Merge branch 'main' into emmercm/candidate-missing-log-level

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -2,7 +2,7 @@
 # https://github.com/aio-libs/aiohttp/blob/master/.github/ISSUE_TEMPLATE/bug_report.yml
 name: 🐞 Bug Report
 description: Create a report to help us improve.
-labels: ["bug"]
+labels: ["potential-bug"]
 assignees:
   - emmercm
 body:

.github/labels.yml

@@ -0,0 +1,42 @@
+# https://github.com/EndBug/label-sync
+
+# GitHub defaults
+- name: bug
+  description: Something isn't working
+  color: 'd73a4a'
+#- name: dependencies
+#  description: Pull requests that update a dependency file
+#  color: '0366d6'
+#- name: documentation
+#  description: Improvements or additions to documentation
+#  color: '0075ca'
+- name: duplicate
+  description: This issue or pull request already exists
+  color: 'cfd3d7'
+- name: enhancement
+  description: New feature or request
+  color: 'a2eeef'
+#- name: good first issue
+#  description: Good for newcomers
+#  color: '7057ff'
+#- name: help wanted
+#  description: Extra attention is needed
+#  color: '008672'
+#- name: invalid
+#  description: This doesn't seem right
+#  color: 'e4e669'
+#- name: question
+#  description: Further information is requested
+#  color: 'd876e3'
+#- name: wontfix
+#  description: This will not be worked on
+#  color: 'ffffff'
+
+# https://github.com/temporalio/temporal/labels
+#- name: feature-request
+#  color: '4c2e9c'
+#  alias: ['enhancement']
+- name: potential-bug
+  color: '66b9cc'
+- name: security
+  color: 'f72e32'

.github/workflows/codecov.yml

@@ -12,6 +12,10 @@ on:
     branches:
       - 'main'
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   codecov-lint:
     runs-on: ubuntu-latest

.github/workflows/compile.yml

@@ -10,6 +10,10 @@ on:
     types:
       - published
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   node-compile:
     runs-on: ${{ matrix.os }}-latest

.github/workflows/label-sync.yml

@@ -0,0 +1,44 @@
+name: GitHub Label Sync
+
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize  # HEAD has changed, e.g. a push happened
+      - reopened
+
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  dry-run:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: EndBug/label-sync@v2
+        with:
+          config-file: .github/labels.yml
+          delete-other-labels: true
+          dry-run: true
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+  # !!! This check should be required by GitHub !!!
+  labels-status-check:
+    needs:
+      - dry-run
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo ok
+
+  sync:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: EndBug/label-sync@v2
+        with:
+          config-file: .github/labels.yml
+          delete-other-labels: true
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -12,6 +12,10 @@ on:
       - synchronize  # HEAD has changed, e.g. a push happened
       - reopened
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   node-lint:
     runs-on: ubuntu-latest

renovate.json5

@@ -18,6 +18,7 @@
     enabled: true, // default
     schedule: 'at any time', // default
     prCreation: 'immediate', // default
+    labels: ['security'],
     automergeSchedule: 'at any time',
   },
   // WARN: "When the lockfileVersion is higher than 1 in package-lock.json, remediations are only possible when changes are made to package.json."