Sync main to beta after #39

[bharvey88]

Version: 26.7.7.1 (unchanged - workflow files only)

What does this implement/fix?

Syncs main back into beta after #39 merged. Brings the workflow consolidation from #40 (which went directly to main) into beta so the branches don't drift:

• Consolidated CI, weekly, and autoassign into shared reusable workflows
• CI matrix limited to ESPHome stable and beta
• dependabot config update

No firmware changes.

Types of changes

• Bugfix (fixed change that fixes an issue)
• New feature (thanks!)
• Breaking change (repair/feature that breaks existing functionality)
• Dependency Update - Does not publish
• Other - Does not publish
• Website of github readme file update - Does not publish
• Github workflows - Does not publish

Checklist / Checklijst:

• The code change has been tested and works locally
• The code change has not yet been tested

If user-visible functionality or configuration variables are added/modified:

• Added/updated documentation for the web page

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated automated dependency checks to run less frequently.
  • Moved issue and pull request auto-assignment to a shared workflow, with safer handling for forked pull requests.
  • Streamlined CI and weekly firmware builds through shared workflows, focusing builds on the currently supported configurations and versions.

[coderabbitai]

Walkthrough

This PR updates the dependabot schedule interval and migrates three GitHub Actions workflows (autoassign, ci, weekly) to call reusable workflows from ApolloAutomation/Workflows, adjusting triggers, permissions, and ESPHome build version matrices (excluding dev, keeping stable/beta).

Changes

CI/CD Workflow Migration

Layer / File(s)	Summary
Dependabot schedule update .github/dependabot.yml	Changes github-actions update interval from daily to monthly with revised comments.
Autoassign workflow migration .github/workflows/autoassign.yml	Switches trigger to pull_request/issues opened, sets top-level permissions, and replaces the inline auto-assign action with a reusable workflow call guarded against forked PRs.
CI workflow migration .github/workflows/ci.yml	Removes id-token permission and replaces the inline matrix build with a reusable esphome-ci workflow call building two YAML files across stable/beta only.
Weekly workflow migration .github/workflows/weekly.yml	Adds explicit read permission and replaces the inline build matrix with a reusable esphome-ci workflow call, dropping the dev version.

Estimated code review effort: 2 (Simple) | ~10 minutes

Sequence Diagram(s)

sequenceDiagram
  participant GitHub
  participant AutoassignWorkflow as autoassign.yml
  participant ReusableAutoassign as Workflows/autoassign.yml

  GitHub->>AutoassignWorkflow: issue or PR opened
  AutoassignWorkflow->>AutoassignWorkflow: verify not a fork PR
  AutoassignWorkflow->>ReusableAutoassign: call with assignees, num-of-assignees
  ReusableAutoassign-->>GitHub: assign issue/PR

Loading

Possibly related PRs

• ApolloAutomation/CAST-1#4: Introduces the dependabot configuration whose schedule interval is further tuned in this PR.
• ApolloAutomation/CAST-1#25: Also modifies ESPHome version inputs used in the CI/weekly build workflows.
• ApolloAutomation/CAST-1#27: Also changes which ESPHome version(s) are used in the build workflow configuration.

Poem

A rabbit hops through YAML fields so neat,
Trading daily hops for a monthly beat 🥕
Reusable workflows, lean and bright,
Forks kept out, stable and beta take flight,
Hooray for tidy pipelines, sleep well tonight! 🐇✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is relevant and accurately indicates this branch sync into beta, though it does not mention the specific workflow and Dependabot updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

.github/workflows/autoassign.yml (1)

17-20: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win

Pin the reusable workflows to immutable refs. .github/workflows/autoassign.yml, .github/workflows/ci.yml, and .github/workflows/weekly.yml all call ApolloAutomation/Workflows at @main; pinning those to a tag or commit SHA will make CI/CD reproducible and auditable. The reusable workflow only declares inputs (assignees, num-of-assignees), so no secrets: stanza is needed here.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/autoassign.yml around lines 17 - 20, The reusable workflow
invocation in the autoassign workflow is pinned to a moving branch ref, which
should be changed to an immutable tag or commit SHA for reproducible and
auditable runs. Update the workflow call that uses
ApolloAutomation/Workflows/.github/workflows/autoassign.yml in the autoassign
workflow to reference a fixed version, and keep only the declared inputs
(assignees and num-of-assignees) since no secrets stanza is required.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In @.github/workflows/autoassign.yml:
- Around line 17-20: The reusable workflow invocation in the autoassign workflow
is pinned to a moving branch ref, which should be changed to an immutable tag or
commit SHA for reproducible and auditable runs. Update the workflow call that
uses ApolloAutomation/Workflows/.github/workflows/autoassign.yml in the
autoassign workflow to reference a fixed version, and keep only the declared
inputs (assignees and num-of-assignees) since no secrets stanza is required.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 465e21f1-b7a5-4554-b7b5-b2ca74dde28c

📥 Commits

Reviewing files that changed from the base of the PR and between ad0b307 and 3f52f2e.

📒 Files selected for processing (4)

• .github/dependabot.yml
• .github/workflows/autoassign.yml
• .github/workflows/ci.yml
• .github/workflows/weekly.yml