Skip to content

chore(deps): bump rubykatzen/starcast from 0.2 to 0.8 - #81

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/rubykatzen/starcast-0.8
Open

chore(deps): bump rubykatzen/starcast from 0.2 to 0.8#81
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/rubykatzen/starcast-0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps rubykatzen/starcast from 0.2 to 0.8.

Release notes

Sourced from rubykatzen/starcast's releases.

v0.8.0

Added

  • actions/apply-proposal composite action: copies a proposal's mapped Issue Fields onto its parent (type/parent/labels handled as reserved names via native Issue Type, sub-issue, and Label mutations), then closes the proposal and any open sibling proposals of the same parent. Idempotent — a no-op against an already-closed proposal.
  • actions/reject-proposal composite action: closes a proposal, nothing else.

Changed

  • proposal-shared.yml's apply and reject jobs now run the actions above instead of a placeholder notice.

v0.7.0

Changed

  • Breaking: proposal-lifecycle-shared.yml is renamed to proposal-shared.yml, matching the <name>-shared.yml pattern used by the other reusable workflows. The workflow's name: and its Telegram-report workflow: value change from "Proposal Lifecycle" to "Proposal", and its concurrency group prefixes shorten from proposal-lifecycle-* to proposal-*.

v0.6.0

Added

  • proposal-lifecycle-shared.yml reusable workflow: the contract for the five-job proposal lifecycle (apply, reject, distill, rework, propose) described in #11, with self-gating, an input-invariant check, and per-comment/per-repository concurrency groups. Domain logic for each action is not implemented yet — this release ships the contract and reporting scaffold only.
  • actions/telegram-notify composite action: optionally report a job's triggered action and outcome to a Telegram chat (#46). Opt-in per consumer; a missing chat id/bot token is a no-op and a delivery failure never fails the calling job.

v0.5.0

Added

  • collect-pull-requests-shared.yml reusable workflow and actions/collect-pull-requests composite action: collect open pull requests, including drafts, from configured organizations/repositories into a GitHub Project V2. Existing active and archived Project items are left untouched, and Status is owned by Project automation.

... (truncated)

Changelog

Sourced from rubykatzen/starcast's changelog.

Changelog

[Unreleased]

Added

  • actions/proposal composite action: a single Homebrew-style CLI (proposal.py <mode> --flag value) covering the whole proposal lifecycle's deterministic surface — dequeue, list-fields, propose, apply, reject — sharing transport, field-discovery, and mutation helpers instead of one script per action.
    • dequeue: consumer-owned capacity_query/queue_query gate and source the next proposal candidate, one per run — see capacity_query/queue_query/review_limit inputs on proposal-shared.yml's propose job. capacity_query must alias exactly one scalar numeric field as capacity, queue_query exactly one array-valued field as queue; both are found by a recursive, type-disambiguated alias search rather than a schema-aware mapping. The dequeued candidate's own id is found the same recursive way, not a flat lookup — needed for queue shapes where id is nested (e.g. a Project-based queue_query typically exposes it as content { ... on Issue { id } }).
    • list-fields: discovers the prefixed proposal Issue Fields available in a repository.
    • propose: creates a proposal issue against a parent — Issue Type, sub-issue relationship, field values, and the control comment. Field values are mocked (a trivial type-appropriate placeholder) rather than agent-decided; real regulation-constrained judgment is tracked in #11.
    • apply/reject: unchanged behavior from the actions they replace (below), now reached via mode: apply/mode: reject.
  • proposal-shared.yml's propose job now dequeues a candidate and creates a (mocked) proposal for it, instead of a placeholder notice.
  • entity_query, propose_transition_mutation, and apply_transition_mutation inputs on proposal-shared.yml: optionally transition whatever "controlling entity" tracks an issue's state (e.g. a ProjectV2Item) as it moves through the lifecycle — incoming to review on propose, review to done on apply (#69). All three are independently optional consumer-owned GraphQL text; entity_query uses the same alias+type extraction as capacity/queue. A configured transition mutation that fails after a successful create/apply is a hard error, not swallowed.
  • check-control-comment mode on actions/proposal, run by proposal-shared.yml's validate job on issue_comment runs before apply/reject/distill/rework act: verifies the triggering comment is actually the proposal's first/control comment, not just any comment containing matching checkbox text (#63). A mismatch is a hard error. Success adds a 👀 reaction to the comment, mirroring the Copilot coding agent's own acknowledgment convention.

... (truncated)

Commits
  • ee9293f chore: update changelog for v0.8.0 (#61)
  • c14d9e8 Merge pull request #56 from rubykatzen/feat/apply-reject-proposal
  • 08cf8c4 fix: copy title/body on Apply, and fix a real gh api graphql transport bug
  • 71c9966 feat: implement apply and reject proposal actions
  • 416b3e1 chore: update changelog for v0.7.0 (#52)
  • 5739557 Merge pull request #51 from rubykatzen/fix/proposal-rename-breaking-changelog
  • d12d606 docs: correct v0.6.0 changelog and bump to v0.7 after rename
  • d25f68c Merge pull request #50 from rubykatzen/rename/proposal-shared
  • 841d133 rename: proposal-lifecycle-shared.yml to proposal-shared.yml
  • ee1498d Merge pull request #49 from rubykatzen/release/v0.6.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/rubykatzen/starcast-0.8 branch from 7f715ed to 2297fe6 Compare August 10, 2026 23:41
Bumps [rubykatzen/starcast](https://github.com/rubykatzen/starcast) from 0.2 to 0.8.
- [Release notes](https://github.com/rubykatzen/starcast/releases)
- [Changelog](https://github.com/rubykatzen/starcast/blob/main/CHANGELOG.md)
- [Commits](v0.2...v0.8)

---
updated-dependencies:
- dependency-name: rubykatzen/starcast
  dependency-version: '0.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/rubykatzen/starcast-0.8 branch from 2297fe6 to 7e29ecd Compare August 11, 2026 00:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant