.github/dependabot.yml

@@ -15,7 +15,7 @@ updates:
       - dependency-name: '@types/node'
         versions: ['17', '18']
       - dependency-name: 'typescript'
-        versions: ['>=4.9']
+        versions: ['>=4.10', '>=5.0']
       # disable Jest updates until the new testing architecture is in place
       - dependency-name: '@types/jest'
         versions: ['>=28']
@@ -39,7 +39,19 @@ updates:
     # Disable rebasing for pull requests, as having several open pull requests all get simultaneously rebased gets
     # noisy from a notification standpoint
     rebase-strategy: 'disabled'
+    ignore:
+      # These values should match the values ignored by Dependabot for the project's root `package.json` (above)
+      - dependency-name: '@types/node'
+        versions: ['17', '18']
   - package-ecosystem: 'github-actions'
     directory: '/'
     schedule:
       interval: 'daily'
+  - package-ecosystem: 'npm' # See documentation for possible values
+    directory: './.github/workflows/actions/auto-request-reviews'
+    schedule:
+      interval: 'daily'
+    open-pull-requests-limit: 50
+    # Disable rebasing for pull requests, as having several open pull requests all get simultaneously rebased gets
+    # noisy from a notification standpoint
+    rebase-strategy: 'disabled'

.github/workflows/actions/auto-request-reviews/action.yml

@@ -0,0 +1,19 @@
+name: Auto Request Review
+
+inputs:
+  org:
+    description: 'The Github organization name (i.e "ionic-team")'
+    required: true
+  team:
+    description: 'The Github team name (i.e. "stencil") that will be used to assign individual reviewers when the PR author is within the specified organization.'
+    required: true
+  orgReadToken:
+    description: 'The GitHub token with permissions for executing readonly API calls to fetch organization members'
+    required: true
+  writeToken:
+    description: 'The GitHub token with permissions for executing a write action on PRs'
+    required: true
+
+runs:
+  using: 'node16'
+  main: 'index.js'

.github/workflows/actions/auto-request-reviews/main.ts

@@ -0,0 +1,77 @@
+import { getInput, setFailed } from '@actions/core';
+import { context, getOctokit } from '@actions/github';
+
+async function run() {
+  const writeToken = getInput('writeToken');
+  if (writeToken == null || !writeToken.length) {
+    throw new Error('No Github write token provided');
+  }
+
+  const readToken = getInput('orgReadToken');
+  if (readToken == null || !readToken.length) {
+    throw new Error('No Github read token provided');
+  }
+
+  const organization = getInput('org');
+  if (organization == null || !organization.length) {
+    throw new Error('No Github organization specified');
+  }
+
+  const teamSlug = getInput('team');
+  if (teamSlug == null || !teamSlug.length) {
+    throw new Error('No Github team specified');
+  }
+
+  const writeOctokit = getOctokit(writeToken);
+  const readOctokit = getOctokit(readToken);
+
+  // PR author
+  const username = context.payload.pull_request?.user.login as string;
+
+  console.log(`${username} opened PR #${context.payload.number}`);
+
+  // Check if the PR author is a member of the organization
+  console.log(`Checking if ${username} is a member of ${organization}`);
+  const { status } = await readOctokit.rest.orgs.checkMembershipForUser({
+    org: organization,
+    username,
+  });
+
+  // 204 means that both the requester (the action's authorization) and the PR author
+  // are org members, so we should assign the PR to team members accordingly
+  // Need to cast to a number because the octokit type generics assume this will only return a 302 which is not true
+  if ((status as number) === 204) {
+    console.log(`${username} is an organization member`);
+    console.log(`Fetching ${teamSlug} team members`);
+
+    const { data: teamMembers } = await readOctokit.rest.teams.listMembersInOrg({
+      org: organization,
+      // Adding the team will only return the members in the org
+      // that are also in the team
+      team_slug: teamSlug,
+    });
+    const memberUsernames = teamMembers.map((ref) => ref.login);
+
+    console.log(`Found ${memberUsernames.length} team members: ${memberUsernames.join(', ')}`);
+
+    const reviewers = memberUsernames.filter((ref) => ref !== username);
+
+    console.log(`Requesting review from: ${reviewers.join(', ')}`);
+
+    await writeOctokit.rest.pulls.requestReviewers({
+      owner: context.repo.owner,
+      repo: context.repo.repo,
+      pull_number: context.payload.number,
+      reviewers,
+    });
+
+    console.log('Success!');
+  } else {
+    console.log(`${username} is not an organization member. No review requests required.`);
+  }
+}
+
+run().catch((error) => {
+  console.error(error);
+  setFailed(error.message);
+});

.github/workflows/actions/auto-request-reviews/package.json

@@ -0,0 +1,16 @@
+{
+  "private": true,
+  "scripts": {
+    "build": "ncc build ./main.ts -o . -m"
+  },
+  "devDependencies": {
+    "@actions/core": "^1.9.1",
+    "@actions/github": "^5.0.3",
+    "@vercel/ncc": "^0.36.0",
+    "typescript": "4.9.4"
+  },
+  "volta": {
+    "node": "12.22.7",
+    "npm": "6.14.15"
+  }
+}

.github/workflows/actions/auto-request-reviews/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "strict": true,
+    "allowSyntheticDefaultImports": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "lib": ["dom", "es2019"],
+    "module": "commonjs",
+    "moduleResolution": "node",
+    "outDir": "build/",
+    "pretty": true,
+    "target": "es2015",
+    "incremental": false,
+    "useUnknownInCatchVariables": true
+  },
+  "include": ["**/*.ts"]
+}