ci: align all .github workflows and configs with msgtrace-sdk

[vilsonrodrigues]

Summary

Aligns all CI/CD workflows and configurations with msgtrace-sdk standards to ensure consistency across MSG projects.

Added Workflows

1. CodeQL ()

• ✅ Automatic security vulnerability scanning
• ✅ Runs on schedule and PRs
• ✅ Analyzes Python code for security issues

2. Auto-Labeler ( + config)

• ✅ Automatically labels PRs based on file paths
• ✅ Labels: documentation, tests, ci, dependencies, etc.
• ✅ Improves PR organization and filtering

3. Pre-commit Auto-update ()

• ✅ Automatically updates pre-commit hooks monthly
• ✅ Creates PRs with hook updates
• ✅ Keeps linting tools up-to-date

Updated Workflow

Publish Workflow ()

Before:

• ❌ Manual trigger (workflow_dispatch)
• ❌ Manual tag creation required
• ❌ No version validation

After:

• ✅ Automatic trigger after "Validate Release" success
• ✅ Auto-creates and pushes tag (by github-actions bot)
• ✅ Validates version bump
• ✅ Creates GitHub Release automatically

Benefits

1. Security - CodeQL scanning for vulnerabilities
2. Organization - Auto-labeling improves PR management
3. Maintenance - Auto-updates for pre-commit hooks
4. Automation - Fully automated releases (no manual steps)
5. Consistency - Same standards as msgtrace-sdk

Files Added/Modified

.github/
├── labeler.yml (new) - Label configuration
└── workflows/
    ├── codeql.yml (new)
    ├── labeler.yml (new)
    ├── pre-commit-autoupdate.yml (new)
    └── publish.yml (updated)

Testing

All workflows have been tested in msgtrace-sdk. After merge:

• CodeQL will run on next PR
• Labeler will auto-label PRs
• Pre-commit auto-update will run monthly
• Next release will be fully automated

Related

This completes the CI/CD alignment with MSG project standards.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.