project-auto-wizard 0.13.3 → 0.15.0

package/payload/workflows/common/PROJECT-COMMON-AI-PR-SUMMARY.yaml

@@ -53,11 +53,12 @@ jobs:
       - name: Read copilot_ai option from version.yml
         id: copilot_options
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           # scoped to the metadata: -> template: -> options: chain so an
           # unrelated "copilot_ai:" key can never hijack the value
           COPILOT_AI=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?copilot_ai:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
           echo "copilot_ai=$COPILOT_AI" >> $GITHUB_OUTPUT
-          echo "copilot_ai option: $COPILOT_AI"
+          echo "$(m wf_common.copilot_ai_option copilot_ai="$COPILOT_AI")"
 
       - name: Install Copilot CLI
         if: steps.copilot_options.outputs.copilot_ai == 'true'
@@ -74,12 +75,14 @@ jobs:
           COPILOT_AI: ${{ steps.copilot_options.outputs.copilot_ai }}
           GH_TOKEN: ${{ github.token }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           PR_NUMBER=${{ github.event.pull_request.number }}
 
           git fetch origin {{MAIN_BRANCH}}
           git log --pretty=%s "origin/{{MAIN_BRANCH}}..HEAD" > commits.txt
-          # 본문 푸터 BREAKING CHANGE:는 제목 목록 뒤에 한 줄씩 덧붙인다 — 스크립트는 한 줄을
-          # 한 항목으로 읽으므로 본문 전체(%B)를 넣으면 설명 줄까지 변경 항목으로 잡힌다.
+          # Body-footer BREAKING CHANGE: lines are appended after the subject list, one per
+          # line. The script reads each line as one entry, so passing the whole body (%B)
+          # would turn description lines into change entries.
           git log --pretty=%b "origin/{{MAIN_BRANCH}}..HEAD" | grep -E '^BREAKING[ -]CHANGE[[:space:]]*:' >> commits.txt || true
           git diff --stat "origin/{{MAIN_BRANCH}}...HEAD" > _full_diff_stat.txt
           if [ "$(wc -l < _full_diff_stat.txt)" -gt 49 ]; then
@@ -89,10 +92,12 @@ jobs:
           fi
           rm -f _full_diff_stat.txt
 
-          # 헤더에는 이미 발행된 현재 버전이 아니라 이 PR이 병합되면 붙을 예상 버전을 보인다.
-          # 병합 뒤 버전을 올리는 쪽과 같은 규칙: trunk-based는 RELEASE-PUBLISH가 semver_auto면
-          # 커밋으로 승격 폭을 정하고, pr-flow에서 {{MAIN_BRANCH}}로 바로 들어가는 PR은
-          # VERSION-CONTROL 안전망이 patch를 올린다. 예상치라 AI 보조 판정 없이 규칙만 쓴다.
+          # The header shows the version this PR will get once merged, not the version
+          # that is already published. Same rules as whatever bumps the version after the
+          # merge: in trunk-based mode RELEASE-PUBLISH picks the bump size from the commits
+          # when semver_auto is on, and in pr-flow a PR going straight into {{MAIN_BRANCH}}
+          # gets a patch bump from the VERSION-CONTROL safety net. It is only an estimate,
+          # so rules alone are used, without any AI-assisted classification.
           CURRENT_VERSION=$(python3 .github/scripts/version_manager.py get 2>/dev/null | tail -n 1)
           MODE=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?branches:.*?mode:\s*\"?([A-Za-z-]+)", t, re.S); print(m.group(1) if m else "pr-flow")' 2>/dev/null || echo "pr-flow")
           SEMVER_AUTO=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?semver_auto:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
@@ -102,7 +107,7 @@ jobs:
           fi
           VERSION=$(python3 -c 'import sys; sys.path.insert(0, ".github/scripts"); from version_manager import increment_version; print(increment_version(sys.argv[1], sys.argv[2]))' "$CURRENT_VERSION" "${BUMP:-patch}" 2>/dev/null || echo "")
           VERSION=${VERSION:-Unreleased}
-          echo "expected next version: $VERSION (current: ${CURRENT_VERSION:-none}, mode: $MODE, bump: ${BUMP:-patch})"
+          echo "$(m wf_aisum.expected_version version="$VERSION" current_version="${CURRENT_VERSION:-none}" mode="$MODE" bump="${BUMP:-patch}")"
 
           SUMMARY_RESULT=$(python3 .github/scripts/changelog_manager.py ai-summary \
             --commits-file commits.txt \
@@ -111,12 +116,12 @@ jobs:
             --pr-title "$PR_TITLE" \
             --diff-stat-file diff_stat.txt | tail -n 1)
           ENGINE=$(python3 -c 'import json,sys; print(json.loads(sys.argv[1]).get("engine") or "unknown")' "$SUMMARY_RESULT" 2>/dev/null || echo "unknown")
-          # fallback이면 사유(스크립트가 ::warning::으로도 남김)를 engine 줄에 붙인다 — 잡 로그를 열지 않아도 원인이 보이게
+          # On fallback, append the reason (the script also emits it as ::warning::) to the engine line so the cause is visible without opening the job log
           FALLBACK_REASON=$(python3 -c 'import html,json,sys; print(html.escape((json.loads(sys.argv[1]).get("fallback_reason") or "")[:200]))' "$SUMMARY_RESULT" 2>/dev/null || echo "")
           ENGINE_LINE="$ENGINE${FALLBACK_REASON:+ ($FALLBACK_REASON)}"
           echo "engine: $ENGINE_LINE" >> "$GITHUB_STEP_SUMMARY"
 
-          # push마다 댓글이 쌓이지 않도록 이 봇이 남긴 요약 댓글을 표식으로 찾아 최신 내용으로 교체한다
+          # Find this bot's earlier summary comment by its marker and replace it with the latest content so pushes do not pile up comments
           MARKER="<!-- project-auto-wizard:pr-summary -->"
           {
             echo "$MARKER"
@@ -133,25 +138,27 @@ jobs:
             --jq ".[] | select(.user.login == \"github-actions[bot]\" and (.body | startswith(\"$MARKER\"))) | .id" 2>/dev/null | tail -n 1 || true)
           if [ -n "$COMMENT_ID" ]; then
             gh api -X PATCH "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" --input comment_payload.json > /dev/null \
-              || echo "comment update failed — continuing (this workflow never blocks the PR)"
+              || echo "$(m wf_aisum.comment_update_failed)"
           else
             gh api -X POST "repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" --input comment_payload.json > /dev/null \
-              || echo "comment post failed — continuing (this workflow never blocks the PR)"
+              || echo "$(m wf_aisum.comment_post_failed)"
           fi
 
       - name: Link related issue via branch name
         continue-on-error: true
         env:
           GITHUB_TOKEN: ${{ github.token }}
-          # 브랜치명을 run: 스크립트에 직접 ${{ }} 보간하지 않고 env로 전달한다 —
-          # git ref 이름은 $, 백틱, 세미콜론 등을 포함할 수 있어 직접 보간하면
-          # 셸 인젝션 경로가 된다(AUTO-CHANGELOG-CONTROL의 PR_TITLE과 동일한 이유).
+          # Pass the branch name through env instead of interpolating ${{ }} into the run:
+          # script - git ref names can contain $, backticks, semicolons and so on, so direct
+          # interpolation would be a shell-injection path (same reason as PR_TITLE in
+          # AUTO-CHANGELOG-CONTROL).
           HEAD_REF: ${{ github.event.pull_request.head.ref }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           ISSUE_NUM=$(python3 .github/scripts/issue_helper.py extract-branch-issue "$HEAD_REF")
 
           if [ -z "$ISSUE_NUM" ]; then
-            echo "브랜치명에서 이슈 번호를 찾지 못함 — 건너뜀: $HEAD_REF"
+            echo "$(m wf_aisum.no_issue_in_branch ref="$HEAD_REF")"
             exit 0
           fi
 

package/payload/workflows/common/PROJECT-COMMON-AUTO-CHANGELOG-CONTROL.yaml

@@ -69,7 +69,7 @@ permissions:
   copilot-requests: write
 
 env:
-  # 스크립트 import가 .github/scripts/__pycache__를 만들어 봇 커밋에 섞이지 않게 한다
+  # Keep script imports from creating .github/scripts/__pycache__ so it never ends up in bot commits
   PYTHONDONTWRITEBYTECODE: "1"
 
 jobs:
@@ -85,27 +85,40 @@ jobs:
       github.event.pull_request.head.ref == '{{DEVELOP_BRANCH}}'
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: read
     outputs:
       open: ${{ steps.state.outputs.open }}
     steps:
+      # Only the message catalog and language setting are needed for the log wording
+      - name: Checkout message catalog
+        uses: actions/checkout@v7
+        with:
+          sparse-checkout: |
+            .github/scripts/messages.py
+            version.yml
+          sparse-checkout-cone-mode: false
+
       - name: Read the current PR state
         id: state
         env:
           GH_TOKEN: ${{ github.token }}
           GH_REPO: ${{ github.repository }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           PR_NUMBER=${{ github.event.pull_request.number }}
-          # 파이프라인 도중 {{DEVELOP_BRANCH}}에 push하면 그 실행은 대기열에서 기다렸다가 이미 병합된
-          # PR을 다시 처리한다 — 빈 요약 댓글, 중복 CHANGELOG 항목, {{DEVELOP_BRANCH}}에만 남는 확정 커밋이 생긴다.
-          # 이벤트 시점이 아니라 지금 상태를 본다. 조회에 실패하면 릴리스를 막지 않고 진행한다.
+          # A push to {{DEVELOP_BRANCH}} mid-pipeline queues a run that later reprocesses the
+          # already-merged PR - an empty summary comment, duplicate CHANGELOG entries and a
+          # confirm commit that lands only on {{DEVELOP_BRANCH}}.
+          # Look at the current state, not the event-time state. If the lookup fails,
+          # do not block the release and carry on.
           STATE=$(gh pr view "$PR_NUMBER" --json state -q .state 2>/dev/null || echo "UNKNOWN")
           if [ "$STATE" = "MERGED" ] || [ "$STATE" = "CLOSED" ]; then
             echo "open=false" >> "$GITHUB_OUTPUT"
-            echo "::notice::PR #$PR_NUMBER is already $STATE — skipping the release pipeline"
+            echo "::notice::$(m wf_changelog.pr_not_open pr_number="$PR_NUMBER" state="$STATE")"
           else
             echo "open=true" >> "$GITHUB_OUTPUT"
-            echo "PR #$PR_NUMBER state: $STATE"
+            echo "$(m wf_changelog.pr_state pr_number="$PR_NUMBER" state="$STATE")"
           fi
 
   changelog-and-merge:
@@ -129,18 +142,20 @@ jobs:
       - name: Read semver_auto option from version.yml
         id: semver_options
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           SEMVER_AUTO=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?semver_auto:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
           echo "semver_auto=$SEMVER_AUTO" >> $GITHUB_OUTPUT
-          echo "semver_auto option: $SEMVER_AUTO"
+          echo "$(m wf_common.semver_auto_option semver_auto="$SEMVER_AUTO")"
 
       - name: Read copilot_ai option from version.yml
         id: copilot_options
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           # scoped to the metadata: -> template: -> options: chain so an
           # unrelated "copilot_ai:" key can never hijack the value
           COPILOT_AI=$(python3 -c 'import re; t=open("version.yml",encoding="utf-8").read(); m=re.search(r"metadata:.*?template:.*?options:.*?copilot_ai:\s*\"?(true|false)", t, re.S); print(m.group(1) if m else "false")' 2>/dev/null || echo "false")
           echo "copilot_ai=$COPILOT_AI" >> $GITHUB_OUTPUT
-          echo "copilot_ai option: $COPILOT_AI"
+          echo "$(m wf_common.copilot_ai_option copilot_ai="$COPILOT_AI")"
 
       - name: Install Copilot CLI
         if: steps.copilot_options.outputs.copilot_ai == 'true'
@@ -150,10 +165,12 @@ jobs:
       - name: Collect commits since last release
         id: collect
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           git fetch origin {{MAIN_BRANCH}}
           git log --pretty=%s "origin/{{MAIN_BRANCH}}..HEAD" > commits.txt
-          # 본문 푸터 BREAKING CHANGE:는 제목 목록 뒤에 한 줄씩 덧붙인다 — 스크립트는 한 줄을
-          # 한 항목으로 읽으므로 본문 전체(%B)를 넣으면 설명 줄까지 변경 항목으로 잡힌다.
+          # Body-footer BREAKING CHANGE: lines are appended after the subject list, one per
+          # line. The script reads each line as one entry, so passing the whole body (%B)
+          # would turn description lines into change entries.
           git log --pretty=%b "origin/{{MAIN_BRANCH}}..HEAD" | grep -E '^BREAKING[ -]CHANGE[[:space:]]*:' >> commits.txt || true
           git diff --stat "origin/{{MAIN_BRANCH}}...HEAD" > _full_diff_stat.txt
           if [ "$(wc -l < _full_diff_stat.txt)" -gt 49 ]; then
@@ -162,7 +179,7 @@ jobs:
             cp _full_diff_stat.txt diff_stat.txt
           fi
           rm -f _full_diff_stat.txt
-          echo "commits to summarize: $(wc -l < commits.txt)"
+          echo "$(m wf_changelog.commits_to_summarize n="$(wc -l < commits.txt)")"
 
       - name: Collect issues merged into {{DEVELOP_BRANCH}}
         continue-on-error: true
@@ -170,6 +187,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           GITHUB_TOKEN: ${{ github.token }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           git log --pretty=%H "origin/{{MAIN_BRANCH}}..HEAD" > commit_shas.txt
 
           gh pr list --state merged --base {{DEVELOP_BRANCH}} \
@@ -177,7 +195,7 @@ jobs:
 
           MERGED_PR_COUNT=$(python3 -c "import json; print(len(json.load(open('merged_prs.json'))))")
           if [ "$MERGED_PR_COUNT" -ge 200 ]; then
-            echo "::warning::gh pr list가 --limit 200에 도달했습니다 — 오래된 병합 PR이 누락됐을 수 있습니다 (조회된 PR: $MERGED_PR_COUNT)"
+            echo "::warning::$(m wf_changelog.pr_list_limit count="$MERGED_PR_COUNT")"
           fi
 
           ISSUE_NUMBERS=$(python3 .github/scripts/changelog_manager.py collect-issue-closes \
@@ -187,7 +205,7 @@ jobs:
           rm -f commit_shas.txt merged_prs.json
 
           if [ -z "$ISSUE_NUMBERS" ]; then
-            echo "이번 릴리스에 연결할 이슈 없음 — 건너뜀"
+            echo "$(m wf_changelog.no_issues)"
             exit 0
           fi
 
@@ -196,7 +214,7 @@ jobs:
             --issue-numbers "$ISSUE_NUMBERS" \
             --replace
 
-          echo "이슈 연결: $ISSUE_NUMBERS"
+          echo "$(m wf_changelog.issues_linked issues="$ISSUE_NUMBERS")"
 
       - name: Confirm release version (bump + sync)
         id: bump
@@ -207,9 +225,12 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
           COPILOT_AI: ${{ steps.copilot_options.outputs.copilot_ai }}
         run: |
-          # 멱등: 이 PR에서 이미 확정한(아직 발행 전) 버전을 다시 올리지 않는다.
-          # HEAD 커밋 메시지만 보면 확정 커밋 위에 커밋이 더 쌓일 때({{DEVELOP_BRANCH}} 추가 push,
-          # {{MAIN_BRANCH}} 역병합) 가드가 풀려 발행되지 않은 버전이 생기므로 버전과 태그로 판정한다.
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
+          # Idempotency: never raise a version this PR already confirmed (not yet published).
+          # Looking only at the HEAD commit message lets the guard slip when more commits
+          # pile on top of the confirm commit (extra {{DEVELOP_BRANCH}} pushes, a
+          # {{MAIN_BRANCH}} back-merge) and an unpublished version appears, so decide by
+          # version and tag instead.
           HEAD_MSG=$(git log -1 --pretty=%s)
           HEAD_VERSION=$(python3 .github/scripts/version_manager.py get | tail -n 1)
           MAIN_VERSION=$(git show "origin/{{MAIN_BRANCH}}:version.yml" 2>/dev/null | grep -m1 '^version:' | sed 's/version:[ \t]*"\{0,1\}\([0-9][0-9.]*\)"\{0,1\}.*/\1/' || true)
@@ -221,30 +242,32 @@ jobs:
           else
             BUMP="patch"
           fi
-          echo "bump level: $BUMP"
+          echo "$(m wf_common.bump_level bump="$BUMP")"
 
           if [ -n "$MAIN_VERSION" ] && [ -n "$HEAD_VERSION" ] && version_gt "$HEAD_VERSION" "$MAIN_VERSION" && ! is_tagged "$HEAD_VERSION"; then
-            # 이미 확정된 버전 — {{MAIN_BRANCH}} 버전 기준으로 다시 계산해 더 높아질 때만(예: 확정 뒤 feat 추가) 올린다.
-            # 버전을 건너뛰지 않고, AI 보조 판정이 재실행마다 달라도 낮아지지 않는다.
+            # Already-confirmed version - recompute from the {{MAIN_BRANCH}} version and raise it
+            # only when the result is higher (e.g. a feat added after confirming).
+            # Versions are never skipped, and they never drop even if an AI-assisted
+            # classification differs between re-runs.
             TARGET=$(python3 -c 'import sys; sys.path.insert(0, ".github/scripts"); from version_manager import increment_version; print(increment_version(sys.argv[1], sys.argv[2]))' "$MAIN_VERSION" "$BUMP")
             if version_gt "$TARGET" "$HEAD_VERSION"; then
               NEW_VERSION=$(python3 .github/scripts/version_manager.py set "$TARGET" | tail -n 1)
-              echo "confirmed version raised: $HEAD_VERSION -> $NEW_VERSION ($BUMP from {{MAIN_BRANCH}} $MAIN_VERSION)"
+              echo "$(m wf_changelog.version_raised head_version="$HEAD_VERSION" new_version="$NEW_VERSION" bump="$BUMP" main_branch="{{MAIN_BRANCH}}" main_version="$MAIN_VERSION")"
             else
               NEW_VERSION="$HEAD_VERSION"
-              echo "version already confirmed and not yet released — reusing $NEW_VERSION ({{MAIN_BRANCH}} is $MAIN_VERSION)"
+              echo "$(m wf_changelog.version_reuse_unreleased new_version="$NEW_VERSION" main_branch="{{MAIN_BRANCH}}" main_version="$MAIN_VERSION")"
             fi
           elif [ -z "$MAIN_VERSION" ] && printf '%s\n' "$HEAD_MSG" | grep -q "^chore(version): confirm v.* \[skip ci\]"; then
-            # {{MAIN_BRANCH}}에 아직 version.yml이 없는 첫 릴리스의 재실행
+            # Re-run of a first release where {{MAIN_BRANCH}} has no version.yml yet
             NEW_VERSION="$HEAD_VERSION"
-            echo "version already confirmed by a previous run — reusing $NEW_VERSION (no re-increment)"
+            echo "$(m wf_changelog.version_reuse_previous new_version="$NEW_VERSION")"
           else
             NEW_VERSION=$(python3 .github/scripts/version_manager.py increment --bump "$BUMP" | tail -n 1)
             python3 .github/scripts/version_manager.py sync
-            echo "release version confirmed: $NEW_VERSION ($BUMP)"
+            echo "$(m wf_changelog.version_confirmed new_version="$NEW_VERSION" bump="$BUMP")"
           fi
           if [ -z "$NEW_VERSION" ]; then
-            echo "version bump failed"
+            echo "$(m wf_common.version_bump_failed)"
             exit 1
           fi
           echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT
@@ -261,6 +284,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
           COPILOT_AI: ${{ steps.copilot_options.outputs.copilot_ai }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           VERSION=$(python3 .github/scripts/version_manager.py get | tail -n 1)
 
           SUMMARY_RESULT=$(python3 .github/scripts/changelog_manager.py ai-summary \
@@ -270,10 +294,10 @@ jobs:
             --pr-title "$PR_TITLE" \
             --diff-stat-file diff_stat.txt | tail -n 1)
           ENGINE=$(python3 -c 'import json,sys; print(json.loads(sys.argv[1]).get("engine") or "unknown")' "$SUMMARY_RESULT" 2>/dev/null || echo "unknown")
-          # fallback이면 사유(스크립트가 ::warning::으로도 남김)를 engine 줄에 붙인다 — 잡 로그를 열지 않아도 원인이 보이게
+          # On fallback, append the reason (the script also emits it as ::warning::) to the engine line so the cause is visible without opening the job log
           FALLBACK_REASON=$(python3 -c 'import html,json,sys; print(html.escape((json.loads(sys.argv[1]).get("fallback_reason") or "")[:200]))' "$SUMMARY_RESULT" 2>/dev/null || echo "")
           ENGINE_LINE="$ENGINE${FALLBACK_REASON:+ ($FALLBACK_REASON)}"
-          echo "summary engine: $ENGINE_LINE"
+          echo "$(m wf_changelog.summary_engine engine_line="$ENGINE_LINE")"
           echo "engine: $ENGINE_LINE" >> "$GITHUB_STEP_SUMMARY"
           echo "engine=$ENGINE" >> $GITHUB_OUTPUT
           echo "fallback_reason=$FALLBACK_REASON" >> $GITHUB_OUTPUT
@@ -288,8 +312,9 @@ jobs:
           FALLBACK_REASON: ${{ steps.summary.outputs.fallback_reason }}
           GH_TOKEN: ${{ github.token }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           PR_NUMBER=${{ github.event.pull_request.number }}
-          # 재실행·재동기화 때 댓글이 쌓이지 않도록 이 봇이 남긴 요약 댓글을 표식으로 찾아 교체한다
+          # Find this bot's earlier summary comment by its marker and replace it so re-runs and re-syncs do not pile up comments
           MARKER="<!-- project-auto-wizard:pr-summary -->"
 
           {
@@ -307,12 +332,12 @@ jobs:
             --jq ".[] | select(.user.login == \"github-actions[bot]\" and (.body | startswith(\"$MARKER\"))) | .id" 2>/dev/null | tail -n 1 || true)
           if [ -n "$COMMENT_ID" ]; then
             gh api -X PATCH "repos/${{ github.repository }}/issues/comments/${COMMENT_ID}" --input comment_payload.json > /dev/null \
-              && echo "summary comment updated (#${COMMENT_ID})" \
-              || echo "comment update failed — continuing (this workflow never blocks the release)"
+              && echo "$(m wf_changelog.comment_updated comment_id="${COMMENT_ID}")" \
+              || echo "$(m wf_changelog.comment_update_failed)"
           else
             gh api -X POST "repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" --input comment_payload.json > /dev/null \
-              && echo "summary comment posted" \
-              || echo "comment post failed — continuing (this workflow never blocks the release)"
+              && echo "$(m wf_changelog.comment_posted)" \
+              || echo "$(m wf_changelog.comment_post_failed)"
           fi
 
           rm -f comment_body.md comment_payload.json
@@ -337,28 +362,30 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           HEAD_BRANCH="${{ github.event.pull_request.head.ref }}"
           VERSION="${{ steps.bump.outputs.new_version }}"
 
           # Working files must not land in the repo
           rm -f pr_body.md summary.md commits.txt diff_stat.txt comment_body.md comment_payload.json commit_shas.txt merged_prs.json
 
-          # "Re-run failed jobs"는 precheck 결과를 재사용한다 — 그사이 PR이 병합·종료됐다면
-          # 확정 커밋을 올리지 않는다 (병합 뒤 {{DEVELOP_BRANCH}}에만 남는 커밋이 된다).
+          # "Re-run failed jobs" reuses the precheck result - if the PR was merged or closed
+          # in the meantime, do not push the confirm commit (it would exist only on
+          # {{DEVELOP_BRANCH}} after the merge).
           PR_STATE=$(gh pr view "${{ github.event.pull_request.number }}" --json state -q .state 2>/dev/null || echo "UNKNOWN")
           if [ "$PR_STATE" = "MERGED" ] || [ "$PR_STATE" = "CLOSED" ]; then
-            echo "::notice::PR is already $PR_STATE — not pushing release docs"
+            echo "::notice::$(m wf_changelog.pr_closed_skip_docs pr_state="$PR_STATE")"
             exit 0
           fi
 
-          # -A는 러너가 만든 임시 파일·캐시까지 사용자 레포에 커밋한다.
-          # 버전 파일은 이미 추적 중이라 -u로 충분하고, 첫 릴리스에 새로 생기는
-          # CHANGELOG만 따로 올린다 (.gitignore에 있으면 건너뛴다).
+          # -A would also commit runner temp files and caches into the user's repo.
+          # Version files are already tracked, so -u is enough; only a CHANGELOG
+          # created by the first release is added separately (skipped if ignored).
           git add -u
           git ls-files -z --others --exclude-standard -- CHANGELOG.json CHANGELOG.md | xargs -0 -r git add --
 
           if git diff --staged --quiet; then
-            echo "no changes to commit"
+            echo "$(m wf_common.no_changes)"
           else
             git commit -m "chore(version): confirm v${VERSION} and update release docs [skip ci]"
 
@@ -369,18 +396,18 @@ jobs:
 
             while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do
               RETRY_COUNT=$((RETRY_COUNT + 1))
-              echo "push attempt $RETRY_COUNT/$MAX_RETRIES..."
+              echo "$(m wf_common.push_attempt retry_count="$RETRY_COUNT" max_retries="$MAX_RETRIES")"
 
               if git push origin HEAD:$HEAD_BRANCH; then
                 PUSH_SUCCESS=true
-                echo "release docs pushed to $HEAD_BRANCH"
+                echo "$(m wf_changelog.docs_pushed head_branch="$HEAD_BRANCH")"
                 break
               else
-                echo "push failed, syncing with remote..."
+                echo "$(m wf_common.push_failed_syncing)"
                 if git pull --rebase origin $HEAD_BRANCH; then
-                  echo "rebase ok, retrying push..."
+                  echo "$(m wf_common.rebase_ok)"
                 else
-                  echo "rebase failed, manual conflict resolution required"
+                  echo "$(m wf_common.rebase_failed)"
                   git rebase --abort 2>/dev/null || true
                   exit 1
                 fi
@@ -388,7 +415,7 @@ jobs:
             done
 
             if [ "$PUSH_SUCCESS" = false ]; then
-              echo "push failed after $MAX_RETRIES attempts"
+              echo "$(m wf_common.push_gave_up max_retries="$MAX_RETRIES")"
               exit 1
             fi
           fi
@@ -399,6 +426,7 @@ jobs:
           # (RELEASE-PUBLISH etc.); GITHUB_TOKEN merges do not.
           GH_TOKEN: ${{ secrets.WORKFLOW_PAT || github.token }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           PR_NUMBER=${{ github.event.pull_request.number }}
           VERSION="${{ steps.bump.outputs.new_version }}"
 
@@ -407,39 +435,41 @@ jobs:
           SUBJECT="chore(release): v${VERSION} (PR #${PR_NUMBER})"
           ERR_FILE="${RUNNER_TEMP:-/tmp}/merge_err.txt"
 
-          # 확정 커밋 push 직후에는 GitHub가 PR head 갱신을 아직 반영하지 못해 "Head branch is
-          # out of date"·"not mergeable"로 간헐 실패한다. 간격을 늘려 가며 다시 시도한다.
+          # Right after the confirm commit is pushed, GitHub may not have picked up the new PR
+          # head yet and intermittently fails with "Head branch is out of date" / "not
+          # mergeable". Retry with growing intervals.
           MERGED=false
           MAX_ATTEMPTS=4
           for ATTEMPT in $(seq 1 $MAX_ATTEMPTS); do
             if [ "$(gh pr view "$PR_NUMBER" --json state -q .state 2>/dev/null)" = "MERGED" ]; then
-              echo "PR #$PR_NUMBER is already merged"
+              echo "$(m wf_changelog.pr_already_merged pr_number="$PR_NUMBER")"
               MERGED=true
               break
             fi
             if gh pr merge "$PR_NUMBER" --auto --merge --subject "$SUBJECT" 2> "$ERR_FILE"; then
-              echo "automerge enabled: $SUBJECT"
+              echo "$(m wf_changelog.automerge_enabled subject="$SUBJECT")"
               MERGED=true
               break
             fi
             cat "$ERR_FILE" >&2
             if gh pr merge "$PR_NUMBER" --merge --subject "$SUBJECT" 2> "$ERR_FILE"; then
-              echo "automerge unavailable — merged directly: $SUBJECT"
+              echo "$(m wf_changelog.automerge_unavailable subject="$SUBJECT")"
               MERGED=true
               break
             fi
             cat "$ERR_FILE" >&2
             [ "$ATTEMPT" -ge "$MAX_ATTEMPTS" ] && break
-            # 충돌은 기다려도 풀리지 않는다
+            # A conflict never resolves by waiting
             [ "$(gh pr view "$PR_NUMBER" --json mergeable -q .mergeable 2>/dev/null)" = "CONFLICTING" ] && break
             if grep -qi "out of date" "$ERR_FILE"; then
-              # 브랜치 보호의 "최신 상태 요구"로 실제로 뒤처졌다면 base를 head에 병합해 따라잡는다
-              # (단순 반영 지연이면 "새 커밋 없음"으로 거절되고 그대로 재시도한다)
+              # If the head really fell behind because of branch protection's "require up to
+              # date" rule, merge base into head to catch up (a mere propagation delay is
+              # rejected as "no new commits" and simply retried)
               gh api -X PUT "repos/${GITHUB_REPOSITORY}/pulls/${PR_NUMBER}/update-branch" > /dev/null 2>&1 \
                 && echo "head branch updated from base" || true
             fi
             WAIT=$((ATTEMPT * 10))
-            echo "merge attempt $ATTEMPT/$MAX_ATTEMPTS failed — retrying in ${WAIT}s"
+            echo "$(m wf_changelog.merge_retry attempt="$ATTEMPT" max_attempts="$MAX_ATTEMPTS" wait="${WAIT}")"
             sleep "$WAIT"
           done
 
@@ -448,31 +478,43 @@ jobs:
             MERGEABLE=$(gh pr view "$PR_NUMBER" --json mergeable -q .mergeable 2>/dev/null || echo "unknown")
             ALLOW_MERGE_COMMIT=$(gh api "repos/${GITHUB_REPOSITORY}" --jq '.allow_merge_commit' 2>/dev/null || echo "unknown")
             if [ "$MERGEABLE" = "CONFLICTING" ]; then
-              # 주로 {{MAIN_BRANCH}} 직접 push 뒤 안전망 버전 bump가 {{DEVELOP_BRANCH}}에 반영되지 않았을 때다
-              echo "::error::릴리스 PR이 {{MAIN_BRANCH}}와 충돌합니다 (버전 파일·CHANGELOG 등) — {{MAIN_BRANCH}}에만 있는 커밋을 {{DEVELOP_BRANCH}}에 병합한 뒤 push하세요: git checkout {{DEVELOP_BRANCH}} && git merge origin/{{MAIN_BRANCH}} (버전 줄 충돌은 어느 쪽을 택해도 다음 실행이 알맞게 다시 확정합니다)"
+              # Mostly happens when a safety-net version bump after a direct {{MAIN_BRANCH}} push never reached {{DEVELOP_BRANCH}}
+              echo "::error::$(m wf_changelog.merge_conflict prod="{{MAIN_BRANCH}}" dev="{{DEVELOP_BRANCH}}")"
             elif [ "$ALLOW_MERGE_COMMIT" = "false" ]; then
-              echo "::error::이 레포는 merge commit이 비활성화되어 있습니다 — Settings에서 'Allow merge commits'를 켜세요; 릴리스 감지는 merge commit subject를 사용합니다"
+              echo "::error::$(m wf_changelog.merge_commit_disabled)"
             else
-              echo "::error::PR merge failed after $MAX_ATTEMPTS attempts (allow_merge_commit=$ALLOW_MERGE_COMMIT) — check branch protection rules, required checks, and token permissions"
+              echo "::error::$(m wf_changelog.merge_gave_up max_attempts="$MAX_ATTEMPTS" allow_merge_commit="$ALLOW_MERGE_COMMIT")"
             fi
             exit 1
           fi
 
   wait-for-merge-and-trigger-release:
-    name: Wait for merge and trigger RELEASE-PUBLISH (WORKFLOW_PAT 없이도 동작)
+    name: Wait for merge and trigger RELEASE-PUBLISH (works without WORKFLOW_PAT)
     needs: changelog-and-merge
     runs-on: ubuntu-latest
     timeout-minutes: 35
     permissions:
+      # contents: read is needed for the sparse checkout that loads the message catalog
+      contents: read
       pull-requests: read
       actions: write
     steps:
+      # Only the message catalog and version.yml (language) are needed here
+      - name: Checkout message catalog
+        uses: actions/checkout@v7
+        with:
+          sparse-checkout: |
+            .github/scripts/messages.py
+            version.yml
+          sparse-checkout-cone-mode: false
+
       - name: Poll for merge completion
         id: wait
         env:
           GH_TOKEN: ${{ github.token }}
           GH_REPO: ${{ github.repository }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           PR_NUMBER=${{ github.event.pull_request.number }}
           MAX_WAIT=1800
           INTERVAL=20
@@ -483,7 +525,7 @@ jobs:
             PR_STATE=$(gh pr view "$PR_NUMBER" --json state -q .state 2>/dev/null || echo "")
             if [ "$PR_STATE" = "MERGED" ]; then
               MERGED=true
-              echo "PR #$PR_NUMBER 병합 확인 (경과 ${ELAPSED}s)"
+              echo "$(m wf_changelog.merge_confirmed pr="$PR_NUMBER" elapsed="$ELAPSED")"
               break
             fi
             sleep $INTERVAL
@@ -491,7 +533,7 @@ jobs:
           done
 
           if [ "$MERGED" != "true" ]; then
-            echo "::warning::PR #$PR_NUMBER 병합을 ${MAX_WAIT}s 내에 확인하지 못했습니다 — RELEASE-PUBLISH 자동 트리거를 건너뜁니다. WORKFLOW_PAT이 등록되어 있다면 기존 경로로 정상 진행되며, 없다면 필요 시 RELEASE-PUBLISH를 수동으로 workflow_dispatch 하세요."
+            echo "::warning::$(m wf_changelog.merge_timeout pr="$PR_NUMBER" max="$MAX_WAIT")"
           fi
 
           echo "merged=$MERGED" >> "$GITHUB_OUTPUT"
@@ -503,5 +545,6 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           GH_REPO: ${{ github.repository }}
         run: |
+          m() { python3 "$GITHUB_WORKSPACE/.github/scripts/messages.py" get "$@"; }
           gh workflow run PROJECT-COMMON-RELEASE-PUBLISH.yaml --ref {{MAIN_BRANCH}}
-          echo "RELEASE-PUBLISH workflow_dispatch 트리거 요청 완료 (WORKFLOW_PAT 없이도 동작)"
+          echo "$(m wf_changelog.release_publish_triggered)"