9 Commits

Author SHA1 Message Date
Rohit Yanamadala 00759548aa fix: resolve zizmor security findings in GitHub Actions workflows
Merge https://github.com/google/adk-python/pull/6601

This PR resolves 58 security and workflow linting findings identified by zizmor across 13 GitHub Actions workflow files.

PiperOrigin-RevId: 962236543
2026-08-10 10:35:55 -07:00
George Weale 2eca8b11ce fix(ci): mark imported PRs as merged even if already closed
Co-authored-by: George Weale <gweale@google.com>
PiperOrigin-RevId: 955418614
2026-07-28 12:57:07 -07:00
Milen Kovachev 3cbcefce9f chore: add missing Apache 2.0 license headers
Merge https://github.com/google/adk-python/pull/6155

**Please ensure you have read the [contribution guide](https://github.com/google/adk-python/blob/main/CONTRIBUTING.md) before creating a pull request.**

### Link to Issue or Description of Change

**1. Link to an existing issue (if applicable):**
N/A

**2. Or, if no issue exists, describe the change:**

**Problem:**
The repository is missing Apache 2.0 license headers across 155 files. This is required by Google OSPO.

**Solution:**
Prepended the standard Apache 2.0 open-source license header to all flagged files. The copyright year was dynamically assigned based on each file's first commit year in git history.

### Testing Plan

_Please describe the tests that you ran to verify your changes. This is required for all PRs that are not small documentation or typo fixes._

**Unit Tests:**

- [ ] I have added or updated unit tests for my change.
- [x] All unit tests pass locally.

_Please include a summary of passed `pytest` results._
N/A - This PR only adds comments (license headers) to the top of files and contains zero functional code changes. No new tests are needed, and existing tests should pass as-is.

**Manual End-to-End (E2E) Tests:**
N/A - No functional code was changed.

### Checklist

- [x] I have read the [CONTRIBUTING.md](https://github.com/google/adk-python/blob/main/CONTRIBUTING.md) document.
- [x] I have performed a self-review of my own code.
- [ ] I have commented my code, particularly in hard-to-understand areas.
- [ ] I have added tests that prove my fix is effective or that my feature works.
- [x] New and existing unit tests pass locally with my changes.
- [ ] I have manually tested my changes end-to-end.
- [ ] Any dependent changes have been merged and published in downstream modules.

### Additional context

Co-authored-by: Shangjie Chen <deanchen@google.com>
COPYBARA_INTEGRATE_REVIEW=https://github.com/google/adk-python/pull/6155 from milenvk:fix-missing-licenses d2a264b9a812fd997daf975ec37996e6b4b7a042
PiperOrigin-RevId: 936165783
2026-06-22 11:37:57 -07:00
Xuan Yang 6639cfa1e6 ci: Refine Copybara PR detection in GitHub workflow
Co-authored-by: Xuan Yang <xygoogle@google.com>
PiperOrigin-RevId: 934514697
2026-06-18 13:12:36 -07:00
Wu Jiayang 90bd38fb13 fix(ci): add repository check to prevent workflows from running on forks
Merge https://github.com/google/adk-python/pull/5391

## Summary

- Add `if: github.repository == 'google/adk-python'` guard to 3 workflows that lack this protection: v2-sync, issue-monitor, and copybara-pr-handler
- These workflows use secrets unavailable on forks (RELEASE_PAT, ADK_TRIAGE_AGENT, GOOGLE_API_KEY), causing daily failures on forks

## Context

Other scheduled/repo-specific workflows (triage.yml, stale-bot.yml, upload-adk-docs-to-vertex-ai-search.yml) already have this guard. These 3 were missing it, causing errors on forks every day.

## Testing Plan

- Verified that the added condition matches the existing pattern used in triage.yml, stale-bot.yml, and upload-adk-docs-to-vertex-ai-search.yml
- On forks, the job will be skipped (same behavior as the already-protected workflows)
- On google/adk-python, the workflows will continue to run as before since the condition evaluates to true

Co-authored-by: George Weale <gweale@google.com>
COPYBARA_INTEGRATE_REVIEW=https://github.com/google/adk-python/pull/5391 from Wu-Jiayang:fix/workflow-fork-protection 6601a67cd1b74b2d50820edd7944b4ab1d080466
PiperOrigin-RevId: 931242443
2026-06-12 11:18:31 -07:00
Bo Yang ce9011c103 feat(skills): Automate PR triage and CLA verification
Introduce the adk-pr-triage skill and its supporting triage_pr.py helper
script to guide AI coding assistants through conducting rigorous and
automated triage of GitHub pull requests.

The workflow script handles compliance verification, validates that the
contributor's Google CLA signature status check run is SUCCESS, fetches
remote branches, and automates PR updates via server-side rebase before local checkout.

Provides an interactive 'Local Review' option that integrates branch checkout,
preserves original PR commit metadata, and triggers /adk-review for rigorous
quality control before squashing and pushing changes to Gerrit.

Change-Id: If311b90b185636f4f737aa04a3c50a4a460b94db
2026-05-29 11:41:42 -07:00
Xuan Yang ecb759cc16 ci: Support bot-authored commits in PR handler
Ensure both types of Copybara PR commits are correctly identified and parsed by checking author email, headers, and updated merge regex.

Change-Id: Ic0cc19f67a3db4637fa597702393a11802b3f9aa
2026-05-22 13:21:52 -07:00
Giorgio Boa 9d331abb4e ci: bump action scripts versions
Merge https://github.com/google/adk-python/pull/3638

Thanks for this great project 👏
This PR updates the GitHub actions dependencies to the latest version.

### Checklist

- [X] I have read the [CONTRIBUTING.md](https://github.com/google/adk-python/blob/main/CONTRIBUTING.md) document.
- [X] I have performed a self-review of my own code.

Co-authored-by: Hangfei Lin <hangfei@google.com>
COPYBARA_INTEGRATE_REVIEW=https://github.com/google/adk-python/pull/3638 from gioboa:ci/actions-versions f7d6f3b5233e8cb135c8af88d5b6e0ead8382055
PiperOrigin-RevId: 835343177
2025-11-21 13:39:46 -08:00
Wei Sun (Jack) 610e219a9f ci: Fixes the copybara-pr-handler.yml file location, it should be under workflow folder
Co-authored-by: Wei Sun (Jack) <weisun@google.com>
PiperOrigin-RevId: 826143689
2025-10-30 12:37:56 -07:00