chore(github): align .github config with compono, drop unused templates

.github/AGENTS.md

@@ -3,7 +3,6 @@
 ## PRs
 
 - PR titles must use Conventional Commits format.
-- Use `.github/pull_request_template.md` for PR descriptions.
 - Dependabot PRs are exempt from title validation.
 
 Allowed types:

.github/dependabot.yml

@@ -1,12 +1,29 @@
 version: 2
+
+multi-ecosystem-groups:
+  infrastructure:
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+    open-pull-requests-limit: 25
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: "chore"
+      prefix-development: "chore"
+      include: "scope"
+
 updates:
   - package-ecosystem: "nuget"
     directory: "/"
     labels:
       - "dependabot"
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 10
+      day: "wednesday"
+    open-pull-requests-limit: 25
+    cooldown:
+      default-days: 7
     commit-message:
       prefix: "chore"
       prefix-development: "chore"
@@ -40,13 +57,9 @@ updates:
     directory: "/"
     labels:
       - "dependabot"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
-    commit-message:
-      prefix: "chore"
-      prefix-development: "chore"
-      include: "scope"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "infrastructure"
     groups:
       minor-and-patch:
         update-types:
@@ -59,13 +72,9 @@ updates:
     directory: "/"
     labels:
       - "dependabot"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
-    commit-message:
-      prefix: "chore"
-      prefix-development: "chore"
-      include: "scope"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "infrastructure"
     groups:
       minor-and-patch:
         update-types:
@@ -76,24 +85,17 @@ updates:
     directory: "/"
     labels:
       - "dependabot"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: "chore"
-      prefix-development: "chore"
-      include: "scope"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "infrastructure"
 
   - package-ecosystem: "pip"
     directory: "/"
     labels:
       - "dependabot"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
-    commit-message:
-      prefix: "chore"
-      prefix-development: "chore"
-      include: "scope"
+    patterns:
+      - "*"
+    multi-ecosystem-group: "infrastructure"
     groups:
       minor-and-patch:
         update-types:

.github/release-drafter.yml

@@ -4,28 +4,28 @@ tag-template: 'v$RESOLVED_VERSION'
 autolabeler:
   - label: 'type: feat'
     title:
-      - '/^feat(\([^)]*\))?:/i'
+      - '/^feat(\(.+\))?(!)?:/i'
   - label: 'type: fix'
     title:
-      - '/^fix(\([^)]*\))?:/i'
+      - '/^fix(\(.+\))?(!)?:/i'
   - label: 'type: docs'
     title:
-      - '/^docs(\([^)]*\))?:/i'
+      - '/^docs(\(.+\))?(!)?:/i'
   - label: 'type: refactor'
     title:
-      - '/^refactor(\([^)]*\))?:/i'
+      - '/^refactor(\(.+\))?(!)?:/i'
   - label: 'type: test'
     title:
-      - '/^test(\([^)]*\))?:/i'
+      - '/^test(\(.+\))?(!)?:/i'
   - label: 'type: chore'
     title:
-      - '/^chore(\([^)]*\))?:/i'
+      - '/^chore(\(.+\))?(!)?:/i'
   - label: 'type: ci'
     title:
-      - '/^ci(\([^)]*\))?:/i'
+      - '/^ci(\(.+\))?(!)?:/i'
   - label: 'type: revert'
     title:
-      - '/^revert(\([^)]*\))?:/i'
+      - '/^revert(\(.+\))?(!)?:/i'
   - label: 'breaking-change'
     title:
       - '/^(feat|fix|docs|refactor|test|chore|ci|revert)(\([^)]*\))?!:/i'
@@ -75,11 +75,13 @@ categories:
   - type: 'version-resolver'
     semver-increment: 'major'
     when:
-      label: 'breaking-change'
+      labels:
+        - 'breaking-change'
   - type: 'version-resolver'
     semver-increment: 'minor'
     when:
-      label: 'type: feat'
+      labels:
+        - 'type: feat'
   - type: 'version-resolver'
     semver-increment: 'patch'
     when:

.github/workflows/dependabot-auto-merge.yml

@@ -1,5 +1,8 @@
 name: Dependabot auto-merge
-on: pull_request
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
 
 permissions:
   contents: write
@@ -8,23 +11,32 @@ permissions:
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'LayeredCraft/minimal-lambda'
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v3
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 
+      - name: Generate app token
+        id: app-token
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          app-id: ${{ secrets.DEPENDABOT_AUTOMERGE_APP_ID }}
+          private-key: ${{ secrets.DEPENDABOT_AUTOMERGE_PRIVATE_KEY }}
+
       - name: Approve PR
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
         run: gh pr review --approve "$PR_URL"
         env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ steps['app-token'].outputs.token }}
 
       - name: Enable auto-merge for Dependabot PRs
         if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
         run: gh pr merge --auto --squash "$PR_URL"
         env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ steps['app-token'].outputs.token }}

AGENTS.md

@@ -39,4 +39,3 @@ task build:aot-check
 ## Git / PR
 
 Use `git-workflow` skill for commits, branches, and PRs.
-When writing PRs, use `./.github/pull_request_template.md`.