memory-journal-mcp 6.1.2 → 6.2.1

package/.github/workflows/ci-health-monitor.md

@@ -1,87 +0,0 @@
----
-description: 'Weekly audit of CI workflows for deprecations, outdated actions, and health issues'
-private: true
-labels: [maintenance, ci-cd]
-
-on:
-  schedule:
-    - cron: '0 14 * * 3' # Every Wednesday at 14:00 UTC
-  workflow_dispatch:
-
-engine:
-  id: copilot
-  model: claude-opus-4-20250514
-
-network:
-  allowed:
-    - defaults
-    - node
-
-permissions: read-all
-
-safe-outputs:
-  create-issue:
-    title-prefix: '[ci-health] '
-    labels: [maintenance, ci-cd]
-    max: 1
-  noop:
-    max: 1
-
-timeout-minutes: 15
-concurrency: ci-health-monitor
----
-
-# CI Health Monitor
-
-You are auditing the CI/CD infrastructure for the **memory-journal-mcp** project. Your job is to check all GitHub Actions workflows for deprecations, outdated action versions, and health issues.
-
-## Important Rules
-
-- **Only report actionable findings.** Don't flag things that are working correctly.
-- **If everything is healthy, report "all clear" via noop.** Do not create empty issues.
-- **Be specific with fix suggestions.** Include the exact file, line, and replacement value.
-
-## Step 1: Audit Workflow Files
-
-List all `.yml` files in `.github/workflows/`. For each workflow file:
-
-1. **Check action versions** — for each `uses:` line, note the action name and version/tag. Check if a newer major or minor version exists by reading the action's releases.
-2. **Check Node.js runtime** — look for `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24` workarounds or actions known to use deprecated Node.js versions (16, 18, 20). Flag any that will break after the June 2026 deadline.
-3. **Check for deprecated features** — `set-output`, `save-state`, `::set-output::` commands, or other deprecated GitHub Actions features.
-4. **Check Dependabot config** — read `dependabot.yml` and verify it covers all ecosystems in use (npm, GitHub Actions, Docker).
-
-## Step 2: Review Recent Workflow Runs
-
-Check recent workflow runs (last 7 days):
-
-1. Any workflows with consistent failures?
-2. Any runs with annotations or warnings?
-3. Any runs that are abnormally slow?
-
-## Step 3: Report
-
-Before creating a new issue, check if an existing open issue with the `[ci-health]` prefix already exists. If so, add a comment to that issue instead of creating a duplicate. Only create a new issue if none exists.
-
-### If issues are found:
-
-Create an issue via safe-output with this structure:
-
-```
-## 🏥 CI Health Report — [DATE]
-
-### 🔴 Critical (blocks before June 2026)
-- [action@version] in [workflow.yml] — needs update to [version] for Node.js 24
-
-### 🟡 Warnings
-- [description of warning/deprecation]
-
-### 🟢 Healthy
-- [list of workflows that passed all checks]
-
-### Suggested Fixes
-1. [exact code change with file + line]
-```
-
-### If everything is healthy:
-
-Use the noop tool with: "✅ CI Health Check — all workflows healthy, no deprecations or issues found."

package/.github/workflows/codeql.yml

@@ -1,41 +0,0 @@
-name: CodeQL
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  schedule:
-    - cron: '23 2 * * 1'
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ['javascript-typescript', 'actions']
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@f0213c31c702f929cf06ddb900ac315d246a8997 # v4.33.0
-        with:
-          languages: ${{ matrix.language }}
-          queries: security-extended,security-and-quality
-
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@f0213c31c702f929cf06ddb900ac315d246a8997 # v4.33.0
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f0213c31c702f929cf06ddb900ac315d246a8997 # v4.33.0
-        with:
-          upload: always

package/.github/workflows/dependabot-auto-merge.yml

@@ -1,42 +0,0 @@
-name: Dependabot auto-merge
-
-on:
-  pull_request:
-    paths:
-      - 'package*.json'
-      - '.github/workflows/dependabot-auto-merge.yml'
-
-permissions:
-  pull-requests: write
-  contents: write
-
-jobs:
-  dependabot:
-    runs-on: ubuntu-latest
-    if: ${{ github.actor == 'dependabot[bot]' }}
-    steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a # v2
-        with:
-          github-token: '${{ secrets.GITHUB_TOKEN }}'
-
-      - name: Enable auto-merge for Dependabot PRs
-        if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }}
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Comment on major version updates
-        if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-major' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: '⚠️ This is a major version update. Please review carefully before merging.'
-            })