ci: add actions

.github/workflows/auto-approve.yml

@@ -6,12 +6,11 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
-    if:
-      github.actor == 'taiga-family-bot' && (contains(github.head_ref, 'release/') || contains(github.head_ref,
-      'renovate/'))
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/[email protected]
+      - uses: taiga-family/ci/actions/setup/[email protected]
       - uses: taiga-family/ci/actions/auto/approve/[email protected]
+        if: env.TAIGA_FAMILY_BOT_IS_AUTHOR == 'true'
         with:
           token1: ${{ secrets.GITHUB_TOKEN }}
           token2: ${{ secrets.TAIGA_FAMILY_APPROVE_BOT_PAT }}

.github/workflows/auto-author-assign.yml

@@ -8,11 +8,9 @@ jobs:
     name: PR author as an assignee
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.1.0
       - uses: taiga-family/ci/actions/setup/[email protected]
-
-      - name: Auto assign
+      - uses: toshimaru/[email protected]
         if: env.IS_OWNER_MODE == 'true'
-        uses: toshimaru/[email protected]
         with:
           repo-token: ${{ secrets.TAIGA_FAMILY_BOT_PAT }}

.github/workflows/auto-cleanup-caches.yml

@@ -12,7 +12,7 @@ jobs:
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.1.0
       - uses: taiga-family/ci/actions/auto/[email protected]
         if: github.event_name == 'push'
         with:

.github/workflows/auto-dependency-review.yml

@@ -8,5 +8,5 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
-      - uses: taiga-family/ci/actions/security/dependency-review@1.11.1
+      - uses: actions/checkout@v4.1.0
+      - uses: taiga-family/ci/actions/security/dependency-review@1.20.0

.github/workflows/auto-label.yml

@@ -6,8 +6,9 @@ jobs:
     name: Label when approved
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.1.0
       - uses: taiga-family/ci/actions/setup/[email protected]
       - uses: taiga-family/ci/actions/auto/[email protected]
         with:
+          approvals: 1
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/auto-remove-label.yml

@@ -7,5 +7,5 @@ jobs:
   remove_label:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
-      - uses: taiga-family/ci/actions/auto/remove-label@1.11.1
+      - uses: actions/checkout@v4.1.0
+      - uses: taiga-family/ci/actions/auto/remove-label@1.20.0