chore: pr workflows by edwinjosechittilappilly · Pull Request #727 · langflow-ai/openrag

edwinjosechittilappilly · 2025-12-23T19:03:36Z

This pull request introduces a comprehensive set of GitHub workflow and configuration files to automate and standardize pull request labeling, review, and release processes. The main changes include adding PR label automation, enforcing conventional commit standards, managing labels based on reviews, and improving release note generation. These enhancements aim to streamline CI/CD, improve code quality, and ensure consistent project management.

Pull Request and Label Automation:

Added .github/labeler.yml and .github/workflows/labeler.yml to automatically apply labels to PRs based on changed files, improving triage and review efficiency. [1] [2]
Introduced .github/changes-filter.yaml to define file path filters for categorizing changes by area (e.g., python, frontend, docs, docker, etc.), supporting advanced automation and reporting.

Conventional Commit and PR Standards:

Added .github/workflows/conventional-labels.yml to enforce conventional commit standards on PR titles and descriptions, validate PR descriptions for meaningful content, and automatically label PRs according to commit types.
Included .github/semantic.yml and .github/workflows/pr-checks.yml to further enforce semantic PR titles and provide user guidance on commit message conventions. [1] [2]

Release and Changelog Automation:

Added .github/release.yml to categorize and generate changelogs automatically based on PR labels, making release notes more informative and structured.

Review and Community Label Management:

Introduced .github/workflows/add-labels.yml to add or remove an "lgtm" label based on PR review status, improving visibility of approved changes.
Added .github/workflows/community-label.yml to automatically label PRs from external contributors as "community" for easier identification.

Branch Management:

Implemented .github/workflows/auto-delete-branch.yml to automatically delete merged branches (excluding protected branches), keeping the repository clean.

Configuration Files

1. `.github/semantic.yml`

Purpose: Configures the semantic PR bot to validate PR titles follow Conventional Commits format.

titleOnly: true
targetUrl: https://www.conventionalcommits.org/en/v1.0.0/#summary

Benefits:

Provides a link to contributors explaining the expected PR title format
Works with GitHub's semantic PR app (if installed)

2. `.github/labeler.yml`

Purpose: Configuration for actions/labeler - maps file paths to labels.

Files Changed	Label Applied
`frontend/**`	`frontend`
`src/**`	`backend`
`docs/**`	`documentation`
`.github/**`	`ci`
`tests/**`	`tests`
`Dockerfile`, `docker-compose.yml`	`docker`

Benefits:

Auto-categorizes PRs by the area of code changed
Easy to filter PRs by component (e.g., "show me all frontend PRs")
Helps reviewers quickly identify what expertise is needed

3. `.github/release.yml`

Purpose: Configures GitHub's auto-generated release notes to group PRs by category.

Category	Labels
🚨 Breaking Changes	`breaking`
✨ New Features	`enhancement`
🐛 Bug Fixes	`fix`, `bug`
📝 Documentation	`documentation`
🛠 Maintenance	`chore`, `refactor`, `style`, `performance`, `build`
✅ Tests	`test`

Benefits:

Auto-generated changelogs when you create a release
Users can quickly see what's new, fixed, or breaking
Professional release notes with zero manual effort

4. `.github/changes-filter.yaml`

Purpose: Configuration for dorny/paths-filter action - defines path groups for conditional CI triggers.

Benefits:

Run only relevant CI jobs based on what files changed
Example: Skip frontend tests if only backend files changed
Saves CI minutes and speeds up PR feedback

Workflow Files

5. `.github/workflows/pr-checks.yml`

Purpose: Validates PR titles follow Conventional Commits using amannn/action-semantic-pull-request@v5.

Allowed prefixes: feat:, fix:, docs:, style:, refactor:, perf:, test:, build:, ci:, chore:, revert:

Benefits:

Consistent PR titles across all contributors
Enables automated changelog generation
Clear communication of what each PR does at a glance
Blocks PRs with vague titles like "fix stuff" or "updates"

6. `.github/workflows/conventional-labels.yml`

Purpose: Two-part validation + labeling:

Validates PR title follows Conventional Commits
Validates PR description (min 10 chars, no placeholders)
Auto-labels PR based on title prefix (feat: → enhancement, fix: → bug, etc.)

Benefits:

Ensures PRs have meaningful descriptions
Auto-applies labels that feed into release notes
Reduces manual labeling work for maintainers

7. `.github/workflows/labeler.yml`

Purpose: Auto-labels PRs based on which files were changed (uses .github/labeler.yml config).

Benefits:

PRs automatically tagged with frontend, backend, docker, etc.
Easy to filter and assign reviewers by expertise area
No manual labeling needed

8. `.github/workflows/add-labels.yml`

Purpose: Manages the lgtm (Looks Good To Me) label based on review status:

Approved → Adds lgtm label
Changes Requested → Removes lgtm label

Benefits:

Visual indicator of PR approval status
Can be used as a merge requirement
Easy to see which PRs are ready to merge

9. `.github/workflows/community-label.yml`

Purpose: Auto-adds community label to PRs from external contributors (non-members, non-collaborators).

Benefits:

Identify community contributions for recognition
Track external contributions for reporting
Prioritize community PRs for timely reviews

10. `.github/workflows/auto-delete-branch.yml`

Purpose: Automatically deletes feature branches after PRs are merged.

Benefits:

Keeps repository clean (no stale branches)
Reduces clutter in branch list
Protects main, master, develop from accidental deletion

Copilot

Pull request overview

This PR introduces a comprehensive GitHub Actions automation suite to standardize and streamline pull request workflows. It adds automated labeling, conventional commit validation, review management, and release note generation to improve development velocity and code quality.

Key Changes:

Automated PR labeling based on file changes and conventional commit types
PR title and description validation with conventional commit enforcement
Review-based label management (LGTM) and community contributor identification
Automatic branch cleanup after merge

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
`.github/workflows/pr-checks.yml`	Validates PR titles follow conventional commits format using semantic-pull-request action
`.github/workflows/labeler.yml`	Automatically applies labels based on changed file paths
`.github/workflows/conventional-labels.yml`	Multi-stage validation: PR title, description, and automatic labeling by commit type
`.github/workflows/community-label.yml`	Tags PRs from external contributors with 'community' label
`.github/workflows/auto-delete-branch.yml`	Cleans up merged feature branches automatically
`.github/workflows/add-labels.yml`	Manages 'lgtm' label based on review approvals/changes requested
`.github/semantic.yml`	Configuration for semantic PR validation bot
`.github/release.yml`	Defines changelog categories for auto-generated release notes
`.github/labeler.yml`	Maps file path patterns to labels (frontend, backend, docs, etc.)
`.github/changes-filter.yaml`	Defines path filters for conditional CI triggering with dorny/paths-filter

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2025-12-23T19:07:09Z

+              console.log(`Skipping deletion of protected branch: ${branchName}`);
+              return;
+            }
+


The workflow only checks if the branch name is in the protected branches list, but it doesn't verify if the branch is from a fork. For PRs from forks, the branch deletion will fail because the workflow doesn't have permission to delete branches in the fork repository. Consider adding a check to skip deletion for fork PRs: if (context.payload.pull_request.head.repo.fork) { console.log('Skipping deletion for fork PR'); return; }

Suggested change

// Skip deletion for branches coming from forked repositories

const headRepo = context.payload.pull_request.head.repo;

if (headRepo && headRepo.fork) {

console.log('Skipping deletion for branch from forked repository');

return;

}

Good suggestion

Co-authored-by: Copilot <[email protected]>

…into pr-workflows

Co-authored-by: Copilot <[email protected]>

msmygit

I've left comments to pin down at major.minor versions, otherwise, LGTM

Co-authored-by: Madhavan <[email protected]>

Co-authored-by: Copilot <[email protected]>

aimurphy

lgtm

mpawlow

@edwinjosechittilappilly

Code Review 1

See PR comments: (a) to (m)

mpawlow · 2026-02-24T17:59:56Z

+            console.log('PR description validation passed!');
+
+  label:
+    needs: [validate-pr-title]


(j) [Minor] Label job not gated on description validation

If validate-pr-description fails, the label is still applied (i.e. PRs with bad descriptions still get auto-labeled).

Note: This is a Minor severity issue. Please feel free to ignore or optionally implement

mpawlow · 2026-02-24T18:11:04Z

+    steps:
+      - name: Validate PR title follows Conventional Commits
+        id: validate
+        uses: Namchee/[email protected]


(k) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

For workflows using pull_request_target (which runs with elevated base-repo permissions), actions should ideally be pinned to commit SHAs rather than tags to prevent supply-chain attacks:

e.g.

# Before (tag): - uses: bcoe/conventional-release-labels@v1 # After (SHA-pinned): - uses: bcoe/conventional-release-labels@7b0c7d4b6c5b1e8a5c3c6d3e1b1a4f4b8a7e5c1d # v1.0.0

This is a best practice

Same issue for bcoe/conventional-release-labels@v1

Same issue for actions/github-script@v8.

Note: This is a Minor severity issue. Please feel free to ignore or optionally implement

mpawlow · 2026-02-24T18:11:54Z

+    steps:
+      - name: Add community label
+        if: github.event.pull_request.author_association != 'MEMBER' && github.event.pull_request.author_association != 'OWNER' && github.event.pull_request.author_association != 'COLLABORATOR'
+        uses: actions/[email protected]


(l) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

For workflows using pull_request_target (which runs with elevated base-repo permissions), actions should ideally be pinned to commit SHAs rather than tags to prevent supply-chain attacks:

Note: This is a Minor severity issue. Please feel free to ignore or optionally implement

mpawlow · 2026-02-24T18:12:11Z

+      issues: write
+    steps:
+      - name: Manage LGTM Review Label
+        uses: actions/[email protected]


(m) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

For workflows using pull_request_target (which runs with elevated base-repo permissions), actions should ideally be pinned to commit SHAs rather than tags to prevent supply-chain attacks:

Note: This is a Minor severity issue. Please feel free to ignore or optionally implement

Add guards so PR validation jobs only run for pull_request_target events. The validate-pr-title and validate-pr-description jobs now include `if: github.event_name == 'pull_request_target'`, and the Label PR job's condition was updated to `if: github.event_name == 'pull_request_target' && github.event.pull_request.user.type != 'Bot'`. This prevents duplicate or unintended runs on standard pull_request events and preserves the existing check to skip bot-created PRs.

Delete .github/semantic.yml and remove the validate-pr-title job from the conventional-labels workflow. Update the label job to depend on validate-pr-description instead of the removed title validation. This simplifies the PR validation flow by removing enforced Conventional Commit title checks and associated config.

Switch the workflow trigger from pull_request to pull_request_target so the action has write permissions to add labels on PRs from forks. Added inline note warning not to check out or run untrusted PR code because this workflow runs with base-repo permissions. Trigger types remain [opened, synchronize].

Update .github/workflows/add-labels.yml to listen for pull_request_review 'dismissed' events and treat a 'dismissed' review like 'changes_requested'. This ensures the LGTM label is removed when a review is dismissed and keeps PR labels in sync with review state.

Wrap the GitHub Actions github-script in a try/catch to make label management more resilient. Adds explicit handling for 404 (log and skip) and calls core.setFailed for other errors, plus clearer logs when adding/removing the 'lgtm' label. Changes are in .github/workflows/add-labels.yml to improve error reporting and avoid noisy failures when labels are concurrently removed.

Delete the redundant `description` fields for changelog categories in .github/release.yml to simplify the config. This relies on titles and labels for category identification and should not affect release generation behavior. Also trims a trailing blank line.

Replace floating action versions with exact commit SHAs in workflow files to ensure reproducible runs. Updated .github/workflows/community-label.yml and conventional-labels.yml to use a specific actions/github-script SHA (kept version comment), replaced bcoe/conventional-release-labels@v1 with its SHA, and updated actions/labeler reference in .github/workflows/labeler.yml to a specific SHA.

mpawlow

Code Review 2

✅ Approved / LGTM
Everything looks good with the latest changes on the PR with the exception of the following issue: (a) [Major] merge_group event breaks two jobs
- See: https://github.com/langflow-ai/openrag/pull/727/changes#r2848389754
- See PR comment (2a)

Co-authored-by: Copilot <[email protected]>

pr workflows

bbed53f

github-actions Bot added the ci ⬛ CI/CD, build, and infrastructure issues label Dec 23, 2025

edwinjosechittilappilly marked this pull request as ready for review December 23, 2025 19:03

Copilot AI review requested due to automatic review settings December 23, 2025 19:03

Copilot started reviewing on behalf of edwinjosechittilappilly December 23, 2025 19:04 View session

Copilot AI reviewed Dec 23, 2025

View reviewed changes

edwinjosechittilappilly and others added 3 commits December 23, 2025 13:09

Update .github/workflows/community-label.yml

0bc023a

Co-authored-by: Copilot <[email protected]>

Update conventional-labels.yml

eb396f3

Merge branch 'pr-workflows' of https://github.com/langflow-ai/openrag …

b450f00

…into pr-workflows

edwinjosechittilappilly requested review from phact and pushkala-datastax December 23, 2025 19:28

edwinjosechittilappilly and others added 2 commits December 23, 2025 13:33

Update .github/changes-filter.yaml

f1b18c8

Co-authored-by: Copilot <[email protected]>

Update .github/changes-filter.yaml

54815fd

Co-authored-by: Copilot <[email protected]>

msmygit reviewed Dec 24, 2025

View reviewed changes

edwinjosechittilappilly and others added 10 commits December 26, 2025 10:58

Update .github/workflows/labeler.yml

de5c905

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/community-label.yml

f4fb6d5

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/pr-checks.yml

fd8b846

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/conventional-labels.yml

ca989fe

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/conventional-labels.yml

ae88880

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/add-labels.yml

88b7b56

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/auto-delete-branch.yml

31285d0

Co-authored-by: Madhavan <[email protected]>

Update .github/workflows/conventional-labels.yml

981cfae

Co-authored-by: Madhavan <[email protected]>

Merge branch 'main' into pr-workflows

05f1108

Merge branch 'main' into pr-workflows

5f8bc30

edwinjosechittilappilly requested a review from msmygit January 22, 2026 05:00

Update .github/workflows/conventional-labels.yml

4b43960

Co-authored-by: Copilot <[email protected]>

edwinjosechittilappilly requested review from lucaseduoli and mpawlow February 13, 2026 17:07

edwinjosechittilappilly added 2 commits February 13, 2026 11:09

Merge branch 'main' into pr-workflows

f7f64f4

Update action-semantic-pull-request to version 6.1.1

3edb887

Update labeler action to version 6.0.1

93fee47

edwinjosechittilappilly requested a review from aimurphy February 24, 2026 16:22

Merge branch 'main' into pr-workflows

4b3f4fb

aimurphy reviewed Feb 24, 2026

View reviewed changes

mpawlow requested changes Feb 24, 2026

View reviewed changes

edwinjosechittilappilly added 9 commits February 24, 2026 12:17

Update changes-filter.yaml

9c9b251

Merge branch 'main' into pr-workflows

a7586ed

edwinjosechittilappilly requested a review from mpawlow February 24, 2026 19:02

mpawlow approved these changes Feb 24, 2026

View reviewed changes

Comment thread .github/workflows/conventional-labels.yml Outdated

Apply suggestion from @Copilot

2529190

Co-authored-by: Copilot <[email protected]>

edwinjosechittilappilly merged commit d4fa07e into main Feb 24, 2026
4 checks passed

+            // Skip deletion for branches coming from forked repositories
+            const headRepo = context.payload.pull_request.head.repo;
+            if (headRepo && headRepo.fork) {
+              console.log('Skipping deletion for branch from forked repository');
+              return;
+            }

Uh oh!

Conversation

edwinjosechittilappilly commented Dec 23, 2025

Configuration Files

1. .github/semantic.yml

2. .github/labeler.yml

3. .github/release.yml

4. .github/changes-filter.yaml

Workflow Files

5. .github/workflows/pr-checks.yml

6. .github/workflows/conventional-labels.yml

7. .github/workflows/labeler.yml

8. .github/workflows/add-labels.yml

9. .github/workflows/community-label.yml

10. .github/workflows/auto-delete-branch.yml

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Copilot AI Dec 23, 2025

Choose a reason for hiding this comment

Uh oh!

edwinjosechittilappilly Dec 23, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

msmygit left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

aimurphy left a comment

Choose a reason for hiding this comment

Uh oh!

mpawlow left a comment

Choose a reason for hiding this comment

Code Review 1

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mpawlow Feb 24, 2026

Choose a reason for hiding this comment

(j) [Minor] Label job not gated on description validation

Uh oh!

mpawlow Feb 24, 2026

Choose a reason for hiding this comment

(k) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

Uh oh!

mpawlow Feb 24, 2026

Choose a reason for hiding this comment

(l) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

Uh oh!

mpawlow Feb 24, 2026

Choose a reason for hiding this comment

(m) [Minor] Security: Actions should be pinned to a commit SHA rather than a tag

Uh oh!

mpawlow left a comment

Choose a reason for hiding this comment

Code Review 2

Uh oh!

Uh oh!

Uh oh!

1. `.github/semantic.yml`

2. `.github/labeler.yml`

3. `.github/release.yml`

4. `.github/changes-filter.yaml`

5. `.github/workflows/pr-checks.yml`

6. `.github/workflows/conventional-labels.yml`

7. `.github/workflows/labeler.yml`

8. `.github/workflows/add-labels.yml`

9. `.github/workflows/community-label.yml`

10. `.github/workflows/auto-delete-branch.yml`