Skip to content
- When: 05:00 UTC
- Who: GitHub Actions (
hq-private/.github/workflows/collect-stats.yml, hq-private/scripts/collect_stats.py)
- Output:
hq-private/data/stats/YYYY-MM-DD.json
- Report: private (raw data); its public aggregates feed the site’s Usage pages
- Must stay daily: GitHub traffic data is only kept for 14 days.
- When: 05:40 UTC, after the stats snapshot; also on any push that changes docs or
site/
- Who: GitHub Actions (
.github/workflows/site.yml)
- Output: https://hq.rhizomatics.org.uk/ — docs, public reports and per-component usage
- Report: public (it is the site)
- Who: infra-lead
- Output:
hq-private/reports/dependabot/YYYY-MM-DD.md
- Report: private by exception
- Merges trusted bumps (GitHub-owned, hassfest/HACS and
rhizomatics/.github actions; Astral and
oxc tooling) once CI is green, never major versions; closes bumps of dependencies inherited from Home Assistant or
SignalK. Standing approval from the maintainer; everything else waits for the PR report.
- Who: pm
- Output:
hq-private/reports/support-sweep/YYYY-MM-DD.md
- Report: private
- Issues and discussions waiting on a maintainer reply, ranked, with draft replies.
- Who: infra-lead
- Output:
hq-private/reports/security/YYYY-MM-DD.md
- Report: private
- Escalates: issue labelled
security-escalation in rhizomatics/hq-private
- Excludes purely transitive vulnerabilities from Home Assistant / SignalK.
- Who: pm, handing each issue to the persona that owns its label
- Output:
hq-private/reports/decisions/YYYY-MM-DD.md, only when something was picked up
- Report: private
- Acts on the maintainer’s comments on open hq issues (approvals, choices), then posts a
follow-up comment on each issue. You can still ask in a session for anything urgent.
- Who: marketing
- Output:
hq-private/reports/forums/YYYY-MM-DD.md
- Report: private
- Runs daily but only checks sources due by their own cadence (see
reference/*_discussion.md).
Ends with the manual checks due that day.
