0eb6062f94
chore(phase2): retarget all automation and contributor guidance from staged to main ( #2122 )
...
* chore(phase2): retarget all automation from staged to main
- publish.yml: trigger on main, publish only to marketplace
- check-pr-target.yml: invert — now blocks PRs targeting staged, welcomes main
- 10 PR validation workflows: branches [staged] → [main]
- external-plugin-command-router.yml: --base staged → main (3×), message text
- external-plugin-rereview-command.yml: --base staged → main (2×), message text
- external-plugin-rereview.yml: staged reference in review comment text
- external-plugin-intake.yml: ref: staged checkout → main
- external-plugin-pr-quality-gates.yml: ref: staged checkout → main
- external-plugin-quality-gates.yml: ref: staged checkout → main
- check-plugin-structure.yml: error messages updated for new branch model
- contributors.yml: ref and base target → main
- setup-labels.yml: targets-main label description updated
- cli-for-beginners-sync.md + .lock.yml: base-branch staged → main
- codeowner-update.md + .lock.yml: base-branch staged → main
- learning-hub-updater.md + .lock.yml: base-branch staged → main
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* docs(phase2): update contributor guidance from staged to main
- CONTRIBUTING.md: branch from main, PR targets main; remove Phase 2 gate note
- AGENTS.md: PR target + external plugin PR automation references
- .github/pull_request_template.md: PR checklist targets main
- website/src/content/docs/learning-hub/agentic-workflows.md: PR target
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* aw updates
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-06-25 14:36:53 +10:00
919fdb3f8e
fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks ( #1088 )
...
* chore: publish from staged
* fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks
Co-authored-by: simonkurtz-MSFT <84809797+simonkurtz-MSFT@users.noreply.github.com >
* chore: publish from staged
* Clean plugins
* Clean plugins
* Clean plugins
* Fix gem-team plugin
* Reset README.plugins.md
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-03-23 10:37:40 +11:00
3d5b2868f0
fix: allow validate-agentic-workflows-pr.yml in forbidden file checks
2026-02-24 15:11:47 -05:00
fc567811c8
fix: exclude validate-agentic-workflows-pr.yml from forbidden file checks
2026-02-24 15:10:07 -05:00
68cfcb5c46
fix: update forbidden file check to allow actions-lock.json for workflow compilation
2026-02-24 15:08:38 -05:00
f058d7cd44
Combine workflow CI checks into single multi-job workflow
...
Merges the two separate action workflows (block-workflow-yaml.yml and
validate-agentic-workflows.yml) into a single validate-agentic-workflows-pr.yml
with two jobs: check-forbidden-files runs first, then compile-workflows
runs only if the file check passes.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-20 17:09:56 -08:00
Aaron Powell
Simon Kurtz
Bruno Borges
Bruno Borges