Skip to content

build: tag shared workflows with semver for Renovate tracking #25

Description

@jimisola

Summary

The shared reusable workflows in this repo (e.g., check-semantic-pr.yml) are currently referenced via @main across all 12+ reqstool repos. This prevents Renovate/Dependabot from tracking version updates and makes it hard to pin for supply-chain security.

Proposal

  1. Tag this repo with semver (e.g., v1.0.0)
  2. Update all repos to reference @v1 instead of @main
  3. This enables Renovate to track and auto-update the shared workflow reference

Affected repos

All repos that reference reqstool/.github/.github/workflows/check-semantic-pr.yml@main:

  • reqstool-client
  • reqstool-python-decorators
  • reqstool-python-hatch-plugin
  • reqstool-python-poetry-plugin
  • reqstool-java-annotations
  • reqstool-java-maven-plugin
  • reqstool-java-gradle-plugin
  • reqstool-typescript-tags
  • reqstool-vscode-extension
  • reqstool-demo
  • reqstool-ai
  • reqstool-test-packages

🤖 Generated with Claude Code

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions