Chore/repository config foundation by yreyricord · Pull Request #24 · BioPAL/BPS

yreyricord · 2026-06-15T15:39:52Z

Linked issue

Closes #20

The linked issue is labelled status:approved, good-first-issue or help-wanted.
Being open in the backlog is not enough on its own: only these three labels mean the scope has been triaged and approved for implementation.

What this PR changes

Adds .github/CODEOWNERS to route PR review automatically by file path. The current routing is a placeholder pending input from maintainers (see Notes for reviewers).
Adds .github/dependabot.yml to monitor Python dependencies (pyproject.toml per bps-* package), GitHub Actions versions, and Docker base images on a weekly grouped schedule. Reviewers are assigned via CODEOWNERS.
Adds REUSE.toml and LICENSES/Apache-2.0.txt + LICENSES/MIT.txt to make the repository REUSE-compliant via bulk annotations covering all legacy files by category.

Notes for reviewers @matteoaletti

CODEOWNERS routing will needs your input.
The CODEOWNERS file currently routes almost every path to the primary maintainer as a placeholder, because I do not yet have the GitHub handles or team names for the Scientific Module Experts (SMEs) and area maintainers. Could you tell me who should own:

bps-l1_* paths
bps-l2* paths
bps-stack_* paths
docs/** and the wiki

REUSE compliance is delivered via the manifest, not inline headers.
REUSE.toml covers all existing legacy files by category. A follow-up issue will track the progressive migration of legacy files to inline SPDX headers. Every new file added from this PR onwards is expected to carry inline headers.
Three files marked as third-party with a provisional licence.
eop.xsd, sar.xsd, and bio-l1-vrt.xsd are declared as OGC / CC-BY-4.0 on a provisional basis. We should discuss with ESA and confirm the actual licence before merge.

User-facing change

This PR introduces a user-facing change (API, CLI, output format, performance, documentation).

If yes, write one short release-note sentence here (it will be picked up in CHANGELOG.md):

Documentation

This PR modifies the documentation (Sphinx site, README, wiki, ATBD, Science Guide).
This PR does not modify the documentation, and no documentation update is needed.
This PR does not modify the documentation, but a documentation update is needed and tracked in issue #_____.

Tier rationale

The CI computes the tier automatically from the diff against the base branch. You do not assign it, but stating your expectation helps reviewers spot a mismatch quickly.

Tier	Triggers	Checks that run
0	Routine changes, no sensitive path touched	Baseline only
1	Locked paths, SME-owned paths, marker fail, Dependabot major	Baseline + Extended
2	`VERSION` promoted to `main`, designated heavy paths, manual `run_heavy`	Baseline + Extended + Heavy

Full rules: .github/tier-policy.yml. Background: Contribution tiers in the contributor guide.

Expected tier: 0
Why: configuration-only files

AI assistance disclosure

No AI tools were used to prepare this PR.
AI tools were used. Tool(s):

What was generated (code, tests, documentation, commit messages): Commit messages / Comment
I have reviewed the generated content and take responsibility for it.

Checklist

This PR closes exactly one tracking issue, linked above.
The scope of the diff matches the approved scope in the linked issue. No drift, no extras.
A breaking change is explicitly flagged in the release note sentence above (if applicable).
The reviewer assigned has the relevant domain knowledge for this change.

CODEOWNERS currently routes every path to the single primary maintainer. SME team handles for the L1, L2, Stack, docs and legal areas are pending confirmation by maintainers and will be applied in a follow-up PR. Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

Weekly schedule covering Python (pyproject.toml per bps-* package) Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

REUSE.toml covers legacy files in bulk by category. Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

matteoaletti

I only checked dependabot.yml file and left two comments/questions.

As far as licensing files are concerned I think that @rpiantanida should double check them as the current license files and credit files were written after iterating with ESA.

yreyricord · 2026-06-19T12:35:53Z

I only checked dependabot.yml file and left two comments/questions.

As far as licensing files are concerned I think that @rpiantanida should double check them as the current license files and credit files were written after iterating with ESA.

This PR does not replace the existing LICENSE.md / CREDITS.md iteration; it adds the REUSE manifest layer. I have just added the MIT and Apache Licences V2.

…eekly PR Signed-off-by: Yoann Rey-Ricord <yoann.rey-ricord@acri-st.fr>

Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

yreyricord · 2026-06-24T08:51:11Z

@matteoaletti I think it is ready to be merge :)

matteoaletti · 2026-06-24T09:13:44Z

@matteoaletti I think it is ready to be merge :)

I know this has been opened already for a while, however we are still discussing internally (@rpiantanida) because some things you would like to change in this or in the other PRs (like spdx headers) were discussed during the BPS project for a very long time. For example, if i recall correctly, SPDX were originally like you propose to change them and then it was decided to update them to the current version.

Do you think it is possible to merge at least the dependabot independently in a different PR ?

yreyricord · 2026-06-24T11:57:04Z

@matteoaletti I think it is ready to be merge :)

I know this has been opened already for a while, however we are still discussing internally (@rpiantanida) because some things you would like to change in this or in the other PRs (like spdx headers) were discussed during the BPS project for a very long time. For example, if i recall correctly, SPDX were originally like you propose to change them and then it was decided to update them to the current version.

Do you think it is possible to merge at least the dependabot independently in a different PR ?

Yes it is possible, but depandabot is not really a priority for the 30th workshop, it doesn't matter if we don't have it right now, I would prefer waiting :)

rpiantanida · 2026-06-24T14:15:51Z

@yreyricord I've reviewed this PR, here below my comments:

adding the Apache licence is ok, considering it is in some way an extension of MIT one. The only note is that we should avoid duplications with respect to LICENSE.md file currently included in the repo root (and including MIT licence text)
for the codeowners files, I've added some comments above
for the dependabot file, I don't have additional comments wrt Matteo's ones
for the reuse file, I'm not a big expert about this kind of file, but during the BPS development we delivered a dedicated document called SRF (Software Reuse File), containing a lot of information on this and related topics. We should check it too and ensure consistency. I can provide the doc in case you don't have it.

As an additional general comment I think we should also involve in the review someone from ESA when the PR is about licencing or similar topics. During BPS development it was Antonio V. following this, maybe we could still involve him.

yreyricord · 2026-06-24T15:41:08Z

R does not replace the existing LICENSE.md / CREDITS.md iteration; it adds the REUSE manifest layer. I have just added the MIT and Apache Licences V2.

Hello @rpiantanida I don't see your comments on the CODEOWNERS file.. Could you redirect me to them please ?

rpiantanida · 2026-06-24T15:58:40Z

@yreyricord there are 3 comments, you can see them here https://github.com/BioPAL/BPS/pull/24/changes/BASE..b0dddaf12451ae33e9c5f8a7b88a6a91dd78fe07

yreyricord · 2026-06-24T16:12:06Z

@yreyricord there are 3 comments, you can see them here https://github.com/BioPAL/BPS/pull/24/changes/BASE..b0dddaf12451ae33e9c5f8a7b88a6a91dd78fe07

Hi @rpiantanida, I can see your summary comment in the Conversation tab, but I don't see the 3 inline comments on CODEOWNERS, could you please Submit your review so they become visible to everyone? Thanks!

rpiantanida · 2026-06-24T13:54:03Z

+/bps-l2a_processor/                     @matteoaletti 
+/bps-l2b_agb_processor/                 @matteoaletti 
+/bps-l2b_fd_processor/                  @matteoaletti 
+/bps-l2b_fh_processor/                  @matteoaletti 


@yreyricord we should put Emanuele Giorgi for L2*-related stuff

rpiantanida · 2026-06-24T13:54:22Z

+/bps-stack_binaries/                    @matteoaletti 
+/bps-stack_cal_processor/               @matteoaletti 
+/bps-stack_coreg_processor/             @matteoaletti 
+/bps-stack_pre_processor/               @matteoaletti 
+/bps-stack_processor/                   @matteoaletti 


@yreyricord we should put Federico Boniardi for Stack-related stuff

rpiantanida · 2026-06-24T13:56:56Z

+
+# ---- Documentation -----------------------------------------------------------
+/README.md                              @matteoaletti
+/CREDITS.md                             @matteoaletti


@yreyricord probably it is better to keep the same person for LICENSE.md and CREDITS.md (that could be you)

rpiantanida · 2026-06-25T07:26:24Z

@yreyricord sorry, my fault, I forgot to do it.. now you should see them!

yreyricord added 3 commits June 15, 2026 17:33

chore(deps): add Dependabot configuration for weekly grouped updates

1923a85

Weekly schedule covering Python (pyproject.toml per bps-* package) Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

chore(legal): add REUSE manifest and Apache-2.0 + MIT licence texts

55c2e97

REUSE.toml covers legacy files in bulk by category. Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

yreyricord marked this pull request as ready for review June 15, 2026 15:48

yreyricord requested a review from matteoaletti June 15, 2026 15:58

yreyricord mentioned this pull request Jun 16, 2026

Ci/full pipeline foundation #30

Open

11 tasks

matteoaletti reviewed Jun 19, 2026

View reviewed changes

Comment thread .github/dependabot.yml

Comment thread .github/dependabot.yml

matteoaletti requested a review from rpiantanida June 19, 2026 09:20

chore(deps): list all bps-* paths for Dependabot pip updates

4331b6a

yreyricord mentioned this pull request Jun 19, 2026

Chore/reuse inline headers #36

Draft

11 tasks

yreyricord and others added 3 commits June 22, 2026 12:08

chore(deps): group Dependabot minor and patch updates into a single w…

cb97422

…eekly PR Signed-off-by: Yoann Rey-Ricord <yoann.rey-ricord@acri-st.fr>

fix(deps): correct Dependabot groups indentation in dependabot.yml

68b3199

Signed-off-by: yreyricord <yoann.rey-ricord@acri-st.fr>

Merge branch 'develop' into chore/repository-config-foundation

b0dddaf

rpiantanida mentioned this pull request Jun 24, 2026

[feature] Add repository configuration foundation (CODEOWNERS, Dependabot, REUSE, LICENSES) #20

Open

3 tasks

rpiantanida requested changes Jun 25, 2026

View reviewed changes

Uh oh!

Conversation

yreyricord commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Linked issue

What this PR changes

Notes for reviewers @matteoaletti

User-facing change

Documentation

Tier rationale

AI assistance disclosure

Checklist

Uh oh!

matteoaletti left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

yreyricord commented Jun 19, 2026

Uh oh!

yreyricord commented Jun 24, 2026

Uh oh!

matteoaletti commented Jun 24, 2026

Uh oh!

yreyricord commented Jun 24, 2026

Uh oh!

rpiantanida commented Jun 24, 2026

Uh oh!

yreyricord commented Jun 24, 2026

Uh oh!

rpiantanida commented Jun 24, 2026

Uh oh!

yreyricord commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

rpiantanida Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

rpiantanida Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

rpiantanida Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

rpiantanida commented Jun 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

yreyricord commented Jun 15, 2026 •

edited

Loading

yreyricord commented Jun 24, 2026 •

edited

Loading