name: Close Stale PRs
on:
  schedule:
    - cron: '30 1 * * *'
permissions:
  contents: read

jobs:
  stale:
    permissions:
      issues: write  # for actions/stale to close stale issues
      pull-requests: write  # for actions/stale to close stale PRs
    runs-on: ubuntu-24.04
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
        with:
          egress-policy: audit

      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
        with:
          stale-pr-message: 'This issue is stale because it has been open for 1 month with no activity. Remove stale label or comment or this will be closed in 1 month.'
          stale-issue-message: This issue is stale because it has been open for 1 month with no activity. Remove stale label or comment or this will be closed in 1 month.'
          remove-stale-when-updated: true
          exempt-pr-labels: "never-stale"
          exempt-issue-labels: "never-stale"
          # 1 month
          days-before-stale: 31
          # 1 month
          days-before-close: 31
          only-labels: 'waiting-on-response'