TAN-1034: update pipeline version, call setup script directly instead…

.github/composite/build-image/action.yml

@@ -26,8 +26,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Set up pnpm

.github/composite/build-image/internal/standup-bot/action.yml

@@ -27,8 +27,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Set up OpenJDK 25

.github/composite/notion-checks/action.yml

@@ -26,8 +26,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Run script

.github/composite/pr-description-check/action.yml

@@ -10,7 +10,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
+      with:
+        LINT_CI: true
 
     - name: Run script
       id: run_script

.github/composite/redeploy/action.yml

@@ -26,8 +26,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
         HEADSCALE_ADDRESS: ${{ inputs.HEADSCALE_ADDRESS }}
         HEADSCALE_USER: ${{ inputs.HEADSCALE_USER }}

.github/composite/redeploy/internal/standup-bot/action.yml

@@ -17,8 +17,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Expose GitHub Runtime

.github/composite/test/backend-pre-test/action.yml

@@ -4,7 +4,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
+      with:
+        LINT_CI: true
 
     - name: Set up OpenJDK 25
       uses: actions/setup-java@v5

.github/composite/test/backend-test/action.yml

@@ -14,8 +14,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Set up pnpm

.github/composite/test/frontend-pre-test/action.yml

@@ -10,8 +10,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Set up OpenJDK 25

.github/composite/test/frontend-test/action.yml

@@ -14,8 +14,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
 
     - name: Set up pnpm

.github/composite/validate-db/action.yml

@@ -26,8 +26,9 @@ runs:
   using: "composite"
   steps:
     - name: Setup CI
-      uses: ./.github/composite/setup-ci
+      uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
       with:
+        LINT_CI: true
         SECRETS: ${{ inputs.SECRETS }}
         HEADSCALE_ADDRESS: ${{ inputs.HEADSCALE_ADDRESS }}
         HEADSCALE_USER: ${{ inputs.HEADSCALE_USER }}

.github/scripts/load-slash-commands/index.ts

@@ -1,41 +1,3 @@
 import { COMMANDS } from "load-slash-commands/commands";
-import yargs from "yargs";
-import { hideBin } from "yargs/helpers";
 
-const { getGhaOutput, githubOutput: githubOutputFile } = await yargs(
-  hideBin(process.argv),
-)
-  .option("getGhaOutput", {
-    type: "boolean",
-    describe: "Enable GitHub Actions output",
-    default: false,
-  })
-  .option("githubOutput", {
-    type: "string",
-    describe: "Path to GITHUB_OUTPUT",
-    default: process.env.GITHUB_OUTPUT,
-  })
-  .strict()
-  .parse();
-
-async function main() {
-  const cmds = COMMANDS.filter((c) => c.length > 0).join("\n");
-
-  if (getGhaOutput && githubOutputFile) {
-    console.log("Outputting cmds context...");
-    const w = Bun.file(githubOutputFile).writer();
-    await w.write(`commands<<EOF\n${cmds}\nEOF\n`);
-    await w.flush();
-    await w.end();
-  } else if (getGhaOutput && !githubOutputFile) {
-    throw new Error("GITHUB_OUTPUT or github-output arg is not supplied.");
-  }
-}
-
-main()
-  .then(() => {
-    process.exit();
-  })
-  .catch(() => {
-    process.exit(1);
-  });
+console.log(COMMANDS.join("\n"));

.github/scripts/package.json

@@ -22,7 +22,7 @@
         "@digitalocean/dots": "^1.7.0",
         "@notionhq/client": "^5.7.0",
         "@octokit/rest": "^22.0.1",
-        "@tahminator/pipeline": "^1.0.76",
+        "@tahminator/pipeline": "1.0.90",
         "@types/yargs": "^17.0.35",
         "bun": "^1.3.6",
         "coolify": "https://github.com/tahminator/Coolify-TypeScript-SDK#8e19e18635ea2b095a9c39c574d22eefd938441f",

.github/workflows/ai-command.yml

@@ -59,8 +59,9 @@ jobs:
           ref: ${{ needs.getPRHead.outputs.sha }}
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
 
       - name: Load secrets

.github/workflows/ai-review.yml

@@ -56,8 +56,9 @@ jobs:
           ref: ${{ needs.getPRHead.outputs.sha }}
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
 
       - name: Load secrets

.github/workflows/ci-cd.yml

@@ -97,8 +97,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
 
       - name: Set up pnpm

.github/workflows/copy-command.yml

@@ -63,8 +63,9 @@ jobs:
           ref: ${{ needs.getPRHead.outputs.sha }}
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
           HEADSCALE_ADDRESS: ${{ secrets.HEADSCALE_ADDRESS }}
           HEADSCALE_USER: ${{ secrets.HEADSCALE_USER }}

.github/workflows/e2e.yml

@@ -24,8 +24,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
 
       - name: Set up pnpm

.github/workflows/help-command.yml

@@ -18,8 +18,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
 
       - name: Run script

.github/workflows/migrate-command.yml

@@ -53,8 +53,9 @@ jobs:
           fetch-depth: 0
 
       - name: Setup CI
-        uses: ./.github/composite/setup-ci
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
+          LINT_CI: true
           SECRETS: ${{ toJSON(secrets) }}
           HEADSCALE_ADDRESS: ${{ secrets.HEADSCALE_ADDRESS }}
           HEADSCALE_USER: ${{ secrets.HEADSCALE_USER }}

.github/workflows/slash.yml

@@ -6,74 +6,31 @@ on:
     types: [created]
 
 permissions:
-  contents: write
-  issues: write
-  pull-requests: write
+  contents: read
 
 jobs:
   slashCommandDispatch:
+    if: >-
+      github.event.issue.pull_request &&
+      startsWith(github.event.comment.body, '/')
     runs-on: ubuntu-latest
 
     steps:
-      - name: Get PR head SHA
-        id: pr-head
-        uses: actions/github-script@v8
-        with:
-          result-encoding: string
-          script: |
-            const prId = ${{ github.event.issue.number }};
-            const { data: pr } = await github.rest.pulls.get({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                pull_number: parseInt(prId, 10)
-            });
-             return pr.head.sha;
-
-      - name: Get branch
-        id: branch
-        uses: actions/github-script@v8
-        with:
-          result-encoding: string
-          script: |
-            const prId = ${{ github.event.issue.number }};
-            const { data: pr } = await github.rest.pulls.get({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                pull_number: parseInt(prId, 10)
-            });
-            return pr.head.ref;
-
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          ref: ${{ steps.pr-head.outputs.result }}
-
-      - name: Setup CI
-        uses: ./.github/composite/setup-ci
-        with:
-          SECRETS: ${{ toJSON(secrets) }}
-
-      - name: Run script
-        run: bun run .github/scripts/load-slash-commands --get-gha-output=true
-        id: cmds
+          # stay on trusted default-branch code until the commands action authorizes the commenter
+          ref: ${{ github.event.repository.default_branch }}
+          persist-credentials: false
 
-      - name: Create GitHub App Token
-        uses: actions/create-github-app-token@v3
-        id: app-token
+      - name: Setup pipeline
+        uses: tahminator/pipeline/actions/setup@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
-          app-id: ${{ secrets._GITHUB_APP_APP_ID }}
-          private-key: ${{ secrets._GITHUB_APP_PEM_CONTENT }}
+          LINT_CI: true
 
       - name: Slash Command Dispatch
-        uses: peter-evans/slash-command-dispatch@v4
+        uses: tahminator/pipeline/actions/commands@ff36293f28519b2b90d7e28918a6885d9baf019e # 1.0.90
         with:
-          dispatch-type: workflow
-          token: ${{ steps.app-token.outputs.token }}
-          commands: |
-            ${{ steps.cmds.outputs.commands }}
-          static-args: |
-            repository=${{ github.repository }}
-            comment-id=${{ github.event.comment.id }}
-            prId=${{ github.event.issue.number }}
-            author=${{ github.actor }}
-            ref=${{ steps.branch.outputs.result }}
+          APP_ID: ${{ secrets._GITHUB_APP_APP_ID }}
+          PRIVATE_KEY: ${{ secrets._GITHUB_APP_PEM_CONTENT }}
+          DYNAMIC_COMMANDS_BUN_SCRIPT: .github/scripts/load-slash-commands/index.ts