Skip to content

Sync upstream updates: read replica commit IDs, duration handlers and MCP OAuth discovery #832

Sync upstream updates: read replica commit IDs, duration handlers and MCP OAuth discovery

Sync upstream updates: read replica commit IDs, duration handlers and MCP OAuth discovery #832

name: submission maintenance

Check warning on line 1 in .github/workflows/submission-maintenance.yml

View workflow run for this annotation

GitHub Actions / submission maintenance

Workflow execution policy warning (evaluate mode)

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
schedule:
- cron: '23 4 * * *'
workflow_dispatch:
inputs:
dry_run:
description: Report intended actions without changing issues or pull requests
type: boolean
default: true
pull_request_target:
types: [opened, reopened, synchronize, edited, converted_to_draft]
pull_request:
paths:
- '.github/scripts/submission-cleanup*'
- '.github/workflows/submission-maintenance.yml'
push:
branches: ['0.4']
paths:
- '.github/scripts/submission-cleanup*'
- '.github/workflows/submission-maintenance.yml'
permissions:
contents: read
jobs:
test:
if: github.event_name == 'pull_request' || github.event_name == 'push'
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
with:
node-version: 24
- run: node --test .github/scripts/submission-cleanup.test.cjs
cleanup:
if: >-
github.repository == 'hypervel/components' &&
(github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' ||
github.event_name == 'pull_request_target')
runs-on: ubuntu-latest
timeout-minutes: 15
concurrency:
group: submission-cleanup-${{ github.event.pull_request.number || 'sweep' }}
cancel-in-progress: false
permissions:
contents: read
issues: write
pull-requests: write
steps:
# The write-enabled job only loads scripts from the trusted default branch.
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ github.event.repository.default_branch }}
persist-credentials: false
sparse-checkout: .github/scripts
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
CLEANUP_DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run }}
with:
script: |
const cleanup = require('./.github/scripts/submission-cleanup.cjs');
await cleanup({
github, context, core,
dryRun: process.env.CLEANUP_DRY_RUN === 'true',
});