Fix CS8629, remove stale Infrastructure project reference, remove conflicting CodeQL workflow, replace insecure `new Random()` #901

	name: PR Auto-Label and Assign Reviewers

	on:
	pull_request:
	types: [opened, synchronize, reopened, edited]

	permissions:
	pull-requests: write
	contents: read

	jobs:
	label-pr:
	name: Auto-Label PR
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Label PR based on files changed
	uses: actions/labeler@v6
	with:
	repo-token: "${{ secrets.GITHUB_TOKEN }}"
	configuration-path: .github/labeler.yml
	sync-labels: true

	size-label:
	name: Add Size Label
	runs-on: ubuntu-latest
	steps:
	- name: Label PR by size
	uses: codelytv/pr-size-labeler@v1
	with:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	xs_label: "size/XS"
	xs_max_size: 10
	s_label: "size/S"
	s_max_size: 100
	m_label: "size/M"
	m_max_size: 500
	l_label: "size/L"
	l_max_size: 1000
	xl_label: "size/XL"
	fail_if_xl: false
	message_if_xl: >
	This PR is quite large. Consider breaking it into smaller PRs for easier review.
	files_to_ignore: \|
	"*.lock"
	"package-lock.json"
	"*.md"

	assign-reviewers:
	name: Assign Reviewers
	runs-on: ubuntu-latest
	if: github.event.action == 'opened'
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Auto-assign reviewers
	uses: kentaro-m/[email protected]
	with:
	configuration-path: .github/auto-assign.yml

	# NOTE: PR title validation (conventional commits) has been removed from this initial PR
	# to avoid self-blocking. Once the team adopts conventional commits format, consider
	# adding a separate workflow with amannn/action-semantic-pull-request@v5
	# See: https://www.conventionalcommits.org/

Provide feedback