[ci] Enabled changelog bot from openwisp-utils

[pushpitkamboj]

Checklist

• I have read the OpenWISP Contributing Guidelines.
• I have manually tested the changes proposed in this pull request.
• I have written new test cases for new code and/or updated existing tests for changes to existing code.
• I have updated the documentation.

Reference to Existing Issue

Description of Changes

Added a changelog bot workflow to automatically update changelogs when PRs are approved.

[coderabbitai]

Warning

Rate limit exceeded

@pushpitkamboj has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 3 minutes and 2 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 1329fac8-0bf2-4740-b849-63ec7b314691

📥 Commits

Reviewing files that changed from the base of the PR and between 0ee2d69 and 6751058.

📒 Files selected for processing (2)

• .github/workflows/bot-changelog-runner.yml
• .github/workflows/bot-changelog-trigger.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	1
WARNING	0
SUGGESTION	0

Issue Details (click to expand)

CRITICAL

File	Line	Issue
.github/workflows/bot-changelog-trigger.yml	35	Artifact version mismatch between upload (v7) and download (v8)

Issue: The bot-changelog-trigger.yml uses actions/upload-artifact@v7, but bot-changelog-runner.yml uses actions/download-artifact@v8. These versions are not compatible.

Fix: Upgrade the upload action to v4 or later to match the download action's expectations:

uses: actions/upload-artifact@v4

What the code does well

• Proper permissions scoping (empty at workflow level, explicitly set per job)
• Authorization checks on reviewer status (OWNER/MEMBER/COLLABORATOR)
• Input validation with regex for PR number
• Secrets passed properly to reusable workflow
• Good use of conditional logic to skip unnecessary runs

Files Reviewed (2 files)

• .github/workflows/bot-changelog-runner.yml - No issues
• .github/workflows/bot-changelog-trigger.yml - 1 critical issue (artifact version mismatch)

---

_{Reviewed by kimi-k2.5-0127 · 93,117 tokens}