Refactor collectors, expand dashboards, and harden CI

Restructure committime and failure collectors for clearer data flow
and better error recovery. Add failure __init__ module for shared
types. Expand DORA dashboard panels with trend indicators and
additional recording rules. Migrate CI workflow templates from
custom Dockerfiles to composite actions. Improve webhook payload
validation and metric store consistency. Update test assertions
for stricter type checking.

Author: maci0

.github/dependabot.yml

@@ -34,6 +34,10 @@ updates:
       interval: "weekly"
     commit-message:
       prefix: ⬆
+    groups:
+      docker-dependencies:
+        patterns:
+          - "*"
     labels:
       - "dependencies"
       - "docker"
@@ -44,6 +48,10 @@ updates:
       interval: "weekly"
     commit-message:
       prefix: ⬆
+    groups:
+      docker-dependencies:
+        patterns:
+          - "*"
     labels:
       - "dependencies"
       - "docker"
@@ -54,26 +62,10 @@ updates:
       interval: "weekly"
     commit-message:
       prefix: ⬆
-    labels:
-      - "dependencies"
-      - "docker"
-  # Docker - workflow template: comment-pr
-  - package-ecosystem: "docker"
-    directory: "/.github/workflow_templates/comment-pr"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: ⬆
-    labels:
-      - "dependencies"
-      - "docker"
-  # Docker - workflow template: create-market-place-pr
-  - package-ecosystem: "docker"
-    directory: "/.github/workflow_templates/create-market-place-pr"
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: ⬆
+    groups:
+      docker-dependencies:
+        patterns:
+          - "*"
     labels:
       - "dependencies"
       - "docker"

.github/workflow_templates/comment-pr/Dockerfile

@@ -11,5 +11,20 @@ inputs:
     description: The message to be commented
     required: true
 runs:
-  using: docker
-  image: Dockerfile
+  using: composite
+  steps:
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.13'
+
+    - name: Install dependencies
+      shell: bash
+      run: pip install --no-cache-dir "pydantic==2.12.5" "pydantic-settings==2.9.1" "pygithub==2.6.0"
+
+    - name: Comment on PR
+      shell: bash
+      env:
+        INPUT_TOKEN: ${{ inputs.token }}
+        INPUT_PR_NUMBER: ${{ inputs.pr_number }}
+        INPUT_MESSAGE: ${{ inputs.message }}
+      run: python ${{ github.action_path }}/main.py

.github/workflow_templates/comment-pr/action.yml

@@ -11,5 +11,20 @@ inputs:
     description: The user username of the fork to open PR from
     required: true
 runs:
-  using: docker
-  image: Dockerfile
+  using: composite
+  steps:
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.13'
+
+    - name: Install dependencies
+      shell: bash
+      run: pip install --no-cache-dir "pydantic==2.12.5" "pydantic-settings==2.9.1" "pygithub==2.6.0"
+
+    - name: Create marketplace PR
+      shell: bash
+      env:
+        INPUT_TOKEN: ${{ inputs.token }}
+        INPUT_VERSION: ${{ inputs.version }}
+        INPUT_FORK_USER: ${{ inputs.fork_user }}
+      run: python ${{ github.action_path }}/main.py

.github/workflow_templates/create-market-place-pr/Dockerfile

@@ -10,6 +10,7 @@ on:
 
 concurrency:
   group: cd-main
+  cancel-in-progress: false
 
 env:
   # TODO create bot account
@@ -27,6 +28,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - uses: dorny/paths-filter@v3
         id: changes
@@ -38,21 +41,26 @@ jobs:
               - 'pelorus-operator/**'
 
       - uses: actions/upload-artifact@v4
+        if: steps.changes.outputs.version_change == 'true'
         with:
           name: operator-code
           path: pelorus-operator/bundle
+          retention-days: 1
 
       - name: Store variables
         id: variables
+        env:
+          VERSION_CHANGE: ${{ steps.changes.outputs.version_change }}
+          COMMIT_SHA: ${{ github.sha }}
         run: |
-          echo "version_change=${{ steps.changes.outputs.version_change }}" >> "$GITHUB_OUTPUT"
-          if [[ "${{ steps.changes.outputs.version_change }}" == "true" ]];then
+          echo "version_change=$VERSION_CHANGE" >> "$GITHUB_OUTPUT"
+          if [[ "$VERSION_CHANGE" == "true" ]];then
             export CURRENT_CHART_VERSION="$(grep '^version: ' pelorus-operator/helm-charts/pelorus/Chart.yaml  | cut -c 10-)"
             if [[ $CURRENT_CHART_VERSION == *"rc"* ]];then
-              echo "tags=$(echo latest,${{ github.sha }},v$CURRENT_CHART_VERSION)" >> "$GITHUB_OUTPUT"
+              echo "tags=$(echo latest,$COMMIT_SHA,v$CURRENT_CHART_VERSION)" >> "$GITHUB_OUTPUT"
               echo "is_release=false" >> "$GITHUB_OUTPUT"
             else
-              echo "tags=$(echo stable,latest,${{ github.sha }},v$CURRENT_CHART_VERSION)" >> "$GITHUB_OUTPUT"
+              echo "tags=$(echo stable,latest,$COMMIT_SHA,v$CURRENT_CHART_VERSION)" >> "$GITHUB_OUTPUT"
               echo "is_release=true" >> "$GITHUB_OUTPUT"
               export CURRENT_OPERATOR_VERSION="$(grep "^VERSION ?= " pelorus-operator/Makefile  | cut -c 12-)"
               echo "version=$CURRENT_OPERATOR_VERSION" >> "$GITHUB_OUTPUT"
@@ -91,6 +99,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Build and push ${{ matrix.image }}
         uses: "./.github/workflow_templates/build_push_exporters"
@@ -146,7 +156,7 @@ jobs:
           git remote add upstream https://github.com/redhat-openshift-ecosystem/community-operators-prod.git
           git fetch upstream
           git rebase upstream/main
-          git push origin main
+          git push --force-with-lease origin main
 
       - name: Create branch
         run: |
@@ -163,7 +173,7 @@ jobs:
         run: |
           git config user.name 'github-actions[bot]'
           git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
-          git add -A
+          git add operators/pelorus-operator/${{ needs.setup.outputs.version }}
           git commit --signoff -m "operator pelorus-operator (${{ needs.setup.outputs.version }})"
           git push origin pelorus-operator-${{ needs.setup.outputs.version }}
 

.github/workflow_templates/create-market-place-pr/action.yml

@@ -4,6 +4,12 @@ permissions:
   contents: read
 
 on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+    paths:
+      - 'pyproject.toml'
+      - 'uv.lock'
   pull_request:
     branches: [ main ]
     paths:

.github/workflows/cd.yml

@@ -4,6 +4,7 @@ permissions:
   contents: read
 
 on:
+  workflow_dispatch:
   pull_request:
     branches: [ main ]
     paths:

.github/workflows/check-python-dependencies.yml

@@ -43,9 +43,7 @@ jobs:
             pyproject.toml
 
       - name: Install dependencies
-        run: |
-          make dev-env
+        run: make dev-env
 
       - name: Run conf-tests
-        run: |
-          make conf-tests
+        run: make conf-tests

.github/workflows/ci.yml

@@ -4,6 +4,14 @@ permissions:
   contents: read
 
 on:
+  workflow_dispatch:
+  push:
+    branches: [ main ]
+    paths:
+      - 'docs/**'
+      - '.github/workflows/doc-check.yml'
+      - 'mkdocs.yml'
+      - 'Makefile'
   pull_request:
     branches: [ main ]
     paths: