feat: implement issue #217 — Compliance: non-stub-auto-rebase.yml

[don-petry]

Closes #217

Implemented by dev-lead agent. Please review.

[coderabbitai]

Warning

Review limit reached

@don-petry, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 42 minutes and 47 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 7d6c8164-4094-4312-8229-fd61cc19a4e2

📥 Commits

Reviewing files that changed from the base of the PR and between 5204344 and 594d480.

📒 Files selected for processing (2)

• .github/workflows/auto-rebase.yml
• .gitignore

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dev-lead/issue-217-20260526-1719

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[gemini-code-assist]

Code Review

This pull request adds a duplicate '.dev-lead/' entry to the .gitignore file. The reviewer correctly pointed out that this entry is already defined multiple times in the file, making the addition redundant.

[gemini-code-assist]

The entry '.dev-lead/' is already defined multiple times in this file. Adding another duplicate is redundant.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 594d480753

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Pin reusable workflow to immutable commit SHA

Switching the reusable workflow reference from a pinned commit to @v1 makes this CI job non-deterministic and introduces supply-chain risk, because tags can be moved and the exact logic executed by auto-rebase can change without any PR in this repository. In practice, a later tag update (or compromise) could silently alter branch-update behavior or permissions usage for every main push, so this should stay pinned to a specific commit SHA and be intentionally bumped when upgrading.

Useful? React with 👍 / 👎.

[sonarqubecloud]

Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Brings the repository into compliance with issue #217 by updating the centralized auto-rebase.yml workflow stub to use the org-standard pinned reusable workflow ref.

Changes:

• Update .github/workflows/auto-rebase.yml to reference petry-projects/.github reusable workflow at @v1 (org standard).
• Add an additional .dev-lead/ ignore entry in .gitignore (though the entry is already duplicated multiple times).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/auto-rebase.yml	Pins the reusable workflow reference to @v1 to satisfy compliance requirement #217.
.gitignore	Adds another .dev-lead/ ignore line (introduces further duplication).

[don-petry]

Auto-rebase failed — merge conflict — this branch has conflicts with main that must be resolved.

dev-lead will attempt to resolve this automatically. If it cannot, a follow-up comment will explain what needs manual attention.

To resolve manually instead:

git fetch origin
git merge origin/main
# resolve conflicts, then:
git add .
git commit
git push

[don-petry]

Auto-rebase failed — merge conflict — this branch has conflicts with main that must be resolved.

dev-lead will attempt to resolve this automatically. If it cannot, a follow-up comment will explain what needs manual attention.

To resolve manually instead:

git fetch origin
git merge origin/main
# resolve conflicts, then:
git add .
git commit
git push

[don-petry]

Auto-rebase failed — merge conflict — this branch has conflicts with main that must be resolved.

dev-lead will attempt to resolve this automatically. If it cannot, a follow-up comment will explain what needs manual attention.

To resolve manually instead:

git fetch origin
git merge origin/main
# resolve conflicts, then:
git add .
git commit
git push

[don-petry]

Closing due to merge conflict that cannot be auto-rebased. Re-implementing from fresh main via dev-lead.