essential gh actions

.github/workflows/auto-release.yml

@@ -0,0 +1,35 @@
+name: Auto release on merge
+
+on:
+  push:
+    branches: [master, main]
+    paths-ignore:
+      - .github/**
+      - "**/*.md"
+      - .gitignore
+      - .pre-commit-config.yaml
+      - .tflint.hcl
+      - LICENSE
+      - renovate.json
+      - examples/**
+      - scripts/**
+      - tests/**
+
+jobs:
+  auto-release:
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - id: release
+        uses: rymndhng/release-on-push-action@master
+        with:
+          bump_version_scheme: patch
+          tag_prefix: ""
+
+      - name: Dispatch to blueprints
+        run: |
+          curl -X POST https://api.github.com/repos/dfds/infrastructure-blueprints/dispatches \
+          -H 'Accept: application/vnd.github.everest-preview+json' \
+          -u ${{ secrets.AUTH_TOKEN }} \
+          --data '{"event_type": "trigger-workflow", "client_payload": { "release_tag": "${{ steps.release.outputs.tag_name }}" }}'

.github/workflows/block-on-hold-prs.yml

@@ -0,0 +1,10 @@
+name: Block on-hold PRs
+
+on:
+  pull_request:
+    branches: [ master, main ]
+    types: [ opened, labeled, unlabeled, synchronize ]
+
+jobs:
+  shared:
+    uses: dfds/shared-workflows/.github/workflows/automation-on-hold-prs.yml@master

.github/workflows/enforce-labels.yml

@@ -0,0 +1,14 @@
+name: Enforce PR labels
+
+on:
+  pull_request:
+    types: [labeled, unlabeled, opened, edited, synchronize]
+    branches: [main]
+jobs:
+  enforce-label:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: yogevbd/enforce-label-action@2.2.2
+      with:
+        REQUIRED_LABELS_ANY: "release:minor,release:major,release:patch,norelease"
+        REQUIRED_LABELS_ANY_DESCRIPTION: "Select at least one label ['release:minor','release:major','release:patch', 'norelease']"

.github/workflows/housekeeping.yml

@@ -0,0 +1,15 @@
+name: Housekeeping
+
+on:
+  schedule:
+    - cron: "0 6 * * 1"
+
+jobs:
+  shared:
+    uses: dfds/shared-workflows/.github/workflows/automation-housekeeping.yml@master
+    secrets: inherit
+    with:
+      delete_head_branch: true
+      squash_merge: true
+      branch_protection: true
+      status_checks: false