The Renovate workflow was failing because the token parameter
was removed in commit 0955832. This commit restores the
required GITHUB_TOKEN parameter so Renovate can authenticate
and create PRs for dependency updates.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Passes github.event.pull_request.number to the reusable workflow so
dual-approval status checks work correctly on PRs instead of always
receiving pr_number=0.
Adds the shared dual-approval caller workflow, mirroring all other
plugin repos. Enforces the CTO + QA dual approval policy as a GitHub
required status check.
Resolves the gap identified in PRI backlog (dd33f62f).
The shared plugin-release.yaml reusable workflow declares pull-requests: write
and uses it to create/merge the release PR. Calling workflows must grant all
permissions declared by reusable workflows or the job fails at startup.
Also adds secrets: inherit so org-level RELEASE_APP_ID and RELEASE_APP_PRIVATE_KEY
are forwarded to the external reusable workflow — without this they arrive empty
and the release is silently skipped.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Regression Regina [agent]
Gandalf the Greybeard
Countess von Containerheim
Chris Farhood