: update infra templates and bump semantic-pr to v6 --- .github/workflows/semantic-pull-request.yml | 37 +++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/semantic-pull-request.yml diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml new file mode 100644 index 0000000..1b857b0 --- /dev/null +++ b/.github/workflows/semantic-pull-request.yml @@ -0,0 +1,37 @@ +name: "Semantic Pull Request" + +on: + pull_request_target: + types: + - opened + - edited + - synchronize + +permissions: + pull-requests: write + statuses: write + +jobs: + main: + name: Validate PR title + runs-on: ubuntu-latest + steps: + - uses: amannn/action-semantic-pull-request@v6 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + types: | + feat + fix + chore + docs + style + refactor + perf + test + build + ci + # This ensures the bot can post a detailed comment if the validation fails + # mimicking the helpful feedback seen in other googlemaps repos + headerPattern: '^(\w*)(?:\(([\w$.\-*/ ]*)\))?!?: (.*)$' + headerPatternCorrespondence: type, scope, subject From e0c8cc34c736c7da05c15964ac1f9f059cb91629 Mon Sep 17 00:00:00 2001 From: "tirodkar@google.com" Date: Mon, 25 May 2026 21:50:40 -0700 Subject: [PATCH 2/4] chore: sync infrastructure templates and validation with license headers --- .github/ISSUE_TEMPLATE/bug_report.md | 16 ++++++++++++++++ .github/ISSUE_TEMPLATE/feature_request.md | 16 ++++++++++++++++ .github/ISSUE_TEMPLATE/support_request.md | 16 ++++++++++++++++ .github/PULL_REQUEST_TEMPLATE.md | 16 ++++++++++++++++ .github/workflows/semantic-pull-request.yml | 14 ++++++++++++++ 5 files changed, 78 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md index c1aaaf9..e7a3ae3 100644 --- a/.github/ISSUE_TEMPLATE/bug_report.md +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -1,3 +1,19 @@ + + --- name: Bug report about: Create a report to help us improve diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md index 7a19c42..a400f07 100644 --- a/.github/ISSUE_TEMPLATE/feature_request.md +++ b/.github/ISSUE_TEMPLATE/feature_request.md @@ -1,3 +1,19 @@ + + --- name: Feature request about: Suggest an idea for this library diff --git a/.github/ISSUE_TEMPLATE/support_request.md b/.github/ISSUE_TEMPLATE/support_request.md index 997deef..15b08b6 100644 --- a/.github/ISSUE_TEMPLATE/support_request.md +++ b/.github/ISSUE_TEMPLATE/support_request.md @@ -1,3 +1,19 @@ + + --- name: Support request about: If you have a support contract with Google, please create an issue in the Google diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index d4914f8..1c0c3ae 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -1,3 +1,19 @@ + + Thank you for opening a Pull Request! Before submitting your PR, there are a few things you can do to make sure it goes smoothly: - [ ] Make sure to open an issue as a [bug/issue](https://github.com/googleapis/release-please/issues/new/choose) before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea - [ ] Ensure the tests and linter pass diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml index 1b857b0..8e372a4 100644 --- a/.github/workflows/semantic-pull-request.yml +++ b/.github/workflows/semantic-pull-request.yml @@ -1,3 +1,17 @@ +# Copyright 2026 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + name: "Semantic Pull Request" on: From 18f6767ce69ba01bfa569fd9ac122116420175eb Mon Sep 17 00:00:00 2001 From: "tirodkar@google.com" Date: Mon, 25 May 2026 21:56:29 -0700 Subject: [PATCH 3/4] chore: fix security checks --- .github/workflows/semantic-pull-request.yml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml index 8e372a4..6ee424d 100644 --- a/.github/workflows/semantic-pull-request.yml +++ b/.github/workflows/semantic-pull-request.yml @@ -15,22 +15,25 @@ name: "Semantic Pull Request" on: - pull_request_target: + pull_request: types: - opened - edited - synchronize permissions: - pull-requests: write + pull-requests: read statuses: write jobs: main: name: Validate PR title runs-on: ubuntu-latest + permissions: + pull-requests: read + statuses: write steps: - - uses: amannn/action-semantic-pull-request@v6 + - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: From 85fc751f616a2a3f4a1443ad6e13ab6a6a8586b1 Mon Sep 17 00:00:00 2001 From: "tirodkar@google.com" Date: Mon, 25 May 2026 22:26:43 -0700 Subject: [PATCH 4/4] chore: sync infra and enable secure commit validation --- .github/workflows/semantic-pull-request.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml index 6ee424d..c7e1894 100644 --- a/.github/workflows/semantic-pull-request.yml +++ b/.github/workflows/semantic-pull-request.yml @@ -52,3 +52,6 @@ jobs: # mimicking the helpful feedback seen in other googlemaps repos headerPattern: '^(\w*)(?:\(([\w$.\-*/ ]*)\))?!?: (.*)$' headerPatternCorrespondence: type, scope, subject + # If the PR only contains a single commit, the action will validate that + # it matches the configured pattern. + validateSingleCommit: true