[tool] chore(tooling): improve and sync renovate & gh actions

Author: guillaumejparis

.github/workflows/oaev_shared_auto_label.yml

@@ -0,0 +1,14 @@
+name: "[OAEV Shared] Auto Label"
+on:
+  pull_request:
+    branches: [main, release/current]
+    types: [opened, reopened]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  auto-label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Auto Label"
+        uses: FiligranHQ/filigran-ci-tools/actions/auto-label@v1

.github/workflows/oaev_shared_check_signed_commit.yml

@@ -0,0 +1,13 @@
+name: "[OAEV Shared] Check Signed Commits in PR"
+on:
+  pull_request_target:
+    branches: [main, release/current]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  check-signed-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check signed commits in PR
+        uses: FiligranHQ/filigran-ci-tools/actions/check-signed-commit@v1

.github/workflows/oaev_shared_validate_pr_title.yml

@@ -0,0 +1,20 @@
+name: "[OAEV Shared] Validate PR title Worker"
+on:
+  pull_request:
+    branches: [main, release/current]
+    types: [opened, edited, reopened, ready_for_review, synchronize]
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Generate a token"
+        id: generate-token
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OPENAEV_PR_CHECKS_APP_ID }}
+          private-key: ${{ secrets.OPENAEV_PR_CHECKS_PRIVATE_KEY }}
+      - name: "Validate PR title and create check"
+        uses: FiligranHQ/filigran-ci-tools/actions/pr-title-check@v1
+        with:
+          token: ${{ steps.generate-token.outputs.token }}

.github/workflows/validate-pr-title.yml

@@ -1,34 +1,31 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "docker:enableMajor"
   ],
   "labels": [
     "dependencies",
     "filigran team"
   ],
-  "prConcurrentLimit": 2,
-  "baseBranches": ["release/current", "main"],
+  "minimumReleaseAge": "3 days",
+  "prHourlyLimit": 2,
+  "prConcurrentLimit": 20,
+  "timezone": "Europe/Paris",
+  "schedule": [
+    "* 0-4,22-23 * * 1-5",
+    "* * * * 0,6"
+  ],
+  "updateNotScheduled": false,
+  "rebaseWhen": "conflicted",
+  "commitMessageAction": "update",
+  "commitMessagePrefix": "[tool] chore(deps):",
   "packageRules": [
     {
-      "matchUpdateTypes": [
-        "minor"
+      "matchPaths": [
+        "*/**"
       ],
-      "prPriority": 5
-    },
-    {
-      "matchBaseBranches": ["release/current"],
-      "commitMessageSuffix": null
-    },
-    {
-      "matchJsonata": ["$exists(isVulnerabilityAlert)"],
-      "matchBaseBranches": ["release/current"],
-      "enabled": false
-    },
-    {
-      "matchJsonata": ["$not($exists(isVulnerabilityAlert))"],
-      "matchBaseBranches": ["main"],
-      "enabled": false
+      "commitMessagePrefix": "[injectors] chore(deps):"
     }
   ]
-}
+}