Review Queue Label Sync #521
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Automated PR review queue label sync. | |
| # Runs on a 30-minute schedule to classify every open non-draft PR into one of | |
| # four review stages based on the number and permission level of approvals: | |
| # queue:junior-committer → queue:committers → queue:maintainers → ready-to-merge | |
| # | |
| # Phase 1 of 4 — label sync only. No assignments, no comments, no routing. | |
| # | |
| # Old step:/reviewer: labels are intentionally left untouched and will coexist | |
| # with the new queue: labels until a future cleanup PR removes them. | |
| # Bot-authored PRs (e.g. Dependabot) are included and will receive labels. | |
| name: Review Queue Label Sync | |
| on: | |
| schedule: | |
| - cron: '*/30 * * * *' | |
| workflow_dispatch: | |
| inputs: | |
| dry_run: | |
| description: 'If true, log label changes without applying them. Default true for manual runs.' | |
| required: false | |
| default: 'true' | |
| type: string | |
| permissions: | |
| pull-requests: write | |
| issues: write | |
| contents: read | |
| checks: read | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| cancel-in-progress: true | |
| jobs: | |
| sync: | |
| runs-on: hl-sdk-py-lin-md | |
| env: | |
| DRY_RUN: ${{ inputs.dry_run || 'false' }} | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout scripts | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| sparse-checkout: | | |
| .github/scripts | |
| sparse-checkout-cone-mode: false | |
| - name: Run review sync | |
| uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | |
| with: | |
| script: | | |
| const fn = require('./.github/scripts/review-sync/index.js'); | |
| await fn({ github, context, core }); |