[tool] chore(tooling): improve and sync renovate & gh actions

Author: guillaumejparis

.github/workflows/auto-set-label.yml

@@ -0,0 +1,14 @@
+name: "[OpenAEV] Auto Label"
+on:
+  pull_request_target:
+    branches: [main, release/current]
+    types: [opened, reopened]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  auto-label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Auto Label"
+        uses: FiligranHQ/filigran-ci-tools/actions/auto-label@main

.github/workflows/openaev-auto-label.yml

@@ -0,0 +1,13 @@
+name: "[OpenAEV] Check Signed Commits in PR"
+on:
+  pull_request_target:
+    branches: [main, release/current]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  check-signed-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check signed commits in PR
+        uses: FiligranHQ/filigran-ci-tools/actions/check-signed-commit@main

.github/workflows/openaev-check-signed-commit.yml

@@ -0,0 +1,22 @@
+name: "[OpenAEV] Validate PR title Worker"
+on:
+  pull_request:
+    branches: [main, release/current]
+    types: [opened, edited, reopened, ready_for_review, synchronize]
+permissions:
+  contents: read
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Generate a token"
+        id: generate-token
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OPENAEV_PR_CHECKS_APP_ID }}
+          private-key: ${{ secrets.OPENAEV_PR_CHECKS_PRIVATE_KEY }}
+      - name: "Validate PR title and create check"
+        uses: FiligranHQ/filigran-ci-tools/actions/pr-title-check@main
+        with:
+          token: ${{ steps.generate-token.outputs.token }}

.github/workflows/openaev-validate-pr-title.yml

@@ -3,40 +3,20 @@
   "extends": [
     "config:recommended"
   ],
-  "baseBranchPatterns": [
-    "release/current",
-    "main"
+  "labels": [
+    "dependencies",
+    "filigran team"
   ],
-  "packageRules": [
-    {
-      "matchBaseBranches": [
-        "release/current"
-      ],
-      "commitMessageSuffix": null
-    },
-    {
-      "matchJsonata": [
-        "$exists(isVulnerabilityAlert)"
-      ],
-      "matchBaseBranches": [
-        "release/current"
-      ],
-      "enabled": false
-    },
-    {
-      "matchJsonata": [
-        "$not($exists(isVulnerabilityAlert))"
-      ],
-      "matchBaseBranches": [
-        "main"
-      ],
-      "enabled": false
-    },
-    {
-      "matchPackageNames": [
-        "mid"
-      ],
-      "enabled": false
-    }
-  ]
-}
+  "minimumReleaseAge": "3 days",
+  "prHourlyLimit": 2,
+  "prConcurrentLimit": 20,
+  "timezone": "Europe/Paris",
+  "schedule": [
+    "* 0-4,22-23 * * 1-5",
+    "* * * * 0,6"
+  ],
+  "updateNotScheduled": false,
+  "rebaseWhen": "conflicted",
+  "commitMessageAction": "update",
+  "commitMessagePrefix": "[agent] chore(deps):"
+}