[versnic]

What and why

pr-title, pr-labels, ai-disclosure, labels and zizmor now only hold a trigger and a call to the same workflow in modulane/workflows, pinned to its v1.0.0 commit, as in repo-template, so a fix made there reaches this repository through Dependabot.

• The required checks are renamed after the calling job: Pull request title / Conventional Commit title and AI disclosure / AI use section. CI passed is unchanged. The main ruleset is updated to these names when this is merged.
• Dependabot skips the 7-day cooldown for modulane/* releases.
• The shared pr-labels no longer tries to assign a bot author, which failed the "Label from the title" job on every Dependabot pull request. The shared zizmor uses zizmor-action v0.8.1, which supersedes ci: bump zizmorcore/zizmor-action from 0.8.0 to 0.8.1 in the github-actions group #80.

Until this is merged, "Label from the title" still runs the old copy from main, because pull_request_target uses the base branch.

AI use

• No AI tool was used
• AI tools were used, as described here:

Claude Code wrote the caller workflows, the Dependabot change, the doc updates and this description. I reviewed the changes.

Checklist

• The title follows Conventional Commits (feat:, fix:, docs:, …) and is lowercase
• Tests cover the change, or it needs none
• The README, roadmap and guides are up to date with the change

🤖 Generated with Claude Code