fix(validate-pr): Allow trusted bots to bypass validation (#155)

* fix(validate-pr): Allow trusted bots and service accounts to bypass validation

Adds an allowlist of trusted bots and service accounts that are exempt
from issue reference validation. Prevents dependabot, renovate, and
internal release bots from being automatically closed.

The allowlist is managed centrally in validate-pr.js — SDK repos pick
up changes via SHA bumps.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: Also skip draft enforcement for allowed bots

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: stephanie-anderson

validate-pr/action.yml

@@ -37,6 +37,7 @@ runs:
     - name: Convert PR to draft
       if: >-
         steps.validate.outputs.was-closed != 'true'
+        && steps.validate.outputs.skipped != 'true'
         && github.event.pull_request.draft == false
       shell: bash
       env:
@@ -47,6 +48,7 @@ runs:
     - name: Label and comment on draft conversion
       if: >-
         steps.validate.outputs.was-closed != 'true'
+        && steps.validate.outputs.skipped != 'true'
         && github.event.pull_request.draft == false
       uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       with:

validate-pr/scripts/validate-pr.js

@@ -17,6 +17,22 @@ module.exports = async ({ github, context, core }) => {
   const prAuthor = pullRequest.user.login;
   const contributingUrl = `https://github.com/${repo.owner}/${repo.repo}/blob/${context.payload.repository.default_branch}/CONTRIBUTING.md`;
 
+  // --- Step 0: Skip allowed bots and service accounts ---
+  const ALLOWED_BOTS = [
+    'codecov-ai[bot]',
+    'dependabot[bot]',
+    'fix-it-felix-sentry[bot]',
+    'getsentry-bot',
+    'github-actions[bot]',
+    'javascript-sdk-gitflow[bot]',
+    'renovate[bot]',
+  ];
+  if (ALLOWED_BOTS.includes(prAuthor)) {
+    core.info(`PR author ${prAuthor} is an allowed bot. Skipping.`);
+    core.setOutput('skipped', 'true');
+    return;
+  }
+
   // --- Helper: check if a user has admin or maintain permission on a repo (cached) ---
   const maintainerCache = new Map();
   async function isMaintainer(owner, repoName, username) {