From f13781e5649e68e99854ecc587391c4e66eef4e8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:51:31 +0300 Subject: [PATCH 1/8] chore: add code ownership rules --- .github/CODEOWNERS | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..4eb9bfc --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,12 @@ +# Default ownership +* @BLCCoreStudio + +# Canonical knowledge and automation surfaces +/.github/ @BLCCoreStudio +/catalog/ @BLCCoreStudio +/taxonomy/ @BLCCoreStudio +/schema/ @BLCCoreStudio +/quality/ @BLCCoreStudio +/scripts/ @BLCCoreStudio +/INDEX.md @BLCCoreStudio +/ROADMAP.md @BLCCoreStudio From 9d8d538451f2ed0482b58ac91395fd58dff2e453 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:51:38 +0300 Subject: [PATCH 2/8] docs: add support and content triage policy --- SUPPORT.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 SUPPORT.md diff --git a/SUPPORT.md b/SUPPORT.md new file mode 100644 index 0000000..5ccf78d --- /dev/null +++ b/SUPPORT.md @@ -0,0 +1,23 @@ +# Support + +OpenDevIndex is a curated technical knowledge project. Support and contribution channels are separated so factual corrections, new content requests, and software defects can be triaged differently. + +## Incorrect or outdated technical content + +Use the content correction issue form. Identify the exact module or section, explain what is incorrect or outdated, and provide authoritative sources where possible. + +## New topics or deeper coverage + +Use the content request form. Explain why the topic belongs in the index, how it relates to existing modules, and which authoritative sources should anchor it. + +## Tooling or repository bugs + +Use the bug report form with reproduction steps, affected workflow or script, expected behavior, actual behavior, and logs. + +## Security + +Do not disclose vulnerabilities publicly. Follow `SECURITY.md`. + +## Maintenance priority + +The maintainer prioritizes factual correctness, source quality, broken validation or publishing pipelines, security, structural integrity of the knowledge graph, and high-value gaps in core technical coverage. Requests may be declined when they duplicate existing material or do not meet sourcing and depth standards. From d186a420f2c0364e05e16a408b98f4ab6f940b70 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:51:45 +0300 Subject: [PATCH 3/8] chore: configure dependency update automation --- .github/dependabot.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..898869b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,17 @@ +version: 2 +updates: + - package-ecosystem: pip + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 5 + labels: + - dependencies + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 5 + labels: + - dependencies + - ci From d6aeeea660aa7769f133ce32becc1af61207c46a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:51:51 +0300 Subject: [PATCH 4/8] ci: review dependency changes in pull requests --- .github/workflows/dependency-review.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..3c8cbc8 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,19 @@ +name: Dependency Review + +on: + pull_request: + branches: [main] + +permissions: + contents: read + +jobs: + dependency-review: + name: Dependency Review + runs-on: ubuntu-24.04 + permissions: + contents: read + pull-requests: read + steps: + - name: Review dependency changes + uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5 From 5a11a7084b1b0e7377ffc4b5f4e7198391432be2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:51:57 +0300 Subject: [PATCH 5/8] ci: add CodeQL analysis for repository tooling --- .github/workflows/codeql.yml | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 .github/workflows/codeql.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..bdfcb8a --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,36 @@ +name: CodeQL + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: '17 4 * * 3' + workflow_dispatch: + +permissions: + contents: read + security-events: write + +concurrency: + group: codeql-${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +jobs: + analyze: + name: Analyze Python tooling + runs-on: ubuntu-24.04 + steps: + - name: Checkout + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + - name: Initialize CodeQL + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 + with: + languages: python + - name: Analyze + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 + with: + category: /language:python From 71769bf5f4da4871c6d39d08a143564f6af1542e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:52:03 +0300 Subject: [PATCH 6/8] ci: automate safe Dependabot patch updates --- .github/workflows/dependabot-auto-merge.yml | 26 +++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml new file mode 100644 index 0000000..b6a0557 --- /dev/null +++ b/.github/workflows/dependabot-auto-merge.yml @@ -0,0 +1,26 @@ +name: Dependabot Auto Merge + +on: + pull_request: + types: [opened, synchronize, reopened] + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + if: github.event.pull_request.user.login == 'dependabot[bot]' && github.event.pull_request.base.ref == 'main' && github.repository_owner == 'BLCCoreStudio' + runs-on: ubuntu-24.04 + steps: + - name: Fetch Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3 + with: + github-token: ${{ github.token }} + - name: Enable auto-merge for patch updates + if: steps.metadata.outputs.update-type == 'version-update:semver-patch' + env: + GH_TOKEN: ${{ github.token }} + PR_URL: ${{ github.event.pull_request.html_url }} + run: gh pr merge --auto --squash "$PR_URL" From 7508b89ea42a8c43328193ebbdbcccad28daffaa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:52:09 +0300 Subject: [PATCH 7/8] chore: configure generated release notes --- .github/release.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/release.yml diff --git a/.github/release.yml b/.github/release.yml new file mode 100644 index 0000000..2b74d97 --- /dev/null +++ b/.github/release.yml @@ -0,0 +1,34 @@ +changelog: + exclude: + labels: + - ignore-for-release + authors: + - dependabot + categories: + - title: Knowledge and coverage + labels: + - content + - coverage + - title: Corrections + labels: + - correction + - bug + - fix + - title: Features and structure + labels: + - enhancement + - feature + - title: Security + labels: + - security + - title: Documentation + labels: + - documentation + - title: Maintenance + labels: + - dependencies + - maintenance + - ci + - title: Other changes + labels: + - '*' From b925fd3bb6f1a6c8359b75bb2d9fe8c0a2d41d94 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?BLC=20Core=20Studio=20=E2=80=94=20Developer=20Tools?= <207100624+BLCCoreStudio@users.noreply.github.com> Date: Thu, 3 Sep 2026 01:53:45 +0300 Subject: [PATCH 8/8] ci: remove unsupported dependency review check --- .github/workflows/dependency-review.yml | 19 ------------------- 1 file changed, 19 deletions(-) delete mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml deleted file mode 100644 index 3c8cbc8..0000000 --- a/.github/workflows/dependency-review.yml +++ /dev/null @@ -1,19 +0,0 @@ -name: Dependency Review - -on: - pull_request: - branches: [main] - -permissions: - contents: read - -jobs: - dependency-review: - name: Dependency Review - runs-on: ubuntu-24.04 - permissions: - contents: read - pull-requests: read - steps: - - name: Review dependency changes - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5