Skip to content

Bump MSTest.TestFramework from 3.11.1 to 4.5.2 #299

Bump MSTest.TestFramework from 3.11.1 to 4.5.2

Bump MSTest.TestFramework from 3.11.1 to 4.5.2 #299

name: Contribution rules triage

Check warning on line 1 in .github/workflows/contribution-rules.yml

View workflow run for this annotation

GitHub Actions / Contribution rules triage

Workflow execution policy warning (evaluate mode)

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# Applies workflow labels to incoming issues/PRs. All configurable values —
# labels, patterns, disclosure token, message texts — live in
# .github/scripts/triage-config.mjs. Rule + label logic lives in
# .github/scripts/triage.mjs. This file only wires them together.
#
# Companion workflow auto-close-unaddressed.yml then posts a warning and
# eventually closes anything labeled `state-needs-updates`.
on:
issues:
types: [opened, edited, reopened]
pull_request_target:
# `synchronize` is intentionally excluded — new commits don't change the
# PR description, and re-running triage on every push would just re-apply
# the same label and re-post/no-op the same comment for no benefit.
types: [opened, edited, reopened]
permissions:
issues: write
pull-requests: write
jobs:
triage:
# ─────────────────────────────────────────────────────────────────
# Skip maintainers and bot-authored submissions:
# • OWNER / COLLABORATOR / MEMBER → maintainers, trusted; hardcoded
# so a maintainer submission doesn't even start a job.
# • Dependency/automation bots (Dependabot, Renovate, Actions) →
# they don't fill in contributor templates and shouldn't be nudged.
# This is an explicit allowlist, NOT a blanket `user.type == 'Bot'`
# check: AI agents acting as GitHub Apps (e.g. Devin) are also
# type 'Bot' and must go through triage like everyone else.
# ─────────────────────────────────────────────────────────────────
if: >-
!contains(fromJSON('["dependabot[bot]","renovate[bot]","github-actions[bot]"]'),
github.event.issue.user.login
|| github.event.pull_request.user.login)
&& !contains(fromJSON('["OWNER","COLLABORATOR","MEMBER"]'),
github.event.issue.author_association
|| github.event.pull_request.author_association)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
with:
sparse-checkout: .github/scripts
sparse-checkout-cone-mode: false
- name: Apply labels
uses: actions/github-script@v9
with:
script: |
const { default: triage } = await import(`${process.env.GITHUB_WORKSPACE}/.github/scripts/triage.mjs`);
await triage({ github, context, core });