Auto-refresh the repository list weekly

Mirror the capability just added to schubergphilis.github.io: a scheduled
workflow that reruns `mise run docs-repos` every Monday, commits repos.json if
it changed, and dispatches the Pages deploy. A push made with GITHUB_TOKEN does
not trigger other workflows, so deploy.yml has to be asked for explicitly.

Also narrow the generated list to repos that carry an open source license, to
keep the two refresh scripts aligned. All eight listed Lab271 repos are
Apache-2.0, so this changes nothing today; it only guards future additions.

Unlike the sibling script there is still no "recent activity" cutoff, since the
org is small enough to list in full.

Assisted-by: Claude:claude-opus-5
Co-Authored-By: lsimons-bot <bot@leosimons.com>

Author: lsimons

.github/workflows/refresh-repos.yml

@@ -0,0 +1,67 @@
+name: Refresh repository list
+
+on:
+  schedule:
+    # Mondays at 05:17 UTC — off the hour to avoid the top-of-hour scheduling queue
+    - cron: '17 5 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+# never let two refreshes race to push the same file
+concurrency:
+  group: refresh-repos
+  cancel-in-progress: false
+
+jobs:
+  refresh:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      # needed to dispatch the Pages deploy below
+      actions: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Set up mise
+        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3
+        with:
+          install: true
+          cache: true
+
+      - name: Regenerate docs/src/data/repos.json
+        env:
+          # only used to read public repository metadata from the org
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: mise run docs-repos
+
+      - name: Commit and push any changes
+        id: commit
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if git diff --quiet -- docs/src/data/repos.json; then
+            echo "No changes to the repository list."
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git add docs/src/data/repos.json
+          git commit -m 'Refresh the list of public repositories'
+          git push "https://x-access-token:${GH_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" \
+            "HEAD:${GITHUB_REF_NAME}"
+          echo "changed=true" >> "$GITHUB_OUTPUT"
+
+      # A push made with GITHUB_TOKEN does not trigger other workflows, so ask
+      # for the Pages deploy explicitly. workflow_dispatch is one of the two
+      # events that GITHUB_TOKEN is allowed to fire.
+      - name: Trigger the Pages deploy
+        if: steps.commit.outputs.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh workflow run deploy.yml --ref "${GITHUB_REF_NAME}"

AGENTS.md

@@ -45,12 +45,19 @@ When starting the dev server directly (not via mise), use background mode:
     (`mise run docs-icons`).
   - `src/assets/hero.jpg`: the hero photo.
   - `src/data/repos.json`: committed, auto-generated list of public `Lab271`
-    repos. Regenerate with `mise run docs-repos` rather than editing by hand.
+    repos that carry an open source license. Regenerate with `mise run
+    docs-repos` rather than editing by hand.
+  - `scripts/refresh-repos.mjs`: what `mise run docs-repos` runs. Plain node, no
+    dependencies, so it works without `bun install`.
 - `.github/workflows/ci.yml`: build and type-check on push/PR, plus a `zizmor`
   job auditing the workflows themselves.
 - `.github/workflows/deploy.yml`: builds and publishes `docs/dist` to GitHub
   Pages on every push to `main`. The repository's Pages source must be set to
   "GitHub Actions" (Settings, then Pages) for this to work.
+- `.github/workflows/refresh-repos.yml`: weekly (Monday) rerun of `mise run
+  docs-repos`, committing `repos.json` to `main` if it changed. A push made with
+  `GITHUB_TOKEN` does not trigger other workflows, so it dispatches `deploy.yml`
+  afterwards instead of relying on the push event.
 - `.github/dependabot.yml`: weekly updates for the `docs/` bun lockfile and the
   GitHub Actions used in workflows.
 

docs/scripts/refresh-repos.mjs

@@ -6,7 +6,8 @@
 // The org is small enough to list in full, so - unlike the schubergphilis
 // equivalent - there is no "recent activity" cutoff here. Forks and archived
 // repos are excluded by `gh`; this repo and the org profile repo are excluded
-// below because neither is a project.
+// below because neither is a project, and so are repos without an open source
+// license.
 import { execFileSync } from 'node:child_process';
 import { writeFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
@@ -32,13 +33,20 @@ const raw = execFileSync(
 		'--limit',
 		'1000',
 		'--json',
-		'name,description,url,homepageUrl,primaryLanguage,pushedAt',
+		'name,description,url,homepageUrl,primaryLanguage,pushedAt,licenseInfo',
 	],
 	{ encoding: 'utf8' },
 );
 
+// GitHub reports a detected license as a `licenseInfo.key`; repos without a
+// LICENSE file have no `licenseInfo` at all, and repos whose license file it
+// cannot match to a known license get the `other` pseudo-license (SPDX
+// `NOASSERTION`). Neither counts as open source for our purposes.
+const hasOpenSourceLicense = (repo) => repo.licenseInfo !== null && repo.licenseInfo.key !== 'other';
+
 const repos = JSON.parse(raw)
 	.filter((repo) => !EXCLUDE.has(repo.name.toLowerCase()))
+	.filter(hasOpenSourceLicense)
 	.sort((a, b) => new Date(b.pushedAt) - new Date(a.pushedAt))
 	.map(({ name, description, url, homepageUrl, primaryLanguage, pushedAt }) => ({
 		name,