mirror of
https://github.com/openai/codex.git
synced 2026-08-23 13:09:46 +00:00
965b9f263a
## Why Checking only the pull request head can miss conflicts with changes already on `main`. ## What changed Remove explicit pull request head refs from required workflow checkouts so GitHub Actions checks out the synthetic merge commit by default. Keep the blocking gate on the same combined revision as the child workflows it evaluates, and document the merge-commit policy in the workflow README. GitOrigin-RevId: dc357caa5dc43f46b9b9a0edea6ee560b4fe8efb
73 lines
1.9 KiB
YAML
73 lines
1.9 KiB
YAML
name: blocking-ci
|
|
|
|
# This is the single entrypoint for checks that block a PR merge. It also runs
|
|
# after pushes to main so the same check family stays grouped in the Actions UI.
|
|
on:
|
|
pull_request: {}
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
# Keep reusable workflow calls alphabetized. The `required` job below is the
|
|
# version-controlled list that the main-branch ruleset should require.
|
|
bazel:
|
|
name: Bazel
|
|
uses: ./.github/workflows/bazel.yml
|
|
secrets: inherit
|
|
|
|
blob-size-policy:
|
|
name: Blob size policy
|
|
uses: ./.github/workflows/blob-size-policy.yml
|
|
secrets: inherit
|
|
|
|
cargo-deny:
|
|
name: cargo-deny
|
|
uses: ./.github/workflows/cargo-deny.yml
|
|
secrets: inherit
|
|
|
|
codespell:
|
|
name: Codespell
|
|
uses: ./.github/workflows/codespell.yml
|
|
secrets: inherit
|
|
|
|
repo-checks:
|
|
name: repo-checks
|
|
uses: ./.github/workflows/repo-checks.yml
|
|
secrets: inherit
|
|
|
|
rust-ci:
|
|
name: rust-ci
|
|
uses: ./.github/workflows/rust-ci.yml
|
|
secrets: inherit
|
|
|
|
sdk:
|
|
name: sdk
|
|
uses: ./.github/workflows/sdk.yml
|
|
secrets: inherit
|
|
|
|
required:
|
|
name: CI required
|
|
# Without `always()`, GitHub skips this job after a failed dependency and a
|
|
# required check can appear successful instead of reporting the failure.
|
|
if: ${{ always() }}
|
|
needs:
|
|
- bazel
|
|
- blob-size-policy
|
|
- cargo-deny
|
|
- codespell
|
|
- repo-checks
|
|
- rust-ci
|
|
- sdk
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
# Keep the helper on the same combined revision as the child workflows so
|
|
# the merge gate evaluates the exact candidate they validated.
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Require successful dependencies
|
|
env:
|
|
NEEDS: ${{ toJSON(needs) }}
|
|
run: python3 .github/scripts/check_ci_results.py
|