rmartz/pr-lifecycle issues and pull requests

#145 - feat!: decide UAT from the review verdict, not title or path heuristics

Pull Request - State: closed - Opened by rmartz about 2 hours ago - 3 comments
Labels: approved, no UAT needed, breaking change, released

#144 - chore(deps): Bump the github-actions group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] about 23 hours ago - 1 comment
Labels: auto-merge enabled, approved, no UAT needed, released, dependencies, github_actions

#143 - feat: parse per-dimension /review verdict records

Pull Request - State: closed - Opened by rmartz 3 days ago - 2 comments
Labels: enhancement, Security, approved, no UAT needed, released

#142 - Reduce CI-loosening sign-off friction on standalone ci: PRs

Issue - State: open - Opened by rmartz 3 days ago
Labels: enhancement, Security, CI

#141 - Make UAT an explicit per-dimension /review verdict and drop the static UAT heuristics

Issue - State: open - Opened by rmartz 3 days ago - 1 comment
Labels: enhancement, Security, DevOps

#140 - chore(deps-dev): Bump typescript-eslint from 8.71.2 to 8.72.0 in the eslint group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 3 days ago - 2 comments
Labels: auto-merge enabled, approved, no UAT needed, released, dependencies, javascript

#139 - chore(deps): Bump the github-actions group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 3 days ago - 1 comment
Labels: auto-merge enabled, approved, no UAT needed, released, dependencies, github_actions

#138 - fix: never require UAT for CI and tooling

Pull Request - State: closed - Opened by rmartz 3 days ago - 2 comments
Labels: update required, merge conflict, no UAT needed

#137 - docs: sign-off status is posted by the App, not a User PAT

Pull Request - State: closed - Opened by rmartz 4 days ago - 1 comment
Labels: approved, no UAT needed, released

#136 - Document that the sign-off status may come from a trusted App, not only a User

Issue - State: closed - Opened by rmartz 4 days ago - 1 comment
Labels: documentation, DevOps, released

#135 - chore: bring repo-hygiene up to the shared repository checklist

Pull Request - State: closed - Opened by rmartz 4 days ago - 1 comment
Labels: approved, no UAT needed, CI change approved, CI approval needed, CI, released

#134 - Design a hosted GitHub App so adopting pr-lifecycle is install-only

Issue - State: open - Opened by rmartz 4 days ago - 3 comments
Labels: enhancement, Infrastructure, DevOps

#133 - fix: never require UAT for a CI-only change

Pull Request - State: closed - Opened by rmartz 4 days ago - 1 comment
Labels: bug, auto-merge enabled, approved, no UAT needed, released

#132 - ci: bump pr-lifecycle-action to v4.4.1 and pr-policy-action to v1.9.0

Pull Request - State: closed - Opened by rmartz 6 days ago - 1 comment
Labels: DevOps, review requested, CI approval needed, CI

#130 - feat: label Dependabot security updates

Pull Request - State: closed - Opened by rmartz 7 days ago - 1 comment
Labels: enhancement, Security, approved, no UAT needed, released

#127 - chore(deps-dev): Bump tsup from 8.5.1 to 9.0.0

Pull Request - State: closed - Opened by dependabot[bot] 8 days ago - 2 comments
Labels: auto-merge enabled, approved, no UAT needed, released, dependencies, javascript

#120 - fix: write the UAT labels with the workflow token

Pull Request - State: open - Opened by rmartz 8 days ago
Labels: enhancement, Security, DevOps, review requested

#119 - Classify each head's sign-off requirement and post it as a commit status

Issue - State: closed - Opened by rmartz 8 days ago - 3 comments
Labels: enhancement, Security, DevOps

#118 - Write the CI approval needed label from the shared sign-off classifier

Issue - State: closed - Opened by rmartz 8 days ago - 3 comments
Labels: enhancement, Security, DevOps, released

#117 - fix(execute): merge when arming finds the PR in unstable status

Pull Request - State: open - Opened by rmartz 8 days ago
Labels: bug, review requested

#116 - feat: reconcile the UAT labels on every event

Pull Request - State: closed - Opened by rmartz 9 days ago - 1 comment
Labels: enhancement, Security, DevOps, auto-merge enabled, approved, no UAT needed, released

#115 - Reconcile UAT labels, defaulting to UAT pending for user-facing PRs

Issue - State: closed - Opened by rmartz 9 days ago - 8 comments
Labels: enhancement, Security, DevOps, released

#114 - ci(hygiene): grant actions: write so inconclusive runs cancel

Pull Request - State: closed - Opened by rmartz 9 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, CI change approved, CI approval needed, released

#109 - fix!: never update a Dependabot PR in auto-update

Pull Request - State: closed - Opened by rmartz 10 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, breaking change, released

#108 - ci(pr-policy): retitle Dependabot linter bumps to ci

Pull Request - State: closed - Opened by rmartz 13 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released

#107 - Reconcile open PRs when the base branch moves, so a new conflict drops `approved` promptly

Issue - State: open - Opened by rmartz 13 days ago
Labels: bug, DevOps

#106 - chore(deps): Bump the github-actions group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 14 days ago - 1 comment
Labels: auto-merge enabled, approved, released, dependencies, github_actions

#105 - ci(pr-lifecycle): use the App token for every lifecycle write

Pull Request - State: closed - Opened by rmartz 14 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, CI change approved, CI approval needed, released

#104 - ci(pr-lifecycle): re-reconcile when the pr-policy hold check completes

Pull Request - State: closed - Opened by rmartz 14 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released

#103 - ci(hygiene): grant statuses: write for per-check commit statuses

Pull Request - State: closed - Opened by rmartz 14 days ago - 2 comments
Labels: DevOps, auto-merge enabled, approved, no UAT needed, CI change approved, CI approval needed, released

#102 - chore(deps): Bump rmartz/pr-policy-action from 1.4.6 to 1.5.0 in the github-actions group

Pull Request - State: closed - Opened by dependabot[bot] 14 days ago - 4 comments
Labels: update required, auto-merge enabled, approved, dependencies, github_actions, dependabot rebasing

#101 - ci(pr-lifecycle): arm auto-merge with the rmartz-merge-bot App token

Pull Request - State: closed - Opened by rmartz 15 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, CI change approved, CI approval needed, released

#100 - chore(deps-dev): Bump @types/node from 26.6.4 to 26.6.5 in the dev-dependencies group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago - 5 comments
Labels: auto-merge enabled, approved, released, dependencies, javascript

#99 - chore(deps-dev): Bump typescript-eslint from 8.71.0 to 8.71.1 in the eslint group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago - 5 comments
Labels: auto-merge enabled, approved, released, dependencies, javascript

#98 - chore(deps-dev): Bump prettier from 3.9.9 to 3.9.10 in the prettier group across 1 directory

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago - 5 comments
Labels: auto-merge enabled, approved, released, dependencies, javascript

#97 - chore(deps): Bump rmartz/repo-hygiene-action from 3.2.0 to 6.0.0

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago - 5 comments
Labels: approved, no UAT needed, released, dependencies, github_actions

#96 - chore(deps): Bump the github-actions group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago - 1 comment
Labels: auto-merge enabled, approved, released, dependencies, github_actions

#95 - chore: group CI-sensitive tools in one ci Dependabot group

Pull Request - State: closed - Opened by rmartz 15 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released, dependencies

#94 - fix: corroborate a GitHub Actions security update's v-prefixed versions

Pull Request - State: closed - Opened by rmartz 21 days ago - 1 comment
Labels: bug, Security, auto-merge enabled, approved, no UAT needed, released

#93 - feat: auto-approve a Dependabot security update whose corroborated delta is patch or minor

Pull Request - State: closed - Opened by rmartz 21 days ago - 1 comment
Labels: enhancement, Security, auto-merge enabled, approved, no UAT needed, released

#92 - Treat a Dependabot security update as eligible when its semver delta is patch or minor

Issue - State: closed - Opened by rmartz 21 days ago - 1 comment
Labels: enhancement, Security, released

#91 - chore: add a REST-only read-out for the labels-only pilots

Pull Request - State: closed - Opened by rmartz 21 days ago - 2 comments
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released

#90 - ci(pr-lifecycle): enable auto-update in the dogfood caller

Pull Request - State: closed - Opened by rmartz 21 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released

#89 - docs: record how the agent-side merge path defers to pr-lifecycle

Pull Request - State: closed - Opened by rmartz 21 days ago - 2 comments
Labels: documentation, auto-merge enabled, approved, no UAT needed, released

#72 - ci(pr-lifecycle): grant actions: write so transient failures cancel the run

Pull Request - State: open - Opened by rmartz 26 days ago
Labels: update required, CI approval needed

#71 - feat(cli): exit 75 on transient GitHub failures instead of 1

Pull Request - State: closed - Opened by rmartz 27 days ago - 1 comment
Labels: auto-merge enabled, approved, no UAT needed, released

#70 - ci(pr-title-lint): retire pr-title-lint in favour of pr-policy's title check

Pull Request - State: closed - Opened by rmartz 27 days ago - 3 comments
Labels: DevOps, auto-merge enabled, approved, no UAT needed, CI change approved, CI approval needed, released

#69 - docs: record pr-policy as a required check

Pull Request - State: closed - Opened by rmartz 27 days ago - 1 comment
Labels: approved, no UAT needed, released

#68 - ci(pr-policy): add the pr-policy caller

Pull Request - State: closed - Opened by rmartz 27 days ago - 1 comment
Labels: DevOps, auto-merge enabled, approved, no UAT needed, released

#67 - ci(merge-safety): consume merge-safety-action instead of the reusable workflow

Pull Request - State: closed - Opened by rmartz 28 days ago - 1 comment
Labels: DevOps, approved, no UAT needed, CI approval needed, released

#66 - chore(deps): Bump the github-actions group with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago - 2 comments
Labels: approved, no UAT needed, released, dependencies, github_actions

#65 - ci(dependabot): exempt first-party releases from the default cooldown

Pull Request - State: closed - Opened by rmartz 28 days ago - 2 comments
Labels: DevOps, approved, no UAT needed, CI change approved, CI approval needed, released

#64 - chore(deps): Bump the github-actions group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 29 days ago - 2 comments
Labels: approved, no UAT needed, released, dependencies, github_actions

#63 - chore(deps-dev): Bump typescript from 6.0.3 to 7.0.2 in the typescript group across 1 directory

Pull Request - State: open - Opened by dependabot[bot] 29 days ago
Labels: update required, escalation needed, dependencies, javascript

#62 - chore(deps-dev): Bump the dev-dependencies group across 1 directory with 4 updates

Pull Request - State: closed - Opened by dependabot[bot] 29 days ago - 5 comments
Labels: approved, no UAT needed, released, dependencies, javascript

#55 - fix: read legacy /review verdict outcomes and escalate unknown ones

Pull Request - State: closed - Opened by rmartz 29 days ago - 2 comments
Labels: DevOps, approved, no UAT needed, released

#54 - ci(release): release through the shared semantic-release-ci workflows

Pull Request - State: closed - Opened by rmartz 29 days ago - 3 comments
Labels: DevOps, approved, no UAT needed, CI change approved, CI approval needed, released

#53 - ci(merge-safety): bump reusable workflow to v0.10.0

Pull Request - State: closed - Opened by rmartz 30 days ago - 2 comments
Labels: approved, no UAT needed, released

#52 - ci: arm auto-merge from the pr-lifecycle caller

Pull Request - State: closed - Opened by rmartz about 1 month ago
Labels: DevOps, update required, approved, no UAT needed, CI

#51 - ci(merge-safety): grant statuses: write

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps, approved, no UAT needed, CI change approved, CI approval needed, released

#50 - feat: don't carry an approval over a base merge where both sides edited the same prose file

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: enhancement, Security, approved, no UAT needed, released

#49 - Don't carry an approval over a base merge that touched the same Markdown file on both sides

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: enhancement, Security, released

#48 - ci: replace the bot-automerge caller with pr-lifecycle arming

Pull Request - State: closed - Opened by rmartz about 1 month ago - 6 comments
Labels: DevOps, approved, no UAT needed, CI change approved, CI approval needed, CI, released

#47 - ci: dogfood pr-lifecycle in labels-only mode

Pull Request - State: closed - Opened by rmartz about 1 month ago - 5 comments
Labels: DevOps, approved, no UAT needed, CI, released

#46 - docs: record that pr-lifecycle replaces bot-automerge, and how to cut over

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: documentation, DevOps, approved, no UAT needed, released

#45 - feat!: label Dependabot PRs while Dependabot is rebasing or recreating them

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: enhancement, DevOps, approved, no UAT needed, breaking change, released

#44 - Label Dependabot PRs while Dependabot is rebasing or recreating them

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: enhancement, DevOps, released

#43 - fix!: wait on pending bot review requests, not on a Copilot review arriving

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps, approved, no UAT needed, breaking change, released

#42 - Release with the shared semantic-release-ci workflows

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: DevOps, released

#41 - fix!: identify release-please PRs by branch and a release-only diff, never by label

Pull Request - State: closed - Opened by rmartz about 1 month ago - 3 comments
Labels: Security, DevOps, approved, no UAT needed, breaking change, released

#40 - Harden release-please eligibility: drop the label trigger, and require a release-only diff

Issue - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: Security, DevOps, released

#39 - Auto-approve statically safe PRs (e.g. docs-only) by a changed-path allowlist

Issue - State: open - Opened by rmartz about 1 month ago
Labels: Security, DevOps

#38 - docs: record that UAT gating belongs to pr-policy

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: documentation, DevOps, approved, no UAT needed, released

#37 - feat!: expose the UAT gate as an opt-in `uat` check-run

Pull Request - State: closed - Opened by rmartz about 1 month ago - 4 comments
Labels: DevOps, no UAT needed, escalation needed, do not merge, breaking change

#36 - Copilot's out-of-quota notice is now a UI-only panel, so `awaiting-copilot` never ends

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: DevOps, released

#35 - docs: record the UAT gate design decisions

Pull Request - State: closed - Opened by rmartz about 1 month ago - 4 comments
Labels: DevOps, approved, no UAT needed, released

#34 - test: use the renamed `UAT ready` label in fixtures

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps, approved, no UAT needed, released

#33 - ci(release): publish to npmjs via OIDC trusted publishing

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: Infrastructure, approved, no UAT needed, CI change approved, CI approval needed, released

#32 - feat!: auto-update approved PRs that merge-safety flags `update required`

Pull Request - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps, approved, no UAT needed, breaking change, released

#25 - feat: make `no UAT needed` a human-only UAT bypass instead of an automation-applied label

Issue - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps

#23 - feat: auto-update approved PRs that merge-safety flags `update required`

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: DevOps, released

#17 - Use the renamed UAT labels (UAT ready / UAT passed)

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: DevOps, released

#13 - chore(deps): override transitive esbuild to >=0.28.1

Pull Request - State: closed - Opened by rmartz about 1 month ago
Labels: Security

#11 - docs: update /review, /merge, and pr-route.py to defer to pr-lifecycle

Issue - State: closed - Opened by rmartz about 1 month ago - 1 comment
Labels: DevOps, released

#10 - ci: dogfood pr-lifecycle on this repo and retire the bot-automerge caller

Issue - State: open - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps

#8 - feat: expose the UAT gate as a check-run the ruleset can require

Issue - State: closed - Opened by rmartz about 1 month ago - 2 comments
Labels: DevOps

GitHub / rmartz/pr-lifecycle issues and pull requests