Skip to content

build: tag shared workflows with semver for Renovate tracking #25

@jimisola

Description

@jimisola

Summary

The shared reusable workflows in this repo (e.g., check-semantic-pr.yml) are currently referenced via @main across all 12+ reqstool repos. This prevents Renovate/Dependabot from tracking version updates and makes it hard to pin for supply-chain security.

Proposal

  1. Tag this repo with semver (e.g., v1.0.0)
  2. Update all repos to reference @v1 instead of @main
  3. This enables Renovate to track and auto-update the shared workflow reference

Affected repos

All repos that reference reqstool/.github/.github/workflows/check-semantic-pr.yml@main:

  • reqstool-client
  • reqstool-python-decorators
  • reqstool-python-hatch-plugin
  • reqstool-python-poetry-plugin
  • reqstool-java-annotations
  • reqstool-java-maven-plugin
  • reqstool-java-gradle-plugin
  • reqstool-typescript-tags
  • reqstool-vscode-extension
  • reqstool-demo
  • reqstool-ai
  • reqstool-test-packages

🤖 Generated with Claude Code

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions