Merge branch 'main' into dependabot/pip/pip-1099dc578e

garloff · web-flow · commit 9f35b405b7f2 · 2025-12-01T10:16:24.000+01:00
diff --git a/.github/workflows/stale-repos.yml b/.github/workflows/stale-repos.yml
@@ -0,0 +1,98 @@
+---
+# Stale Repository Identifier
+# This GitHub Action implements the repository activity monitoring requirements outlined in the Sovereign Cloud Stack Procedural Standard (SCS-0006).
+# Functionality
+# - Identifies repositories within the SovereignCloudStack organization that have been inactive for 335 or 365 days
+# - Reports stale repositories based on recent pushes, releases, and pull requests
+# - Automatically creates or updates a GitHub issue with the stale repository report
+# - Runs monthly (on the 1st at 01:00 UTC) and can be manually triggered
+#
+# Limitations
+# - The action does not exclude auto-generated PRs (e.g., Renovate, Dependabot)
+# - It does not handle repositories with no remaining codeowners as stale
+#
+# TODO: These limitations must be implemented via post-processing or contributed upstream.
+
+name: stale repo identifier
+"on":
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: "0 1 1 * *"  # Runs monthly: at 01:00 UTC on the 1st day of every month
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  build:
+    name: Stale repo identifier
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        days: [335, 365]
+
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run stale_repos tool
+        uses: github/stale-repos@v2.1.3
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ORGANIZATION: SovereignCloudStack
+          INACTIVE_DAYS: ${{ matrix.days }}
+          ACTIVITY_METHOD: "pushed"
+          ADDITIONAL_METRICS: "release,pr"
+
+      - name: Rename report file
+        run: mv stale_repos.md stale_repos_${{ matrix.days }}.md
+
+      - name: Upload stale report artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: stale_repos_report_${{ matrix.days }}
+          path: stale_repos_${{ matrix.days }}.md
+
+  create-issue:
+    name: Create or update stale repo issue
+    runs-on: ubuntu-latest
+    needs: build  # Runs after all matrix jobs finish
+
+    permissions:
+      issues: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download all stale report artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: stale_reports
+
+      - name: Merge reports
+        run: |
+          echo "# Stale Repository Report" > final_stale_repos.md
+          for file in stale_reports/**/stale_repos_*.md; do
+            cat "$file" >> final_stale_repos.md
+            echo "" >> final_stale_repos.md
+          done
+
+      - name: Check for the stale report issue
+        run: |
+          ISSUE_NUMBER=$(gh search issues "Stale repository report" --match title --json number --jq ".[0].number")
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create or update issue
+        uses: peter-evans/create-issue-from-file@v5
+        with:
+          issue-number: ${{ env.issue_number }}
+          title: Stale repository report
+          content-filepath: ./final_stale_repos.md
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/CODEOWNERS b/CODEOWNERS
@@ -0,0 +1 @@
+* @org/project-board
diff --git a/config.yaml b/config.yaml
@@ -1,12 +1,13 @@
 ---
 milestones:
-  - 'R2 (v3.0.0)'
-  - 'R3 (v4.0.0)'
-  - 'R4 (v5.0.0)'
-  - 'R5 (v6.0.0)'
-  - 'R6 (v7.0.0)'
-  - 'R7 (v8.0.0)'
-  - 'R8 (v9.0.0)'
+  - "R2 (v3.0.0)"
+  - "R3 (v4.0.0)"
+  - "R4 (v5.0.0)"
+  - "R5 (v6.0.0)"
+  - "R6 (v7.0.0)"
+  - "R7 (v8.0.0)"
+  - "R8 (v9.0.0)"
+  - "R9 (v10.0.0)"
 
 labels:
   - name: bug
@@ -207,6 +208,9 @@ labels:
   - name: "kaas-hackathon"
     description: ""
     color: "0dce67"
+  - name: "hackathon"
+    description: ""
+    color: "8d3ef6"
   # Sprint names
   - name: "Sprint Amsterdam"
     description: "Sprint Amsterdam (2023, cwk 16+17)"
diff --git a/orgs/SovereignCloudStack/data.yaml b/orgs/SovereignCloudStack/data.yaml
@@ -85,16 +85,14 @@ members:
     login: mxmxchere
   - name: Mario Minners
     login: mario-minners
-  - name: Paul Hildebrandt
-    login: paulphys
   - name: Andre Machowiak
     login: nerdicbynature
   - name: Aleksandr Gerasimenko
     login: alexgesser
   - name: Toens Bueker
     login: neuroserve
   - name: Oliver Kautz
-    login: o-otte
+    login: okautz
   - name: Sebastian Kaupe
     login: snkaupe
   - name: Roy Farrell
@@ -266,6 +264,20 @@ members:
     login: janhorstmann
   - name: Karsten Samaschke
     login: ksamaschke
+  - name: Vinicius Zavam
+    login: egypcio
+  - name: Marvin Frommhold
+    login: depressiveRobot
+  - name: Michel Raabe
+    login: rrmichel
+  - name: Daniel Gerber
+    login: gerbsen
+  - name: Friedrich Zahn
+    login: toothstone
+  - name: Jan Klare
+    login: jklare
+  - name: Arno Schneider
+    login: arnoschneidunia
 
 # ==========================
 teams:
@@ -315,6 +327,7 @@ teams:
       - b1-luettje
       - brueggemann
       - boekhorstb1
+      - rrmichel
   - slug: "cloud-and-heat"
     description: "Cloud&Heat Technologies GmbH"
     privacy: closed
@@ -338,7 +351,7 @@ teams:
     description: "GONICUS GmbH"
     privacy: closed
     maintainer:
-      - o-otte
+      - okautz
     member:
       - joshmue
       - JoshuaI96
@@ -358,6 +371,7 @@ teams:
     member:
       - BiancaHollery
       - MariusQuabeck
+      - depressiveRobot
   - slug: "osism"
     description: "OSISM GmbH"
     privacy: closed
@@ -369,11 +383,11 @@ teams:
       - lindenb1
       - sbstnnmnn
       - janhorstmann
+      - jklare
   - slug: "plusserver"
     description: "plusserver GmbH"
     privacy: closed
     maintainer:
-      - frosty-geek
       - neuroserve
     member:
       - maliblatt
@@ -402,12 +416,12 @@ teams:
     privacy: closed
     maintainer:
       - jklippel
+      - scoopex
     member:
       - harmathy
       - mauhau
       - belgeron
       - varkeen
-      - scoopex
       - jschoone
       - maxwolfs
   - slug: "univention"
@@ -544,7 +558,7 @@ teams:
     description: "Container Monitoring / IaC / CI / Deployment Automation"
     privacy: closed
     maintainer:
-      - o-otte
+      - okautz
     member:
       - joshmue
       - JoshuaI96
@@ -610,6 +624,7 @@ teams:
       - scoopex
       - fkr
       - fzakfeld
+      - rrmichel
     member:
       - berendt
       - zuse-z3
@@ -634,7 +649,7 @@ teams:
     description: "Admins of the Zuul CI System"
     privacy: closed
     maintainer:
-      - o-otte
+      - okautz
       - PixelPhantomX
     member:
       - bitkeks
@@ -652,6 +667,32 @@ teams:
     privacy: closed
     maintainer:
       - cpt-kernel-afk
+  - slug: "project-board"
+    description: "Members of  Board"
+    privacy: closed
+    maintainer:
+      - berendt
+      - fkr
+      - garloff
+      - jschoone
+      - matofeder
+  - slug: "ECO-DIGIT"
+    description: "Colleagues from ECO:DIGIT project"
+    privacy: closed
+    maintainer:
+      - zuse-z3
+    member:
+      - fkr
+      - egypcio
+  - slug: "alasca-focis"
+    description: "Colleagues from ALASCA FOCIS"
+    privacy: closed
+    maintainer:
+      - mbuechse
+    member:
+      - gerbsen
+      - toothstone
+
 
 # ==========================
 branch_protection_templates:
@@ -685,7 +726,7 @@ branch_protection_templates:
         users: []  # list of members or empty list
         teams: []  # list of teams or empty list
       dismiss_stale_reviews: false
-      require_code_owner_reviews: false
+      require_code_owner_reviews: true
       required_approving_review_count: 1
     restrictions:
       users: []  # list of members or empty list
diff --git a/orgs/SovereignCloudStack/repositories/cluster-stacks-demo.yml b/orgs/SovereignCloudStack/repositories/cluster-stacks-demo.yml
@@ -5,7 +5,7 @@ cluster-stacks-demo:
   homepage: 'https://scs.community/'
   topics:
     - k8s
-  archived: false
+  archived: true
   has_issues: true
   has_projects: false
   has_wiki: false
diff --git a/orgs/SovereignCloudStack/repositories/cluster-stacks-playground.yml b/orgs/SovereignCloudStack/repositories/cluster-stacks-playground.yml
@@ -5,7 +5,7 @@ cluster-stacks-playground:
   homepage: 'https://scs.community/contribute/'
   topics:
     - community
-  archived: false
+  archived: true
   has_issues: true
   has_projects: false
   has_wiki: false
diff --git a/orgs/SovereignCloudStack/repositories/openstack-workload-generator.yml b/orgs/SovereignCloudStack/repositories/openstack-workload-generator.yml
@@ -20,6 +20,9 @@ openstack-workload-generator:
   teams:
     - slug: "osba"
       permission: "admin"
+    - slug: "uhurutec"
+      permission: "maintain"
+
   collaborators: []
   branch_protections:
     - branch: "main"
