| name: pr | |
| # Lints PR titles (Conventional Commits) and applies `type:` labels that drive | |
| # release notes + the version release-please derives (OpenHands/release-actions). | |
| # | |
| # pull_request_target (not pull_request) so it also runs on fork PRs, where the | |
| # label step needs a writable token. Safe ONLY because the reusable workflow | |
| # never checks out PR code (reads the title from the payload) and this caller | |
| # does NOT pass `secrets: inherit` (so the App token stays out of scope). Don't | |
| # add a checkout step or `secrets: inherit`. | |
| on: | |
| pull_request_target: | |
| # synchronize: re-run on each push so the check stays green on release-please's | |
| # force-pushed release PR. | |
| types: [opened, edited, reopened, synchronize] | |
| jobs: | |
| pr-title: | |
| permissions: | |
| pull-requests: write | |
| uses: OpenHands/release-actions/.github/workflows/pr-title.yml@main | |