From 9de97f4fbd25503f18da17aeb8d2b2c6c2e8aa78 Mon Sep 17 00:00:00 2001
From: Lucas Santana <lucas.diassantana@gmail.com>
Date: Thu, 23 Jul 2026 22:44:28 -0300
Subject: [PATCH 1/3] ci(release): add release-please automation

---
 .github/workflows/release-please.yml | 18 ++++++++++++++++++
 .release-please-manifest.json        |  3 +++
 release-please-config.json           |  8 ++++++++
 3 files changed, 29 insertions(+)
 create mode 100644 .github/workflows/release-please.yml
 create mode 100644 .release-please-manifest.json
 create mode 100644 release-please-config.json

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
new file mode 100644
index 0000000..8460b61
--- /dev/null
+++ b/.github/workflows/release-please.yml
@@ -0,0 +1,18 @@
+name: release-please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4.4.1
+        with:
+          release-type: simple
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
new file mode 100644
index 0000000..d18e944
--- /dev/null
+++ b/.release-please-manifest.json
@@ -0,0 +1,3 @@
+{
+  ".": "2.13.0"
+}
diff --git a/release-please-config.json b/release-please-config.json
new file mode 100644
index 0000000..63bffd4
--- /dev/null
+++ b/release-please-config.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "packages": {
+    ".": {
+      "release-type": "simple"
+    }
+  }
+}

From 7b630906ff000b62b38bbdd745d7100f3ec0126c Mon Sep 17 00:00:00 2001
From: Lucas Santana <lucas.diassantana@gmail.com>
Date: Thu, 23 Jul 2026 22:44:39 -0300
Subject: [PATCH 2/3] ci(github): group dependabot minor/patch bumps and add
 stale-PR workflow

---
 .github/dependabot.yml      | 24 ++++++++++++++++++++++--
 .github/workflows/stale.yml | 20 ++++++++++++++++++++
 2 files changed, 42 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/stale.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d3c8f58..744619c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -19,6 +19,11 @@ updates:
     commit-message:
       prefix: "deps"
       include: "scope"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # H3 hardening: was 'docker' at '/' which only scans Dockerfiles at repo
   # root (none here). Switched to 'docker-compose' ecosystem pointed at the
@@ -39,6 +44,11 @@ updates:
       - "docker"
     commit-message:
       prefix: "deps(docker)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   # Dockerfile in homelab_manager/ (paperless-ngx build context)
   - package-ecosystem: "docker"
@@ -47,7 +57,7 @@ updates:
       interval: "weekly"
       day: "monday"
     target-branch: "release"
-    open-pull-requests-limit: 3
+    open-pull-requests-limit: 5
     reviewers:
       - "LucasSantana-Dev"
     labels:
@@ -55,6 +65,11 @@ updates:
       - "docker"
     commit-message:
       prefix: "deps(docker)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
 
   - package-ecosystem: "github-actions"
     directory: "/"
@@ -62,7 +77,7 @@ updates:
       interval: "weekly"
       day: "monday"
     target-branch: "release"
-    open-pull-requests-limit: 3
+    open-pull-requests-limit: 5
     reviewers:
       - "LucasSantana-Dev"
     labels:
@@ -70,3 +85,8 @@ updates:
       - "github-actions"
     commit-message:
       prefix: "deps(ci)"
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
new file mode 100644
index 0000000..3d8b81c
--- /dev/null
+++ b/.github/workflows/stale.yml
@@ -0,0 +1,20 @@
+name: Stale
+
+on:
+  schedule:
+    - cron: "31 5 * * *"
+  workflow_dispatch:
+
+permissions:
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        with:
+          days-before-issue-stale: -1
+          days-before-issue-close: -1
+          days-before-pr-stale: 30
+          days-before-pr-close: 7

From 178a040249829ea4e8926cb33bd0264168f4113e Mon Sep 17 00:00:00 2001
From: Lucas Santana <lucas.diassantana@gmail.com>
Date: Thu, 23 Jul 2026 22:53:52 -0300
Subject: [PATCH 3/3] ci(release): manifest-mode release-please, issues:write
 for stale (CodeRabbit #395)

---
 .github/workflows/release-please.yml | 4 ++--
 .github/workflows/stale.yml          | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 8460b61..c651579 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -13,6 +13,6 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
+      # Manifest mode: release-type ("simple") lives in release-please-config.json;
+      # setting it here would make the action ignore the config + manifest files.
       - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4.4.1
-        with:
-          release-type: simple
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 3d8b81c..2e359c7 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -6,6 +6,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  issues: write
   pull-requests: write
 
 jobs: