chore: add workflow updates

.editorconfig

@@ -1,12 +1,13 @@
+# editorconfig.org
 root = true
 
 [*]
-indent_style = tab
+indent_style = space
+indent_size = 2
 end_of_line = lf
 charset = utf-8
 trim_trailing_whitespace = true
 insert_final_newline = true
 
-[*.yml]
-indent_style = space
-indent_size = 2
+[*.md]
+trim_trailing_whitespace = false

.github/release.yml

@@ -0,0 +1,42 @@
+# .github/release.yml
+
+changelog:
+  exclude:
+    labels:
+      - documentation
+      - ignore-for-release
+  categories:
+    - title: Breaking Changes
+      labels:
+        - breaking
+      exclude:
+        labels:
+          - dependencies
+    - title: New Features
+      labels:
+        - enhancement
+      exclude:
+        labels:
+          - dependencies
+    - title: Bug Fixes
+      labels:
+        - bug
+      exclude:
+        labels:
+          - dependencies
+    - title: Security Patches
+      labels:
+        - security
+        - "security"
+      exclude:
+        labels:
+          - dependencies
+    - title: Dependencies
+      labels:
+        - dependencies
+    - title: Maintenance
+      labels:
+        - "*"
+      exclude:
+        labels:
+          - dependencies

.github/workflows/auto-approve.yml

@@ -3,5 +3,7 @@ on: pull_request_target
 permissions:
   pull-requests: write
 jobs:
-  auto-approve:
-    uses: palashmon/reusable-workflows/.github/workflows/auto-approve.yml@main
+  apply:
+    if: github.actor == 'renovate[bot]'
+    uses: palashmon/reusable-workflows/.github/workflows/auto-approve.yml@main
+    secrets: inherit

.github/workflows/main.yml

@@ -5,11 +5,9 @@ on:
     branches:
       - main
       - master
-  pull_request: # PRs to main and master branches
+  pull_request: # PRs to main branches
   workflow_dispatch: # manual trigger
 
-# Control the concurrency of workflow runs
-# so that you can ensure that only one workflow runs at a time in a specific context.
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number || github.sha }}
   cancel-in-progress: true

.github/workflows/pr-labeler.yml

@@ -0,0 +1,8 @@
+name: PR labeler
+on:
+  - pull_request_target
+jobs:
+  apply:
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }} # only PRs from this repo
+    uses: palashmon/reusable-workflows/.github/workflows/labeler-reusable.yml@main
+    secrets: inherit

.github/workflows/stale.yml

@@ -1,26 +1,11 @@
-# This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
-#
-# You can adjust the behavior by modifying this file.
-# For more information, see:
-# https://github.com/actions/stale
-name: Mark stale issues and pull requests
+name: 'Close stale issues and PRs'
 on:
   schedule:
-  - cron: "*/10 5 * * *"
+  - cron: '30 1 * * *'
+permissions:
+  issues: write
+  pull-requests: write
 jobs:
-  stale:
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-    steps:
-    - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
-      with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
-        days-before-stale: 365
-        stale-issue-message: 'This issue is stale because it has been open 365 days with no activity. Remove stale label or comment or this will be closed in 7 days.'
-        stale-pr-message: 'This PR is stale because it has been open 365 days with no activity. Remove stale label or comment or this will be closed in 7 days.'
-        close-issue-message: 'This issue was closed because it has been stalled for 7 days with no activity.'
-        close-pr-message: 'This PR was closed because it has been stalled for 7 days with no activity.'
-        exempt-issue-labels: 'Help Wanted, Good first issue, Never gets stale'
-        exempt-pr-labels: 'Help Wanted, Never gets stale'
+  apply:
+    uses: palashmon/reusable-workflows/.github/workflows/stale.yml@main
+    secrets: inherit