Skip to content

Dev - #21

Merged
jaymyaka merged 11 commits into
mainfrom
dev
Jul 21, 2026
Merged

Dev#21
jaymyaka merged 11 commits into
mainfrom
dev

Conversation

@jaymyaka

@jaymyaka jaymyaka commented Jul 21, 2026 •

Copy link
Copy Markdown
Member

Summary

Related Issues

Changes

  • New feature
  • Bug fix
  • Refactor
  • Documentation
  • CI/CD

Checklist

  • Tests added/updated
  • Documentation updated (if applicable)
  • uv run poe lint passes
  • uv run poe typecheck passes
  • uv run poe test passes
  • No breaking changes (or documented in description)

ci: docs-notify — remove docs-pages.yml, add cross-repo dispatch trigger
* fix: stop pre-commit hook from touching .release-please-manifest.json

release-please owns the manifest; overwriting it on every commit
breaks release detection — it sees the bumped version and finds
nothing new to release.

* fix: allow release-please branches to merge to main

release-please creates PRs from 'release-please--branches--main'
directly to main — these must pass the enforce check.

* fix: use RELEASE_TOKEN in release-please so release:published event fires

GITHUB_TOKEN-created releases suppress same-repo webhook events,
which blocked pypi-publish from triggering. RELEASE_TOKEN (PAT) fires
the event normally.

* chore: bump action versions to v9, update CLAUDE.md, refresh org profile

* chore: upgrade trivy to 0.36.0, setup-uv to v6.1.0 (#17)

* chore: remove redundant CI/release workflows from org .github repo

ci.yml, package-validation.yml, release-dataenginex.yml, pypi-publish.yml
are all superseded by the dex repo's own ci.yml and release.yml workflows.
label-sync.yml duplicate of sync-labels.yml. WORKFLOWS_GUIDE.md updated.

* fix: use v-prefixed tag for trivy-action (0.36.0 → v0.36.0)

* fix(auto-pr): remove auto-merge call, just create the PR

gh pr merge --auto requires "Allow auto-merge" to be enabled in each
repo's settings. Drop it — the PR is created and merged manually when
checks pass.

* feat(workflows): add auto-pr-to-main reusable workflow

For app repos (dex-studio, careerdex) that use ephemeral preview
environments — feature branches open PRs directly to main instead
of to a dev branch.

* ci: pin setup-uv to v8.1.0

setup-uv dropped floating major/minor tags — @v7 no longer resolves.
* fix: stop pre-commit hook from touching .release-please-manifest.json

release-please owns the manifest; overwriting it on every commit
breaks release detection — it sees the bumped version and finds
nothing new to release.

* fix: allow release-please branches to merge to main

release-please creates PRs from 'release-please--branches--main'
directly to main — these must pass the enforce check.

* fix: use RELEASE_TOKEN in release-please so release:published event fires

GITHUB_TOKEN-created releases suppress same-repo webhook events,
which blocked pypi-publish from triggering. RELEASE_TOKEN (PAT) fires
the event normally.

* chore: bump action versions to v9, update CLAUDE.md, refresh org profile

* chore: upgrade trivy to 0.36.0, setup-uv to v6.1.0 (#17)

* chore: remove redundant CI/release workflows from org .github repo

ci.yml, package-validation.yml, release-dataenginex.yml, pypi-publish.yml
are all superseded by the dex repo's own ci.yml and release.yml workflows.
label-sync.yml duplicate of sync-labels.yml. WORKFLOWS_GUIDE.md updated.

* fix: use v-prefixed tag for trivy-action (0.36.0 → v0.36.0)

* fix(auto-pr): remove auto-merge call, just create the PR

gh pr merge --auto requires "Allow auto-merge" to be enabled in each
repo's settings. Drop it — the PR is created and merged manually when
checks pass.

* feat(workflows): add auto-pr-to-main reusable workflow

For app repos (dex-studio, careerdex) that use ephemeral preview
environments — feature branches open PRs directly to main instead
of to a dev branch.

* ci: pin setup-uv to v8.1.0

setup-uv dropped floating major/minor tags — @v7 no longer resolves.

* ci: update workflow templates to pinned action versions

- checkout@v4 → @v6, setup-uv@v5 → @v8.1.0, setup-python@v5 → @v6
- delete empty .vscode/tasks.json
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@jaymyaka
jaymyaka merged commit f3a6f2e into main Jul 21, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants