mirror of
https://github.com/Donkie/Spoolman.git
synced 2026-10-21 17:42:16 -05:00
Weblate opens a PR for every translation sync. These are machine-generated, always scoped to client/public/locales/, and gated by the full CI suite, so hand-merging each one is pure friction. This enables GitHub auto-merge on Weblate-authored PRs so they merge themselves once required checks pass. A scope-guard step reads the PR's file list from the API and refuses to enable auto-merge unless every changed file is a .json under client/public/locales/, so the trust is in the diff, not just the author: a compromised Weblate token can open a PR but can only be auto-merged if it is confined to translations. Claude-Session: https://claude.ai/code/session_01BQjJiwEbu6bHbeDjPPDm3V