SRE-1079: Use reusable workflows and Renovate preset from hashintel/actions

[claude]

Requested by Tim Diekmann · Slack thread

Before: The preflight and housekeeping workflows call reusable workflows from hashintel/.github at db03b98, Renovate extends github>hashintel/.github:renovate-config, and housekeeping runs every two hours (0 */2 * * *).

After: The same workflows come from hashintel/actions at 66c8121, Renovate extends github>hashintel/actions:renovate-config, and housekeeping runs daily at 03:00 UTC (0 3 * * *), the same schedule as hashintel/hash. hashintel/internal-infra#374 already runs this way, and Tim asked for the same setup in the other repositories.

How:

• Five uses: refs now point at hashintel/actions/.github/workflows/<x>.yml@66c812140c0f8f4a215c5f54dce5b40b476337d8 # main: preflight-dependencies, preflight-pr-title, preflight-todo-comments, preflight-actionlint and housekeeping-dependencies. Each target file is byte-identical to the file at the old hashintel/.github SHA, so the inputs and secrets the callers pass are unchanged.
• The Renovate preset now comes from hashintel/actions. It matches hashintel/.github main apart from the self-reference in matchPackageNames.
• Housekeeping cron: 0 */2 * * * becomes 0 3 * * *.
• No docs in this repository name hashintel/.github, so none needed updating.

Validated locally with actionlint on the three changed workflows and renovate-config-validator (renovate 44.34.3) on .github/renovate.json.

🤖 Generated with Claude Code

https://claude.ai/code/session_012vhP8cbLCbnWdQP7LLFB5A

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
petrinaut-gaios	Error		Sep 26, 2026 3:34pm UTC
petrinaut-hazel	Ready	Preview	Sep 26, 2026 3:34pm UTC

[cursor]

PR Summary

Low Risk
CI and dependency-bot wiring only; reusable workflow contracts are unchanged aside from source repo and pin.

Overview
Migrates shared GitHub Actions and Renovate config from hashintel/.github to hashintel/actions, pinned at commit 66c8121. Preflight jobs (preflight-dependencies, preflight-pr-title, preflight-todo-comments, preflight-actionlint) and housekeeping Dependencies (housekeeping-dependencies) all use the new uses: paths; caller with/secrets are unchanged.

Renovate now extends github>hashintel/actions:renovate-config instead of the .github preset.

Housekeeping schedule moves from every two hours (0 */2 * * *) to once daily at 03:00 UTC (0 3 * * *), matching other Hash repos.

^{Reviewed by Cursor Bugbot for commit 0ddd8ac. Bugbot is set up for automated code reviews on this repo. Configure here.}

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0ddd8ac. Configure here.}

[cursor]

Private workflows break public repository CI

High Severity

The uses refs now call reusable workflows in hashintel/actions. This repository is public, and GitHub only lets public callers use reusable workflows from public repositories. hashintel/actions is not among the organization's public repos, so preflight and housekeeping fail to resolve.

Additional Locations (2)

• .github/workflows/preflight.yml#L15-L22
• .github/workflows/preflight-target.yml#L18-L25

 

^{Reviewed by Cursor Bugbot for commit 0ddd8ac. Configure here.}