modelcontextprotocol/actions
Watch
1
0
Fork
You've already forked actions
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Mirror of https://github.com/modelcontextprotocol/actions — GitHub Actions relevant to the management of MCP repositories.
50 commits 1 branch 0 tags 148 KiB
  • JavaScript 100%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Claude d37cc0a6dc
 slash-commands: add hardened Dependabot auto-approve mode 
Opt-in via new 'dependabot-auto-approve' input (mode 'dev-patch-minor').
When enabled, Dependabot PRs are evaluated on pull_request_target
opened/reopened and on check_suite completed for dependabot/ branches,
and approved + labeled + auto-merged only when ALL gates hold:

1. Author is the real dependabot[bot] app (login AND user id 49699333)
2. Same-repo head on a dependabot/ branch (never forks)
3. Every commit signature-verified and dependabot-authored
4. Changed files a subset of 'dependabot-allowed-files' (exact paths)
5. Every updated dependency direct:development with semver-patch/minor
   update per Dependabot's commit metadata (missing metadata = no approve)
6. CI green on head SHA: all check runs success/neutral/skipped with at
   least one non-skipped check, combined status success if any exist
7. PR open, non-draft, conflict-free, not on hold

Every gate fails closed, logging the reason to the action log only.
Approvals use a distinct marker (slash-commands-dependabot-auto) that
push invalidation now dismisses alongside /lgtm approvals; after a human
push, gate 3 fails permanently so only /lgtm can accept the PR.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019ygNtiNcAaqTRnQjHCDkVS
2026-07-06 17:38:34 +00:00
cloudflare-pages-preview cloudflare-pages-preview: add comment-mode=repost, extract scripts 2026-03-11 23:24:51 +00:00
hugo-build Add hugo-build composite action 2026-03-11 20:36:43 +00:00
slash-commands slash-commands: add hardened Dependabot auto-approve mode 2026-07-06 17:38:34 +00:00
.gitignore Initial commit 2026-03-10 16:25:10 +00:00
CLAUDE.md Simplify secrets table: just the action input name, not full YAML 2026-03-10 16:49:12 +00:00
LICENSE Initial commit 2026-03-10 16:25:10 +00:00
README.md slash-commands: remove commit-status gate, document GitHub App flow 2026-03-26 23:21:16 +00:00

README.md

actions

GitHub Actions relevant to the management of MCP repositories.

Actions

Action Description
cloudflare-pages-preview/deploy Deploy a static HTML directory to Cloudflare Pages under a per-PR branch alias, inject noindex headers, and post a sticky PR comment with preview URLs
cloudflare-pages-preview/cleanup Delete Cloudflare Pages deployments for a closed PR's branch alias and update the sticky comment
hugo-build Install Go + Hugo extended and build a Hugo site (preview or production mode)
slash-commands Handle /lgtm (core-maintainers only: label + approve + auto-merge), /hold, and /stageblog PR slash commands; invalidate approval on push