Skip to content

chore: sync org-standard auto-rebase.yml stub from petry-projects/.github #335

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
don-petry merged 1 commit into from
Jun 19, 2026
Merged

chore: sync org-standard auto-rebase.yml stub from petry-projects/.github #335

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 17 additions & 5 deletions .github/workflows/auto-rebase.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,11 @@
# AGENTS — READ BEFORE EDITING:
# • This file is a THIN CALLER STUB. All branch-update logic lives in the
# reusable workflow above.
# • You MAY change: the SHA in the `uses:` line when upgrading the reusable
# workflow version (bump SHA to latest main of petry-projects/.github).
# • You MUST NOT change: trigger event, the concurrency group name,
# • You MUST NOT change: the `uses:` ref — it is pinned to the
# `auto-rebase/stable` channel, a moving tag advanced centrally. Never
# repoint it to `@main`, a SHA, or a frozen `@vX` (see ci-standards.md →
# Reusable workflow versioning). Also do not change the trigger event,
# the concurrency group name,
# or the job-level `permissions:` block — reusable workflows can be
# granted no more permissions than the calling job has, so removing
# the stanza breaks the reusable's gh API calls.
Expand All @@ -19,6 +21,16 @@
# Auto-rebase non-Dependabot PRs — thin caller for the org-level reusable.
# To adopt: copy this file to .github/workflows/auto-rebase.yml in your repo.
# No secrets required — uses GITHUB_TOKEN only.
#
# By default the reusable only updates *review-ready* PRs: non-draft AND
# (carrying a current APPROVED review OR the `auto-rebase:ready` label). This
# keeps the workflow from fanning out branch-update CI runs to every behind PR.
# To tune it, pass inputs to the reusable, e.g.:
#
# with:
# eligibility: review-ready # default; or `all` to update every behind PR
# ready_label: auto-rebase:ready # label that opts a non-draft PR in
#
name: Auto-rebase non-Dependabot PRs

on:
Expand All @@ -36,7 +48,7 @@ permissions: {}
jobs:
auto-rebase:
permissions:
contents: write # update-branch via GITHUB_TOKEN (may touch .github/workflows/)
contents: write # update-branch via GITHUB_TOKEN (may touch .github/workflows/)
pull-requests: write # post comments on PRs
uses: petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@376a4fcb1117444595e3e702fa450873d0e54310 # v2
uses: petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@auto-rebase/stable
secrets: inherit
Loading