Sync main into beta; converge CI on shared reusable workflows

.github/dependabot.yml

@@ -1,17 +1,15 @@
-# To get started with Dependabot version updates, you'll need to specify which
- # package ecosystems to update and where the package manifests are located.
- # Please see the documentation for all configuration options:
- # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
- version: 2
- updates:
-   - package-ecosystem: "github-actions"
-     directory: "/"
-     schedule:
-       interval: "daily"
-     commit-message:
-       prefix: "chore(ci): "
-     groups:
-       github-actions:
-         patterns:
-           - "*"
+# Action version pins live in ApolloAutomation/Workflows (reusable workflows
+# referenced @main), so this config normally has nothing to update. It stays
+# as a safety net in case a version-pinned action is added here later.
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    commit-message:
+      prefix: "chore(ci): "
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/autoassign.yml

@@ -1,22 +1,21 @@
 name: Auto Assign
-# pull_request_target (not pull_request) so assignment works on
-# fork-submitted PRs; fork pull_request runs get a read-only token.
-# Safe because this workflow never checks out or executes PR code.
+
+# pull_request_target (not pull_request) so auto-assign works on fork PRs too:
+# forks get a read-only token on pull_request and cannot be assigned. Safe here
+# because this only assigns a user and never checks out or runs PR code.
 on:
   issues:
     types: [opened]
   pull_request_target:
     types: [opened]
+
+permissions:
+  issues: write
+  pull-requests: write
+
 jobs:
-  run:
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-    steps:
-    - name: 'Auto-assign issue'
-      uses: pozil/auto-assign-issue@v2
-      with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          assignees: bharvey88
-          numOfAssignee: 1
+  auto-assign:
+    uses: ApolloAutomation/Workflows/.github/workflows/autoassign.yml@main
+    with:
+      assignees: bharvey88
+      num-of-assignees: 1

.github/workflows/ci.yml

@@ -1,29 +1,17 @@
 name: CI
+
 on:
   pull_request:
 
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   ci:
-    name: Building ${{ matrix.file }} / ESPHome ${{ matrix.esphome-version }}
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        file:
-          - Integrations/ESPHome/MSR-1.yaml
-          - Integrations/ESPHome/MSR-1_BLE.yaml
-          - Integrations/ESPHome/MSR-1_Factory.yaml
-        esphome-version:
-          - stable
-          - beta
-          - dev
-    steps:
-      - name: Checkout source code
-        uses: actions/checkout@v6.0.2
-      - name: Build ESPHome firmware to verify configuration
-        uses: esphome/build-action@v7
-        with:
-          yaml-file: ${{ matrix.file }}
+    name: CI
+    uses: ApolloAutomation/Workflows/.github/workflows/esphome-ci.yml@main
+    with:
+      yaml-files: |
+        Integrations/ESPHome/MSR-1.yaml
+        Integrations/ESPHome/MSR-1_BLE.yaml
+        Integrations/ESPHome/MSR-1_Factory.yaml