Skip to content

Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jasonvarga merged 9 commits into from
May 28, 2026
Merged

Add workflows #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
1ed01ca
concurrency stays on the local one
jasonvarga May 27, 2026
b592ffc
migrate from cms
jasonvarga May 27, 2026
db2b5ff
move to the right place
jasonvarga May 28, 2026
4fa8672
run on this repo too
jasonvarga May 28, 2026
9841b45
these got dropped accidentally
jasonvarga May 28, 2026
00552bf
fix indentation
jasonvarga May 28, 2026
9f7bfb6
concurrency doesnt stay - zizmor wants it.
jasonvarga May 28, 2026
22a9a40
permission comments were dropped accidentally
jasonvarga May 28, 2026
2791bb5
drop pr permission. action is not configured for prs anyway.
jasonvarga May 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
65 changes: 65 additions & 0 deletions .github/workflows/pr-title.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
workflow_call:

permissions: {}

jobs:
pr-title: # zizmor: ignore[anonymous-definition]
runs-on: ubuntu-latest
permissions: {}
steps:
- name: Validate PR title matches target branch
env:
PR_TITLE: ${{ github.event.pull_request.title }}
BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
run: |
# Validates PR title against target branch
# Returns error message if invalid, empty string if valid
validate_pr_title() {
local target_branch="$1"
local pr_title="$2"
local default_branch="$3"

# Check if target branch is a version branch (e.g., 5.x, 4.x)
if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
local version="${BASH_REMATCH[1]}"
if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
return
fi

# Check if target branch is master (next major version)
elif [[ $target_branch == "master" ]]; then
local current_version="${default_branch//\.x/}"
local next_version=$((current_version + 1))
if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
return
fi

# For other branches, just enforce that there's a version prefix
else
if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
echo "PR title must start with a version prefix like '[5.x] '"
return
fi
fi

echo ""
}

echo "PR Title: $PR_TITLE"
echo "Base Branch: $BASE_BRANCH"
echo "Default Branch: $DEFAULT_BRANCH"

ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

if [[ -n $ERROR ]]; then
echo $ERROR
exit 1
fi

echo "PR title validation passed"
74 changes: 74 additions & 0 deletions .github/workflows/pull-requests.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
workflow_call:

permissions: {}

jobs:
uneditable: # zizmor: ignore[anonymous-definition]
runs-on: ubuntu-latest
permissions:
pull-requests: write # post comment and close PRs that don't allow maintainer edits
steps:
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
script: |
const repo = context.repo.repo;

const query = `
query($number: Int!) {
repository(owner: "statamic", name: "${repo}") {
pullRequest(number: $number) {
headRepositoryOwner {
login
}
maintainerCanModify
state
}
}
}
`;

const pullNumber = context.issue.number;
const variables = { number: pullNumber };

try {
console.log(`Check for maintainer edit access ...`);
const result = await github.graphql(query, variables);
console.log(JSON.stringify(result, null, 2));
const pullRequest = result.repository.pullRequest;

if (pullRequest.headRepositoryOwner.login === 'statamic') {
console.log('PR owned by statamic');
return;
}

if (pullRequest.state !== 'OPEN') {
console.log('PR has already been closed or merged');
return;
}

if (!pullRequest.maintainerCanModify) {
console.log('PR not owned by statamic and does not have maintainer edits enabled');

await github.rest.issues.createComment({
issue_number: pullNumber,
owner: 'statamic',
repo,
body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
});

await github.rest.pulls.update({
pull_number: pullNumber,
owner: 'statamic',
repo,
state: 'closed'
});
}
} catch(e) {
console.log(e);
}
25 changes: 25 additions & 0 deletions .github/workflows/stale.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
workflow_call:

permissions: {}

jobs:
stale: # zizmor: ignore[anonymous-definition]
runs-on: ubuntu-latest
permissions:
issues: write # mark issues stale and close them
steps:
- uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
days-before-stale: 60
days-before-close: 7
ascending: true
only-labels: 'needs more info'
stale-issue-label: stale
stale-issue-message: >
This issue has not had recent activity and has been marked as stale — by me, a robot.
Simply reply to keep it open and send me away. If you do nothing, I will close it in
a week. I have no feelings, so whatever you do is fine by me.
3 changes: 3 additions & 0 deletions workflows/zizmor.yml → .github/workflows/zizmor.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
workflow_call:
push:
branches: ["**"]
pull_request:

permissions: {}

Expand Down
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
Add workflows by jasonvarga · Pull Request #2 · statamic/.github · GitHub
Skip to content
Add workflows#2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

jasonvarga
merged 9 commits into

from

May 28, 2026
 Merged


Add workflows
#2
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


9 commits


Select commit
Hold shift + click to select a range
1ed01ca

concurrency stays on the local one


jasonvarga May 27, 2026
b592ffc

migrate from cms


jasonvarga May 27, 2026
db2b5ff

move to the right place


jasonvarga May 28, 2026
4fa8672

run on this repo too


jasonvarga May 28, 2026
9841b45

these got dropped accidentally


jasonvarga May 28, 2026
00552bf

fix indentation


jasonvarga May 28, 2026
9f7bfb6

concurrency doesnt stay - zizmor wants it.


jasonvarga May 28, 2026
22a9a40

permission comments were dropped accidentally


jasonvarga May 28, 2026
2791bb5

drop pr permission. action is not configured for prs anyway.


jasonvarga May 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


65 changes: 65 additions & 0 deletions
.github/workflows/pr-title.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
name: Pull Request Title

on:
 workflow_call:

permissions: {}

jobs:
 pr-title: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions: {}
 steps:
 - name: Validate PR title matches target branch
 env:
 PR_TITLE: ${{ github.event.pull_request.title }}
 BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
 DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 run: |
 # Validates PR title against target branch
 # Returns error message if invalid, empty string if valid
 validate_pr_title() {
 local target_branch="$1"
 local pr_title="$2"
 local default_branch="$3"

 # Check if target branch is a version branch (e.g., 5.x, 4.x)
 if [[ $target_branch =~ ^([0-9]+)\.x$ ]]; then
 local version="${BASH_REMATCH[1]}"
 if [[ ! $pr_title =~ ^\[$version\.x\][[:space:]] ]]; then
 echo "PR targeting '$target_branch' must have title starting with '[$version.x] '"
 return
 fi

 # Check if target branch is master (next major version)
 elif [[ $target_branch == "master" ]]; then
 local current_version="${default_branch//\.x/}"
 local next_version=$((current_version + 1))
 if [[ ! $pr_title =~ ^\[$next_version\.x\][[:space:]] ]]; then
 echo "PR targeting 'master' must have title starting with '[$next_version.x] '"
 return
 fi

 # For other branches, just enforce that there's a version prefix
 else
 if [[ ! $pr_title =~ ^\[[0-9]+\.x\][[:space:]] ]]; then
 echo "PR title must start with a version prefix like '[5.x] '"
 return
 fi
 fi

 echo ""
 }

 echo "PR Title: $PR_TITLE"
 echo "Base Branch: $BASE_BRANCH"
 echo "Default Branch: $DEFAULT_BRANCH"

 ERROR=$(validate_pr_title "$BASE_BRANCH" "$PR_TITLE" "$DEFAULT_BRANCH")

 if [[ -n $ERROR ]]; then
 echo $ERROR
 exit 1
 fi

 echo "PR title validation passed"

74 changes: 74 additions & 0 deletions
.github/workflows/pull-requests.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
name: Pull Requests

# Credit: https://github.com/github/docs/blob/main/.github/workflows/notify-when-maintainers-cannot-edit.yaml
# https://github.com/laravel/.github/blob/main/.github/workflows/pull-requests.yml

on:
 workflow_call:

permissions: {}

jobs:
 uneditable: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 pull-requests: write # post comment and close PRs that don't allow maintainer edits
 steps:
 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
 with:
 script: |
 const repo = context.repo.repo;

 const query = `
 query($number: Int!) {
 repository(owner: "statamic", name: "${repo}") {
 pullRequest(number: $number) {
 headRepositoryOwner {
 login
 }
 maintainerCanModify
 state
 }
 }
 }
 `;

 const pullNumber = context.issue.number;
 const variables = { number: pullNumber };

 try {
 console.log(`Check for maintainer edit access ...`);
 const result = await github.graphql(query, variables);
 console.log(JSON.stringify(result, null, 2));
 const pullRequest = result.repository.pullRequest;

 if (pullRequest.headRepositoryOwner.login === 'statamic') {
 console.log('PR owned by statamic');
 return;
 }

 if (pullRequest.state !== 'OPEN') {
 console.log('PR has already been closed or merged');
 return;
 }

 if (!pullRequest.maintainerCanModify) {
 console.log('PR not owned by statamic and does not have maintainer edits enabled');

 await github.rest.issues.createComment({
 issue_number: pullNumber,
 owner: 'statamic',
 repo,
 body: "Thanks for submitting a PR!\n\nIn order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, [see the relevant GitHub documentation](https://docs.github.com/en/github/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork). Additionally, GitHub doesn't allow maintainer permissions from organization accounts. Please resubmit this PR from a personal GitHub account with maintainer permissions enabled."
 });

 await github.rest.pulls.update({
 pull_number: pullNumber,
 owner: 'statamic',
 repo,
 state: 'closed'
 });
 }
 } catch(e) {
 console.log(e);
 }

25 changes: 25 additions & 0 deletions
.github/workflows/stale.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
name: "Close stale issues"

on:
 workflow_call:

permissions: {}

jobs:
 stale: # zizmor: ignore[anonymous-definition]
 runs-on: ubuntu-latest
 permissions:
 issues: write # mark issues stale and close them
 steps:
 - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
 with:
 repo-token: ${{ secrets.GITHUB_TOKEN }}
 days-before-stale: 60
 days-before-close: 7
 ascending: true
 only-labels: 'needs more info'
 stale-issue-label: stale
 stale-issue-message: >
 This issue has not had recent activity and has been marked as stale — by me, a robot.
 Simply reply to keep it open and send me away. If you do nothing, I will close it in
 a week. I have no feelings, so whatever you do is fine by me.

3 changes: 3 additions & 0 deletions
workflows/zizmor.yml → .github/workflows/zizmor.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,9 @@ name: GitHub Actions Security Analysis

on:
 workflow_call:
 push:
 branches: ["**"]
 pull_request:

permissions: {}

Expand Down