Backport PR #3772 on branch 1.11.x (ci: Check PRs for semantic labels) (#3773)

Author: flying-sheep

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/benchmark.yml

@@ -9,10 +9,6 @@ on:
 env:
   FORCE_COLOR: "1"
 
-defaults:
-  run:
-    shell: bash -e {0} # -e to fail on error
-
 jobs:
   benchmark:
     runs-on: ${{ matrix.os }}
@@ -29,9 +25,10 @@ jobs:
       ASV_DIR: "./benchmarks"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          # no blob:none so ASV can compare commits
 
       - name: Fetch main branch for `asv run`’s hash
         run: git fetch origin main:main

.github/workflows/check-pr.yml

@@ -18,15 +18,11 @@ on:
       # code change (e.g. this workflow)
       - synchronize
 
-defaults:
-  run:
-    shell: bash -e {0} # -e to fail on error
-
 jobs:
   # This job verifies that the milestone is present or not necessary
   # and determines if “check-relnotes” needs to be run.
   check-milestone:
-    name: Check Milestone
+    name: Check title, milestone, and labels
     runs-on: ubuntu-latest
     steps:
       - name: Check if milestone or “no milestone” label is present
@@ -40,6 +36,10 @@ jobs:
           text: ${{ github.event.pull_request.body }}
           regex: '^\s*- \[x\].*Release notes.*not necessary because:(.*)$'
           flags: m
+      - name: Check PR title
+        uses: amannn/action-semantic-pull-request@v6
+        env: # Needs repo options: “Squash and merge” with commit message set to “PR title”
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     outputs:
       no-relnotes-reason: ${{ steps.checked-relnotes.outputs.group1 }}
   # This job verifies that the relevant release notes file has been modified.

.github/workflows/ci.yml

@@ -15,21 +15,17 @@ env:
   # so because leidenalg 0.10.0 has them, we pre-compile things: https://github.com/vtraag/leidenalg/issues/173
   UV_COMPILE_BYTECODE: "1"
 
-defaults:
-  run:
-    shell: bash -e {0} # -e to fail on error
-
 jobs:
   get-environments:
     runs-on: ubuntu-latest
     outputs:
       envs: ${{ steps.get-envs.outputs.envs }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           filter: blob:none
           fetch-depth: 0
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@v6
         with:
           enable-cache: false
       - id: get-envs
@@ -54,12 +50,12 @@ jobs:
     env:  # environment variable for use in codecov’s env_vars tagging
       ENV_NAME: ${{ matrix.env.name }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
           filter: blob:none
 
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@v6
         with:
           enable-cache: true
           python-version: ${{ matrix.env.python }}
@@ -110,16 +106,16 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
           filter: blob:none
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
-      - uses: astral-sh/setup-uv@v5
+          python-version: "3.x"
+      - uses: astral-sh/setup-uv@v6
         with:
-          enable-cache: false
+          enable-cache: true
       - run: uvx --from build pyproject-build --sdist --wheel .
       - run: uvx twine check dist/*
 
@@ -131,6 +127,6 @@ jobs:
       - build
     runs-on: ubuntu-latest
     steps:
-        - uses: re-actors/alls-green@release/v1
-          with:
-            jobs: ${{ toJSON(needs) }}
+      - uses: re-actors/alls-green@release/v1
+        with:
+          jobs: ${{ toJSON(needs) }}

.github/workflows/publish.yml

@@ -7,25 +7,21 @@ on:
 env:
   FORCE_COLOR: "1"
 
-defaults:
-  run:
-    shell: bash -e {0} # -e to fail on error
-
 jobs:
   publish:
     runs-on: ubuntu-latest
     environment: pypi
     permissions:
       id-token: write # to authenticate as Trusted Publisher to pypi.org
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
           filter: blob:none
       - uses: actions/setup-python@v5
         with:
           python-version: "3.x"
-          cache: "pip"
-      - run: pip install build
-      - run: python -m build
+      - uses: astral-sh/setup-uv@v6
+      - run: uvx --from build pyproject-build --sdist --wheel .
+      - run: uvx twine check dist/*
       - uses: pypa/gh-action-pypi-publish@release/v1

docs/release-notes/3735.performance.md docs/release-notes/3735.perf.mddocs/release-notes/3735.performance.md renamed to docs/release-notes/3735.perf.md

@@ -299,10 +299,13 @@ single_file = false
 package_dir = "src"
 issue_format = "{{pr}}`{issue}`"
 title_format = "(v{version})=\n### {version} {{small}}`{project_date}`"
-fragment.bugfix.name = "Bug fixes"
-fragment.doc.name = "Documentation"
-fragment.feature.name = "Features"
-fragment.misc.name = "Miscellaneous improvements"
-fragment.performance.name = "Performance"
-fragment.breaking.name = "Breaking changes"
-fragment.dev.name = "Development Process"
+# Valid fragments should be a subset of conventional commit types (except for `breaking`):
+# https://github.com/commitizen/conventional-commit-types/blob/master/index.json
+# style, refactor, test, build, ci: should not go into changelog
+fragment.feat.name = "Features"
+fragment.fix.name = "Bug fixes"
+fragment.docs.name = "Documentation"
+fragment.perf.name = "Performance"
+fragment.chore.name = "Miscellaneous changes"
+fragment.revert.name = "Revert"
+fragment.breaking.name = "Breaking changes"   # add `!` to commit type (e.g. “feature!:”)