[tool] chore(tooling): improve and sync renovate & gh actions

.github/codeql-config.yml

@@ -4,10 +4,5 @@ paths:
   - openaev-front/src
   - openaev-framework/src
   - openaev-model/src
-  - openaev-injectors/openaev-http/src
-  - openaev-injectors/openaev-lade/src
-  - openaev-injectors/openaev-mastodon/src
-  - openaev-injectors/openaev-ovh/src
-  - openaev-injectors/openaev-ssh/src
 paths-ignore:
   - openaev-front/src/static

.github/workflows/auto-close-add-solved.yml

@@ -2,7 +2,7 @@ name: Auto Close and Solve Issues
 on:
   pull_request:
     branches:
-      - release/*
+      - release/current
       - master
     types:
       - closed
@@ -28,20 +28,20 @@ jobs:
           script: |
             const prTitle = context.payload.pull_request.title;
             core.info(`PR Title: ${prTitle}`);
-            
+
             // Match only issue-containing groups at the end
             const endPattern = /(?:\((?:[^)]*#\d+[^)]*)\)|#\d+)(?:\s+(?:\((?:[^)]*#\d+[^)]*)\)|#\d+))*\s*$/;
             const endMatch = prTitle.match(endPattern);
-            
+
             let issueNumbers = [];
-            
+
             if (endMatch) {
               // Extract all #number patterns from the matched section
               const allMatches = endMatch[0].matchAll(/#(\d+)/g);
               issueNumbers = [...allMatches]
                 .map(match => match[1])
                 .filter((value, index, self) => self.indexOf(value) === index); // Remove duplicates
-            
+
               if (issueNumbers.length > 0) {
                 core.info(`Found ${issueNumbers.length} issue number(s): ${issueNumbers.join(', ')}`);
                 core.setOutput('issue_numbers', issueNumbers.join(' '));
@@ -70,17 +70,17 @@ jobs:
             const issueNumbers = "${{ needs.extract_issue_number.outputs.issue_numbers }}"
               .split(' ')
               .filter(num => num.trim() !== '');
-            
+
             core.info(`Processing ${issueNumbers.length} issue(s): ${issueNumbers.join(', ')}`);
             core.startGroup('Processing Issues');
-            
+
             let successCount = 0;
             let failureCount = 0;
-            
+
             for (const issueNumber of issueNumbers) {
               try {
                 core.startGroup(`Issue #${issueNumber}`);
-            
+
                 // Add "solved" label
                 await github.rest.issues.addLabels({
                   owner: context.repo.owner,
@@ -89,7 +89,7 @@ jobs:
                   labels: ["solved"]
                 });
                 core.info(`✓ Added "solved" label`);
-            
+
                 // Close the issue
                 await github.rest.issues.update({
                   owner: context.repo.owner,
@@ -98,21 +98,21 @@ jobs:
                   state: "closed"
                 });
                 core.info(`✓ Closed issue`);
-            
+
                 successCount++;
                 core.endGroup();
-            
+
               } catch (error) {
                 core.error(`✗ Failed to process issue #${issueNumber}: ${error.message}`);
                 failureCount++;
                 core.endGroup();
               }
             }
-            
+
             core.endGroup();
-            
+
             // Summary
             core.notice(`Successfully processed ${successCount} issue(s)`);
             if (failureCount > 0) {
               core.warning(`Failed to process ${failureCount} issue(s)`);
-            }
+            }

.github/workflows/openaev-auto-label.yml

@@ -0,0 +1,14 @@
+name: "[OpenAEV] Auto Label"
+on:
+  pull_request_target:
+    branches: [master, release/current]
+    types: [opened, reopened]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  auto-label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Auto Label"
+        uses: FiligranHQ/filigran-ci-tools/actions/auto-label@main

.github/workflows/openaev-check-signed-commit.yml

@@ -0,0 +1,13 @@
+name: "[OpenAEV] Check Signed Commits in PR"
+on:
+  pull_request_target:
+    branches: [master, release/current]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  check-signed-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check signed commits in PR
+        uses: FiligranHQ/filigran-ci-tools/actions/check-signed-commit@main

.github/workflows/openaev-validate-pr-title.yml

@@ -0,0 +1,24 @@
+name: "[OpenAEV] Validate PR title Worker"
+on:
+  pull_request:
+    branches: [master, release/current]
+    types: [opened, edited, reopened, ready_for_review, synchronize]
+permissions:
+  contents: read
+jobs:
+  validate-pr-title:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Generate a token"
+        id: generate-token
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OPENAEV_PR_CHECKS_APP_ID }}
+          private-key: ${{ secrets.OPENAEV_PR_CHECKS_PRIVATE_KEY }}
+      - name: "Validate PR title and create check"
+        uses: FiligranHQ/filigran-ci-tools/actions/pr-title-check@main
+        with:
+          token: ${{ steps.generate-token.outputs.token }}