Merge pull request #19 from mercari/south/merge-upstream-20260107

Merge upstream (20260107)

Author: south-mer

.changelog.yml

@@ -0,0 +1,3 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
+# This file is intentionally empty. The file's existence enables changelog-app and is empty to use the default configuration.

.excavator.yml

@@ -1,5 +1,12 @@
+# Excavator auto-updates this file. Please contribute improvements to the central template.
+
 auto-label:
   names:
+    versions-props/upgrade-all: [ "merge when ready" ]
     circleci/manage-circleci: [ "merge when ready" ]
   tags:
-    automerge: [ "merge when ready" ]
+    donotmerge: [ "do not merge" ]
+    roomba: [ "merge when ready", "🤖 fix nits" ]
+    automerge: [ "merge when ready", "🤖 fix nits" ]
+    standards: [ "merge when ready", "🤖 fix nits" ]
+    autorelease: [ "autorelease" ]

.github/ISSUE_TEMPLATE.md

@@ -0,0 +1,12 @@
+## What happened?
+
+<!--
+Describe what you've observed and why it's bad (please include whatever stacktraces/version numbers you can).
+Clear steps to reproduce the behaviour are always helpful too!
+-->
+
+## What did you want to happen?
+
+<!--
+Suggest better behaviour
+-->

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+## Before this PR
+<!-- What's wrong with the current state of the world and why change it now? -->
+
+## After this PR
+<!-- User-facing outcomes this PR delivers go below -->
+==COMMIT_MSG==
+==COMMIT_MSG==
+
+## Possible downsides?
+<!-- Please describe any way users could be negatively affected by this PR. -->
+

.github/dependabot.yml

@@ -3,15 +3,12 @@ version: 2
 updates:
   - package-ecosystem: github-actions
     directory: /
-    schedule:
-      interval: weekly
-
-  - package-ecosystem: gomod
-    directory: /
+    labels: ["no changelog", "merge when ready", "dependencies", "github_actions"]
     schedule:
       interval: weekly
 
   - package-ecosystem: npm
     directory: /
+    labels: ["no changelog", "merge when ready", "dependencies", "javascript"]
     schedule:
       interval: monthly

.github/workflows/build.yml

@@ -19,7 +19,7 @@ jobs:
       GOPATH: /home/runner/go
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 0
 
@@ -30,12 +30,12 @@ jobs:
         echo "version=${GO_VERSION}" >> $GITHUB_OUTPUT
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ steps.go_version.outputs.version }}
 
     - name: Cache Godel assets
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ~/.godel
         key: ${{ runner.os }}-godel-${{ hashFiles('godelw', 'godel/config/godel.yml') }}
@@ -54,7 +54,7 @@ jobs:
       GOPATH: /home/runner/go
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 0
 
@@ -65,25 +65,25 @@ jobs:
         echo "version=${GO_VERSION}" >> $GITHUB_OUTPUT
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ steps.go_version.outputs.version }}
 
     - name: Cache Godel assets
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ~/.godel
         key: ${{ runner.os }}-godel-${{ hashFiles('godelw', 'godel/config/godel.yml') }}
         restore-keys: |
           ${{ runner.os }}-godel-
 
     - name: Set up Node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: 20
 
     - name: Cache node_modules
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: node_modules
         key: ${{ runner.os }}-node-modules-${{ hashFiles('yarn.lock') }}
@@ -103,7 +103,7 @@ jobs:
       run: ./godelw docker build --verbose
 
     - name: Archive distribution
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: dist
         path: |

.github/workflows/codeql-analysis.yml

@@ -23,11 +23,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
@@ -38,12 +38,12 @@ jobs:
         echo "version=${GO_VERSION}" >> $GITHUB_OUTPUT
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ steps.go_version.outputs.version }}
 
     - name: Autobuild for CodeQL
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@v4
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

.palantir/autorelease.yml

@@ -0,0 +1,4 @@
+version: 3
+options:
+  disable_label_releases: true
+  allow_patch_releases_on_major_series_branches: true