name: Stale Issue and PR Hygiene

on:
  schedule:
    - cron: "30 4 * * *"
  workflow_dispatch:

permissions:
  issues: write
  pull-requests: write

jobs:
  stale:
    name: Mark stale issues and PRs
    runs-on: ubuntu-latest
    steps:
      - name: Process stale issues and PRs
        uses: actions/stale@v9
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}
          stale-issue-message: >
            This issue has had no activity for 60 days and is now marked stale.
            If this is still relevant, add an update and we will keep it open.
          close-issue-message: >
            Closing this issue due to inactivity.
            Comment with updated context to reopen if work is still needed.
          stale-pr-message: >
            This pull request has had no activity for 60 days and is now marked stale.
            Please push updates or comment if it should remain open.
          close-pr-message: >
            Closing this pull request due to inactivity.
            Reopen or open a new PR when updates are ready.
          days-before-issue-stale: 60
          days-before-issue-close: 14
          days-before-pr-stale: 60
          days-before-pr-close: 14
          exempt-issue-labels: "type:security,sev:critical,status:blocked"
          exempt-pr-labels: "type:security,sev:critical,status:blocked"
          exempt-all-milestones: true
          stale-issue-label: "status:needs-info"
          stale-pr-label: "status:needs-info"
          close-issue-label: "status:done"
          close-pr-label: "status:done"