Merge branch 'main' into lorenze/imp/issue-driven-pull-requests

.github/workflows/codeql.yml

@@ -15,11 +15,11 @@ on:
   push:
     branches: [ "main" ]
     paths-ignore:
-      - "lib/crewai/src/crewai/cli/templates/**"
+      - "lib/cli/src/crewai_cli/templates/**"
   pull_request:
     branches: [ "main" ]
     paths-ignore:
-      - "lib/crewai/src/crewai/cli/templates/**"
+      - "lib/cli/src/crewai_cli/templates/**"
 
 jobs:
   analyze:

.github/workflows/linter.yml

@@ -18,13 +18,14 @@ jobs:
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
-          # so docs-only / markdown-only PRs correctly set code=false.
+          # so docs/markdown/Actions-only PRs correctly set code=false.
           predicate-quantifier: every
           filters: |
             code:
               - '**'
               - '!docs/**'
               - '!**/*.md'
+              - '!.github/**'
 
   lint-run:
     needs: changes
@@ -81,7 +82,7 @@ jobs:
       - name: Check results
         run: |
           if [ "${{ needs.changes.outputs.code }}" != "true" ]; then
-            echo "Docs-only change, skipping lint"
+            echo "Non-code change, skipping lint"
             exit 0
           fi
           if [ "${{ needs.lint-run.result }}" == "success" ]; then

.github/workflows/tests.yml

@@ -18,13 +18,14 @@ jobs:
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
-          # so docs-only / markdown-only PRs correctly set code=false.
+          # so docs/markdown/Actions-only PRs correctly set code=false.
           predicate-quantifier: every
           filters: |
             code:
               - '**'
               - '!docs/**'
               - '!**/*.md'
+              - '!.github/**'
 
   tests-matrix:
     name: tests (${{ matrix.python-version }})
@@ -121,17 +122,31 @@ jobs:
             .venv
           key: uv-main-py${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
 
+  # Report the required check names (tests 3.10–3.13) when the matrix is skipped.
+  # Branch protection expects these names; a skipped matrix never reports them.
+  tests-skip:
+    name: tests (${{ matrix.python-version }})
+    needs: changes
+    if: needs.changes.outputs.code != 'true'
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ['3.10', '3.11', '3.12', '3.13']
+    steps:
+      - name: Skip non-code change
+        run: echo "Non-code change, skipping tests"
+
   # Summary job to provide single status for branch protection
   tests:
     name: tests
     runs-on: ubuntu-latest
-    needs: [changes, tests-matrix]
+    needs: [changes, tests-matrix, tests-skip]
     if: always()
     steps:
       - name: Check results
         run: |
           if [ "${{ needs.changes.outputs.code }}" != "true" ]; then
-            echo "Docs-only change, skipping tests"
+            echo "Non-code change, skipping tests"
             exit 0
           fi
           if [ "${{ needs.tests-matrix.result }}" == "success" ]; then

.github/workflows/type-checker.yml

@@ -18,13 +18,14 @@ jobs:
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
-          # so docs-only / markdown-only PRs correctly set code=false.
+          # so docs/markdown/Actions-only PRs correctly set code=false.
           predicate-quantifier: every
           filters: |
             code:
               - '**'
               - '!docs/**'
               - '!**/*.md'
+              - '!.github/**'
 
   type-checker-matrix:
     name: type-checker (${{ matrix.python-version }})
@@ -75,17 +76,31 @@ jobs:
             .venv
           key: uv-main-py${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
 
+  # Report the required check names when the matrix is skipped.
+  # Branch protection expects these names; a skipped matrix never reports them.
+  type-checker-skip:
+    name: type-checker (${{ matrix.python-version }})
+    needs: changes
+    if: needs.changes.outputs.code != 'true'
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - name: Skip non-code change
+        run: echo "Non-code change, skipping type checks"
+
   # Summary job to provide single status for branch protection
   type-checker:
     name: type-checker
     runs-on: ubuntu-latest
-    needs: [changes, type-checker-matrix]
+    needs: [changes, type-checker-matrix, type-checker-skip]
     if: always()
     steps:
       - name: Check results
         run: |
           if [ "${{ needs.changes.outputs.code }}" != "true" ]; then
-            echo "Docs-only change, skipping type checks"
+            echo "Non-code change, skipping type checks"
             exit 0
           fi
           if [ "${{ needs.type-checker-matrix.result }}" == "success" ]; then

.github/workflows/vulnerability-scan.yml

@@ -26,13 +26,14 @@ jobs:
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
-          # so docs-only / markdown-only PRs correctly set code=false.
+          # so docs/markdown/Actions-only PRs correctly set code=false.
           predicate-quantifier: every
           filters: |
             code:
               - '**'
               - '!docs/**'
               - '!**/*.md'
+              - '!.github/**'
       - name: Set code output
         id: set
         run: |