ci: add CODEOWNERS, PR title validation, and dependabot auto-merge

.github/CODEOWNERS

@@ -0,0 +1,11 @@
+# Global owners — review required from at least one
+* @arthrod
+
+# Core packages
+packages/ @arthrod @pcmoraesmenezes
+
+# CI / GitHub config
+.github/ @arthrod
+
+# Apps
+apps/ @arthrod @pcmoraesmenezes

.github/workflows/auto-merge.yml

@@ -0,0 +1,24 @@
+name: Auto Merge
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge-dependabot:
+    name: Auto merge dependabot PRs
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Enable auto-merge
+        env:
+          GH_TOKEN: ${{ secrets.API_TOKEN_GITHUB || secrets.GITHUB_TOKEN }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+        run: gh pr merge --auto --squash "$PR_URL"

.github/workflows/changeset-auto-release.yml

@@ -1,8 +1,6 @@
 name: Changeset Auto Release Checkbox
 
 on:
-  pull_request:
-    types: [opened, reopened, synchronize, edited]
   pull_request_target:
     types: [opened, reopened, synchronize, edited]
 
@@ -14,25 +12,13 @@ jobs:
   sync-auto-release-checkbox:
     name: Sync auto-release checkbox
     runs-on: ubuntu-latest
-    if: >-
-      github.repository == 'udecode/plate' &&
-      (
-        (github.event_name == 'pull_request' &&
-          github.event.pull_request.head.repo.full_name == github.repository) ||
-        (github.event_name == 'pull_request_target' &&
-          github.event.pull_request.head.repo.full_name != github.repository)
-      )
+    if: ${{ github.repository == 'udecode/plate' }}
 
     steps:
-      - name: 📥 Checkout workflow helper
+      - name: 📥 Checkout base
         uses: actions/checkout@v4
         with:
-          ref: >-
-            ${{
-              github.event_name == 'pull_request'
-                && github.event.pull_request.head.sha
-                || github.event.repository.default_branch
-            }}
+          ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false
 
       - name: 🔁 Sync auto-release checkbox

.github/workflows/opencode.yml

@@ -0,0 +1,59 @@
+name: opencode
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+
+jobs:
+  opencode:
+    if: |
+      contains(github.event.comment.body, ' /oc') ||
+      startsWith(github.event.comment.body, '/oc') ||
+      contains(github.event.comment.body, ' /opencode') ||
+      startsWith(github.event.comment.body, '/opencode')
+    runs-on: self-hosted
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+
+      - name: Run opencode
+        uses: anomalyco/opencode/github@latest
+        env:
+          ALIBABA_CODING_PLAN_API_KEY: ${{ secrets.ALIBABA_CODING_PLAN }}
+        with:
+          model: alibaba-coding-plan/qwen3.6-max
+
+  opencode-minimax:
+    if: |
+      contains(github.event.comment.body, ' /minimax') ||
+      startsWith(github.event.comment.body, '/minimax') ||
+      contains(github.event.comment.body, ' /mm') ||
+      startsWith(github.event.comment.body, '/mm')
+    runs-on: self-hosted
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+
+      - name: Run opencode
+        uses: anomalyco/opencode/github@latest
+        env:
+          MINIMAX_CODING_PLAN_API_KEY: ${{ secrets.MINIMAX_API_KEY }}
+          MINIMAX_API_KEY: ${{ secrets.MINIMAX_API_KEY }}
+        with:
+          model: minimax-coding-plan/MiniMax-M2.7

.github/workflows/pr-title.yml

@@ -0,0 +1,39 @@
+name: PR Title
+
+on:
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
+      - reopened
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate-title:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.title != '[Release] Version packages'
+    steps:
+      - name: Check conventional commit format
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          pattern='^(feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)(\(.+\))?!?: .{1,100}$'
+          if ! echo "$TITLE" | grep -qE "$pattern"; then
+            echo "PR title must follow Conventional Commits:"
+            echo "  <type>(<scope>): <description>"
+            echo ""
+            echo "Valid types: feat fix docs style refactor perf test build ci chore revert"
+            echo "Examples:"
+            echo "  feat(editor): add table resizing"
+            echo "  fix(link): handle empty href"
+            echo "  chore(deps): bump slate to 0.103"
+            echo ""
+            echo "Got: $TITLE"
+            exit 1
+          fi
+          echo "Title OK: $TITLE"