Skip to content

CONTRIBUTING.md

Latest commit

 

History

History
56 lines (37 loc) · 1.82 KB

CONTRIBUTING.md

File metadata and controls

56 lines (37 loc) · 1.82 KB
Raw

Contributing

Thank you for your interest in contributing to this project!

Please read the full contributing guidelines at: https://owncloud.com/contribute/

Please open an issue to discuss significant changes before submitting a pull request. For small fixes, feel free to open a PR directly.

For development setup, coding standards, and pull request process, see the README in this repository.

Commit convention

This repository uses Conventional Commits. Every commit message (and every PR title, since PRs are squash-merged) must follow:

<type>(<optional scope>): <description>

[optional body]

[optional footer(s)]

Common types: feat, fix, docs, test, refactor, chore, ci, build. Scope should be backend or frontend when a change is limited to one side of the extension, e.g.:

feat(backend): add WebDAV-backed workflow store
fix(frontend): correct Vue Flow edge condition validation

commitlint (see commitlint.config.js) enforces this format locally via a commit-msg git hook and in CI.

Git workflow

  • Rebase policy: Always rebase; never create merge commits.
  • Signed commits: All commits must be PGP/GPG signed (git commit -S -s).
  • DCO sign-off: Every commit needs a Signed-off-by line (git commit -s).

OSPO policy constraints

GitHub Actions

  • Only use actions owned by owncloud, created by GitHub (actions/*), verified on the GitHub Marketplace, or verified by the ownCloud Maintainers.
  • Pin all actions to their full commit SHA (not tags): uses: actions/checkout@<SHA> # vX.Y.Z
  • Never introduce actions from unverified third parties.

Dependency management

  • Dependabot is configured for automated dependency updates.
  • Do not introduce new dependencies without discussion in an issue first.