fix: pin CLI versions in all Dockerfiles using ARG for reproducible builds

.github/ISSUE_TEMPLATE/bug.yml

@@ -20,3 +20,15 @@ body:
       description: What did you expect to happen?
     validations:
       required: true
+  - type: textarea
+    attributes:
+      label: Environment
+      description: "OS, browser, Node version, or any relevant environment info"
+    validations:
+      required: false
+  - type: textarea
+    attributes:
+      label: Screenshots / Logs
+      description: Any screenshots or error logs that might help
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,16 @@
+name: Documentation
+description: Report a documentation issue or request new documentation
+labels: [documentation, needs-triage]
+body:
+  - type: textarea
+    attributes:
+      label: Description
+      description: What's wrong or missing in the documentation?
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Suggested Change
+      description: How do you think it should be improved?
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature.yml

@@ -14,3 +14,9 @@ body:
       description: Why do you need this?
     validations:
       required: true
+  - type: textarea
+    attributes:
+      label: Proposed Solution
+      description: Do you have any ideas on how this could be implemented?
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/guidance.yml

@@ -1,5 +1,5 @@
 name: Guidance
-description: Ask a question or request guidance
+description: Ask a question, request guidance, or report something you're unsure about
 labels: [guidance, needs-triage]
 body:
   - type: textarea

.github/workflows/build.yml

@@ -69,6 +69,7 @@ jobs:
           - { suffix: "-codex", dockerfile: "Dockerfile.codex", artifact: "codex" }
           - { suffix: "-claude", dockerfile: "Dockerfile.claude", artifact: "claude" }
           - { suffix: "-gemini", dockerfile: "Dockerfile.gemini", artifact: "gemini" }
+          - { suffix: "-copilot", dockerfile: "Dockerfile.copilot", artifact: "copilot" }
         platform:
           - { os: linux/amd64, runner: ubuntu-latest }
           - { os: linux/arm64, runner: ubuntu-24.04-arm }
@@ -129,6 +130,7 @@ jobs:
           - { suffix: "-codex", artifact: "codex" }
           - { suffix: "-claude", artifact: "claude" }
           - { suffix: "-gemini", artifact: "gemini" }
+          - { suffix: "-copilot", artifact: "copilot" }
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -176,6 +178,7 @@ jobs:
           - { suffix: "-codex" }
           - { suffix: "-claude" }
           - { suffix: "-gemini" }
+          - { suffix: "-copilot" }
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/issue-check.yml

@@ -0,0 +1,122 @@
+name: Issue Completeness Check
+
+on:
+  issues:
+    types: [opened, edited]
+
+concurrency:
+  group: issue-check-${{ github.event.issue.number }}
+  cancel-in-progress: true
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            const issue = context.payload.issue;
+            const body = issue.body || '';
+            const labels = issue.labels.map(l => l.name);
+            const marker = '<!-- openab-issue-check -->';
+
+            const rules = {
+              bug: ['Description', 'Steps to Reproduce', 'Expected Behavior'],
+              feature: ['Description', 'Use Case'],
+              documentation: ['Description'],
+              guidance: ['Question']
+            };
+
+            const type = Object.keys(rules).find(k => labels.includes(k));
+
+            // Find old check comment
+            const comments = await github.rest.issues.listComments({
+              ...context.repo,
+              issue_number: issue.number
+            });
+            const old = comments.data.find(c => c.body.includes(marker));
+
+            if (!type) {
+              // No template label — skip if already flagged
+              if (old && labels.includes('incomplete')) return;
+
+              const msg = `${marker}\n⚠️ Could not detect an issue template. Please make sure this issue was created using one of the available templates and that the corresponding label (\`bug\`, \`feature\`, \`documentation\`, \`guidance\`) is present.\n\nAvailable templates: Bug Report, Feature Request, Documentation, Guidance`;
+
+              if (old) {
+                await github.rest.issues.deleteComment({
+                  ...context.repo,
+                  comment_id: old.id
+                });
+              }
+              await github.rest.issues.createComment({
+                ...context.repo,
+                issue_number: issue.number,
+                body: msg
+              });
+
+              if (!labels.includes('incomplete')) {
+                await github.rest.issues.addLabels({
+                  ...context.repo,
+                  issue_number: issue.number,
+                  labels: ['incomplete', 'needs-triage']
+                });
+              }
+              return;
+            }
+
+            const missing = rules[type].filter(field => {
+              const regex = new RegExp(
+                `###\\s*${field.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*\\n+([\\s\\S]*?)(?=\\n*###|$)`
+              );
+              const match = body.match(regex);
+              if (!match) return true;
+              const content = match[1].trim();
+              return !content || content === '_No response_';
+            });
+
+            if (missing.length > 0) {
+              const list = missing.map(f => `- [ ] **${f}**`).join('\n');
+              const msg = `${marker}\n⚠️ This issue is missing the following required information and will not be processed until completed:\n\n${list}\n\nPlease edit this issue to fill in the missing fields. Thank you!\n\n> **Note:** Please do not modify the section headings (\`### ...\`) as they are used for automated validation.`;
+
+              // Delete old, create new (so user gets notified)
+              if (old) {
+                await github.rest.issues.deleteComment({
+                  ...context.repo,
+                  comment_id: old.id
+                });
+              }
+              await github.rest.issues.createComment({
+                ...context.repo,
+                issue_number: issue.number,
+                body: msg
+              });
+
+              if (!labels.includes('incomplete')) {
+                await github.rest.issues.addLabels({
+                  ...context.repo,
+                  issue_number: issue.number,
+                  labels: ['incomplete', 'needs-triage']
+                });
+              }
+            } else {
+              // All filled: remove comment + label
+              if (old) {
+                await github.rest.issues.deleteComment({
+                  ...context.repo,
+                  comment_id: old.id
+                });
+              }
+              if (labels.includes('incomplete')) {
+                try {
+                  await github.rest.issues.removeLabel({
+                    ...context.repo,
+                    issue_number: issue.number,
+                    name: 'incomplete'
+                  });
+                } catch (e) {
+                  if (e.status !== 404) throw e;
+                }
+              }
+            }

.github/workflows/release-pr.yml

@@ -44,13 +44,18 @@ jobs:
           else
             CURRENT=$(grep '^version:' charts/openab/Chart.yaml | awk '{print $2}')
             BASE="${CURRENT%%-*}"
-            IFS='.' read -r major minor patch <<< "$BASE"
-            case "${{ inputs.bump }}" in
-              major) major=$((major + 1)); minor=0; patch=0 ;;
-              minor) minor=$((minor + 1)); patch=0 ;;
-              patch) patch=$((patch + 1)) ;;
-            esac
-            VERSION="${major}.${minor}.${patch}-beta.1"
+            if [[ "$CURRENT" == *-beta.* ]]; then
+              BETA_NUM="${CURRENT##*-beta.}"
+              VERSION="${BASE}-beta.$((BETA_NUM + 1))"
+            else
+              IFS='.' read -r major minor patch <<< "$BASE"
+              case "${{ inputs.bump }}" in
+                major) major=$((major + 1)); minor=0; patch=0 ;;
+                minor) minor=$((minor + 1)); patch=0 ;;
+                patch) patch=$((patch + 1)) ;;
+              esac
+              VERSION="${major}.${minor}.${patch}-beta.1"
+            fi
           fi
           echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
           echo "::notice::Release version: ${VERSION}"