chore: update GitHub Actions workflows for improved CI/CD process

Author: gheorghitahurmuz

.github/workflows/cd.yml

@@ -2,7 +2,8 @@ name: CD
 
 on:
   workflow_run:
-    workflows: ["Core CI"]
+    workflows:
+      - CI
     types:
       - completed
 

.github/workflows/ci.yml

@@ -1,18 +1,20 @@
-name: Core CI
+name: CI
 
 on:
-  workflow_dispatch: {}
   push:
     branches:
       - main
-  pull_request:
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
     branches:
       - main
 
 
 jobs:
   commit-lint:
-    if: ${{ github.event_name == 'pull_request' }}
+    if: ${{ github.event_name == 'pull_request_target' }}
     uses: ./.github/workflows/commitlint.yml
   lint:
     uses: ./.github/workflows/lint.yml

.github/workflows/commitlint.yml

@@ -1,26 +1,40 @@
 name: Commit Lint
 
 on:
-  workflow_call:
+  workflow_call
 
 jobs:
-  commit-lint:
+  commitlint:
     runs-on: ubuntu-latest
+
     steps:
-      - name: Checkout
-        uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0
 
-      - name: Lint commits
-        uses: wagoid/commitlint-github-action@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 22
 
-      - name: Block fixup commits
-        if: ${{ github.event_name != 'merge_group' }}
-        uses: 13rac1/block-fixup-merge-action@v2.0.0
+      - name: Install Git
+        run: |
+          if ! command -v git &> /dev/null; then
+              echo "Git is not installed. Installing..."
+              sudo apt-get update
+              sudo apt-get install -y git
+          else
+              echo "Git is already installed."
+          fi
 
-      - name: Block Merge Commits
-        if: ${{ github.event_name != 'merge_group' }}
-        uses: Morishiri/block-merge-commits-action@v1.0.1
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Install commitlint
+        run: |
+          npm install conventional-changelog-conventionalcommits
+          npm install commitlint@latest
+          npm install @commitlint/config-conventional
+
+      - name: Configure
+        run: |
+          echo "export default { extends: ['@commitlint/config-conventional'] };" > commitlint.config.js
+
+      - name: Validate PR commits with commitlint
+        run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose

.github/workflows/lint.yml

@@ -1,20 +1,12 @@
-name: Reusable Lint Workflow
+name: Lint
 
 on:
-  workflow_call:
-    inputs:
-      should_skip:
-        description: 'Whether to skip the linting step'
-        required: false
-        type: boolean
-        default: false
+  workflow_call
 
 jobs:
   lint:
     name: Lint
-    runs-on: "ubuntu-24.04"
-    if: inputs.should_skip == false
-
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
@@ -30,15 +22,15 @@ jobs:
           uv venv
           uv sync --all-extras
 
-      - name: "Check static types"
+      - name: Check static types
         run: |
           uv run mypy --config-file pyproject.toml .
 
       - name: "Check linting"
         run: |
           uv run ruff check .
 
-      - name: "Check formatting"
+      - name: Check formatting
         run: |
           uv run ruff format --check .
 

.github/workflows/test.yml

@@ -1,4 +1,4 @@
-name: Reusable Test Workflow
+name: Test
 
 on:
   workflow_call:
@@ -9,18 +9,11 @@ on:
         required: true
       UIPATH_CLIENT_SECRET:
         required: true
-    inputs:
-      should_skip:
-          description: 'Whether to skip the linting step'
-          required: false
-          type: boolean
-          default: false
 
 jobs:
   test:
     name: Test
-    runs-on: "ubuntu-24.04"
-    if: inputs.should_skip == false
+    runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
@@ -31,16 +24,15 @@ jobs:
         with:
           python-version-file: ".python-version"
 
-      - name: "Setup venv"
+      - name: Setup venv
         run: |
           uv venv
           uv sync --all-extras
 
-      - name: "Run tests"
+      - name: Run tests
         run: |
           uv run pytest
         env:
           UIPATH_URL: ${{ secrets.UIPATH_URL }}
           UIPATH_CLIENT_ID: ${{ secrets.UIPATH_CLIENT_ID }}
           UIPATH_CLIENT_SECRET: ${{ secrets.UIPATH_CLIENT_SECRET }}
-