mattermost/.github
Eva Sarafianou fee649d063
Run docs-impact-review as regular CI instead of slash command (#35620)
* Run docs-impact-review as regular CI instead of slash command

Switch the Documentation Impact Review workflow from a `/docs-review`
slash command trigger to running automatically on pull_request events.
The analysis posts a sticky PR comment and inline comments, and adds a
`docs/needed` label when documentation changes are needed.

Made-with: Cursor

* Address review feedback: harden docs-impact-review workflow

- Remove invalid `direct_prompt` input not recognized by the pinned
  claude-code-action version (auto-detects mode from event type).
- Guard Claude step with secret availability check so fork and
  Dependabot PRs skip gracefully instead of failing.
- Move label management out of the LLM into a deterministic
  github-script step that parses the sticky comment, eliminating
  prompt-injection and excessive-agency risks.

Made-with: Cursor

* Fix secret check: use job-level env var instead of secrets context in step if

The secrets context is not available in step-level if expressions.
Evaluate it as a job-level env var and reference that instead.

Made-with: Cursor

* Use paginated API call to fetch all PR comments

Prevents missing the bot comment on busy PRs with more than 30 comments.

Made-with: Cursor

* Address review: add issues:write permission, remove auto-label-removal

- Upgrade issues permission from read to write (required for addLabels API)
- Remove automatic docs/needed label removal to avoid stripping the label
  prematurely when the analysis comment hasn't been posted yet

Made-with: Cursor
2026-03-19 09:47:36 +02:00
..
actions chore: bump versions of actions (#35386) 2026-03-06 09:35:11 +08:00
codeql Move /e2e -> /e2e-tests 2023-03-28 18:10:00 +02:00
ISSUE_TEMPLATE update CONTRIBUTING.md and github ISSUE_TEMPLATE (#30862) 2025-04-29 15:42:40 +03:00
workflows Run docs-impact-review as regular CI instead of slash command (#35620) 2026-03-19 09:47:36 +02:00
codecov.yml Limit Codecov spam (#31582) 2025-06-16 14:04:33 -06:00
dependabot.yml chore: bump versions of actions (#35386) 2026-03-06 09:35:11 +08:00
e2e-tests-workflows.md SEC-9513 feat: e2e tests on master and releases (#35205) 2026-02-11 13:02:25 +08:00
holopin.yml Add Hacktoberfest 2024 Holopin badge to holopin.yml (#28288) 2024-10-01 13:55:09 -04:00
ISSUE_TEMPLATE.md Update ISSUE_TEMPLATE.md (#27538) 2024-07-03 23:57:50 +03:00
PULL_REQUEST_TEMPLATE.md Add SBOM generation on release (#27733) 2024-08-14 09:31:18 -06:00