Skip to content

Sync main into 1.8.x#10737

Merged
abnegate merged 14 commits into1.8.xfrom
main
Nov 4, 2025
Merged

Sync main into 1.8.x#10737
abnegate merged 14 commits into1.8.xfrom
main

Conversation

@stnguyen90
Copy link
Copy Markdown
Contributor

What does this PR do?

Update 1.8.x with what's in main.

Test Plan

Automated tests should pass

Related PRs and Issues

None

Checklist

  • Have you read the Contributing Guidelines on issues?
  • If the PR includes a change to an API's metadata (desc, label, params, etc.), does it also include updated API specs and example docs?

@github-advanced-security
Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Oct 30, 2025

📝 Walkthrough

Walkthrough

This PR adds infrastructure and configuration to support automated issue management workflows. Changes include: adding a gitattributes rule to treat generated lock workflow files as generated content with "ours" merge strategy; introducing comprehensive label mappings in .github/labeler.yml for Appwrite components across auth, realtime, storage, databases, functions, and other service areas; creating an AI moderator GitHub Actions workflow triggered on issue and PR events; creating an auto-label issue workflow to automatically tag newly opened issues; adding issue triage documentation describing an agentic triage process; and updating the README announcement text from "Timestamp Overrides" to "Transactions API for Appwrite Databases."

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

  • .github/labeler.yml: Review the regex patterns and label mappings for accuracy and completeness across all Appwrite components
  • .github/workflows/ai-moderator.yml and .github/workflows/auto-label-issue.yml: Verify workflow triggers, permissions, and action configurations are correct
  • .github/workflows/issue-triage.md: Confirm the documented triage process aligns with intended automation behavior

Possibly related PRs

Suggested reviewers

  • Meldiron
  • eldadfux
  • EVDOG4LIFE

Pre-merge checks and finishing touches

✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title 'Sync main into 1.8.x' directly and clearly describes the primary objective of the pull request: syncing changes from the main branch into the 1.8.x branch.
Description check ✅ Passed The description explains the purpose (update 1.8.x with what's in main), provides a test plan, and indicates checklist items have been reviewed.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch main

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

Security Scan Results for PR

Docker Image Scan Results

Package Version Vulnerability Severity
binutils 2.44-r2 CVE-2025-5244 HIGH
binutils 2.44-r2 CVE-2025-5245 HIGH
libxml2 2.13.8-r0 CVE-2025-49794 CRITICAL
libxml2 2.13.8-r0 CVE-2025-49796 CRITICAL
libxml2 2.13.8-r0 CVE-2025-49795 HIGH
libxml2 2.13.8-r0 CVE-2025-6021 HIGH
pcre2 10.43-r1 CVE-2025-58050 CRITICAL
golang.org/x/crypto v0.31.0 CVE-2025-22869 HIGH
golang.org/x/oauth2 v0.24.0 CVE-2025-22868 HIGH
stdlib 1.22.10 CVE-2025-47907 HIGH
stdlib 1.22.10 CVE-2025-47912 HIGH
stdlib 1.22.10 CVE-2025-58183 HIGH
stdlib 1.22.10 CVE-2025-58185 HIGH
stdlib 1.22.10 CVE-2025-58186 HIGH
stdlib 1.22.10 CVE-2025-58187 HIGH
stdlib 1.22.10 CVE-2025-58188 HIGH
stdlib 1.22.10 CVE-2025-58189 HIGH
stdlib 1.22.10 CVE-2025-61723 HIGH
stdlib 1.22.10 CVE-2025-61724 HIGH
stdlib 1.22.10 CVE-2025-61725 HIGH

Source Code Scan Results

🎉 No vulnerabilities found!

@github-actions
Copy link
Copy Markdown

✨ Benchmark results

  • Requests per second: 1,074
  • Requests with 200 status code: 193,416
  • P99 latency: 0.179130673

⚡ Benchmark Comparison

Metric This PR Latest version
RPS 1,074 1,072
200 193,416 193,076
P99 0.179130673 0.193249739

@stnguyen90 stnguyen90 marked this pull request as ready for review November 3, 2025 18:17
@stnguyen90 stnguyen90 requested a review from abnegate November 3, 2025 18:18
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (1)
.github/workflows/issue-triage.md (1)

24-78: Triage documentation is comprehensive; minor grammar refinements recommended.

The documentation is well-structured and clearly guides the agentic workflow through analysis, labeling, and commenting. Three minor grammar/style issues are flagged by static analysis (all valid per English grammar conventions):

  • Line 28: Capitalize "GitHub" (currently "github")
  • Line 32: Use hyphen for compound adjective: "one-sentence analysis" (currently "one sentence")
  • Line 78: Capitalize proper noun: "GitHub Markdown" (currently "GitHub markdown")

Apply these diffs to address the grammar and style issues:

-You're a triage assistant for GitHub issues. Your task is to analyze issue #${{ github.event.issue.number }} and perform some initial triage tasks related to that issue.
+You're a triage assistant for GitHub issues. Your task is to analyze issue #${{ github.event.issue.number }} and perform some initial triage tasks related to that issue.
-2. Retrieve the issue content using the `get_issue` tool. If the issue is obviously spam, or generated by bot, or something else that is not an actual issue to be worked on, then add an issue comment to the issue with a one sentence analysis and exit the workflow.
+2. Retrieve the issue content using the `get_issue` tool. If the issue is obviously spam, or generated by bot, or something else that is not an actual issue to be worked on, then add an issue comment to the issue with a one-sentence analysis and exit the workflow.
-   - Use collapsed-by-default sections in the GitHub markdown to keep the comment tidy. Collapse all sections except the short main summary at the top.
+   - Use collapsed-by-default sections in the GitHub Markdown to keep the comment tidy. Collapse all sections except the short main summary at the top.
📜 Review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6072675 and a869ae3.

📒 Files selected for processing (6)
  • .gitattributes (1 hunks)
  • .github/labeler.yml (1 hunks)
  • .github/workflows/ai-moderator.yml (1 hunks)
  • .github/workflows/auto-label-issue.yml (1 hunks)
  • .github/workflows/issue-triage.md (1 hunks)
  • README.md (1 hunks)
🧰 Additional context used
🪛 LanguageTool
.github/workflows/issue-triage.md

[uncategorized] ~28-~28: The official name of this software platform is spelled with a capital “H”.
Context: ...ues. Your task is to analyze issue #${{ github.event.issue.number }} and perform some ...

(GITHUB)


[grammar] ~32-~32: Use a hyphen to join words.
Context: ...an issue comment to the issue with a one sentence analysis and exit the workflow....

(QB_NEW_EN_HYPHEN)


[uncategorized] ~78-~78: Did you mean the formatting language “Markdown” (= proper noun)?
Context: ...apsed-by-default sections in the GitHub markdown to keep the comment tidy. Collapse all ...

(MARKDOWN_NNP)

🔇 Additional comments (5)
.gitattributes (1)

9-9: Well-structured merge strategy for generated workflow files.

The new .lock.yml rule appropriately marks generated workflow artifacts and uses the ours merge strategy to prevent merge conflicts on auto-generated content. This is a sensible safeguard for syncing between branches.

README.md (1)

1-1: Announcement update is clear and properly formatted.

The link to the Transactions API announcement is valid and the text is accurate. The change aligns with the broader documentation refresh.

.github/labeler.yml (1)

1-83: Label mappings are comprehensive and well-organized.

The configuration covers all major Appwrite product areas with relevant keyword patterns. Commented sections (docs, platform, cloud) provide room for future expansion. The regex patterns are specific enough to avoid over-labeling while capturing relevant issue keywords.

.github/workflows/issue-triage.md (1)

1-23: Agentic triage workflow is well-configured with sensible defaults.

The YAML frontmatter is valid and the configuration choices are reasonable: the 30-day expiration window prevents stale automation, read-all permissions are safe, and the 5-label cap prevents over-labeling. The integration with githubnext/agentics is a solid pattern for AI-assisted workflows.

.github/workflows/ai-moderator.yml (1)

1-32: AI Moderator workflow is well-configured with appropriate permissions and current version pinning.

The workflow covers all relevant event types for content moderation (issues, comments, PRs, discussions) and permissions are properly scoped. The v1 tag is current and points to v1.1.4 (Oct 26, 2025), so using github/ai-moderator@v1 will use the latest v1.x release. This approach follows the recommended pattern and is actively maintained.

Comment on lines +1 to +21
name: Auto Label Issue

on:
issues:
types: [opened]

permissions:
issues: write
contents: read

jobs:
labeler:
runs-on: ubuntu-latest
steps:
- name: Issue Labeler
uses: github/[email protected]
with:
configuration-path: .github/labeler.yml
enable-versioned-regex: false
include-title: 1
env:
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Auto-label workflow is properly scoped and configured.

The workflow correctly triggers only on newly opened issues, uses minimal permissions, and properly references the labeler configuration. Disabling versioned-regex and including the title in analysis are sensible defaults.

Please verify that github/[email protected] is the appropriate version. Check if there are newer versions available and whether v3.4 is still actively maintained:


🌐 Web query:

What is the latest version of github/issue-labeler action and what changed in recent versions?

💡 Result:

Latest published release: actions/labeler v6.0.1 (tag v6.0.1, published Sep 4). [1]

Recent notable changes

  • v6.0.1 — minor update: upgraded publish-action from 0.2.2 → 0.4.0. [1]
  • v6.0.0 — added workflow to publish immutable action package; upgraded Node.js runtime to v24 (runners must be v2.327.1+); multiple dependency upgrades. [1]
  • v5.0.0 — breaking redesign of the labeler config (expanded match object, branch-name matching added), fixed sync-labels input bug, default dot input set to true, runtime moved to Node.js 20. [1]

Source: actions/labeler releases page. [1]

References
[1] actions/labeler — Releases (GitHub). (github.com)

Citations:


Critical issue: Action reference appears incorrect and severely outdated.

The workflow references github/[email protected], but the official GitHub Action is actions/labeler at version v6.0.1 (latest released Sep 4). The namespace github/issue-labeler does not match any current official action, and v3.4 is significantly behind current versions.

Additionally, v5.0.0 introduced breaking changes to the labeler config format, so any upgrade requires careful config review.

Actions required:

  1. Verify the correct action namespace and verify if github/issue-labeler still exists or is maintained
  2. Update to actions/labeler with an appropriate version, likely v6 or v5 depending on config compatibility
  3. Ensure .github/labeler.yml configuration matches the target version's expected format
🤖 Prompt for AI Agents
.github/workflows/auto-label-issue.yml lines 1-21: the workflow references an
incorrect/outdated action namespace `github/[email protected]`; replace the
action with the official `actions/labeler` at a compatible version (e.g.,
actions/labeler@v6 or @v5 depending on config), update the uses line
accordingly, and then validate and adjust .github/labeler.yml to the chosen
version's config schema (v5+ has breaking schema changes) before committing.

@abnegate abnegate merged commit 79573b1 into 1.8.x Nov 4, 2025
352 of 354 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants