mirror of
https://github.com/openai/codex.git
synced 2026-11-01 19:33:35 +00:00
Dmitriy Kovalenko
231c8abd2f
## Why The BuildBuddy key is revoked. Temporarily keep Bazel-dependent checks from blocking CI and release only Cargo artifacts. ## What changed - Remove Bazel from the `blocking-ci` required dependencies. - Make the Bazel-backed argument comment lint and SDK jobs advisory, and stop requiring the lint job to succeed in the Rust CI results check. - Restrict release build and packaging matrices to Cargo, including Windows and provisioned macOS packages, and exclude Bazel binaries and symbols from release artifact downloads. GitOrigin-RevId: 2c0d23471bbd0ab2eb4d90d318b518d0b33db97f
74 lines
2.0 KiB
YAML
74 lines
2.0 KiB
YAML
name: blocking-ci
|
|
|
|
# This is the single entrypoint for checks that block a PR merge. It also runs
|
|
# after pushes to main so the same check family stays grouped in the Actions UI.
|
|
on:
|
|
pull_request: {}
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
# Keep reusable workflow calls alphabetized. The `required` job below is the
|
|
# version-controlled list that the main-branch ruleset should require.
|
|
bazel:
|
|
name: Bazel
|
|
uses: ./.github/workflows/bazel.yml
|
|
secrets: inherit
|
|
|
|
blob-size-policy:
|
|
name: Blob size policy
|
|
uses: ./.github/workflows/blob-size-policy.yml
|
|
secrets: inherit
|
|
|
|
cargo-deny:
|
|
name: cargo-deny
|
|
uses: ./.github/workflows/cargo-deny.yml
|
|
secrets: inherit
|
|
|
|
codespell:
|
|
name: Codespell
|
|
uses: ./.github/workflows/codespell.yml
|
|
secrets: inherit
|
|
|
|
repo-checks:
|
|
name: repo-checks
|
|
uses: ./.github/workflows/repo-checks.yml
|
|
secrets: inherit
|
|
|
|
rust-ci:
|
|
name: rust-ci
|
|
uses: ./.github/workflows/rust-ci.yml
|
|
secrets: inherit
|
|
|
|
sdk:
|
|
name: sdk
|
|
uses: ./.github/workflows/sdk.yml
|
|
secrets: inherit
|
|
|
|
required:
|
|
name: CI required
|
|
# Without `always()`, GitHub skips this job after a failed dependency and a
|
|
# required check can appear successful instead of reporting the failure.
|
|
if: ${{ always() }}
|
|
# Bazel is advisory while the BuildBuddy key is revoked. Restore its dependency
|
|
# once the suite can run without BuildBuddy.
|
|
needs:
|
|
- blob-size-policy
|
|
- cargo-deny
|
|
- codespell
|
|
- repo-checks
|
|
- rust-ci
|
|
- sdk
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
# Keep the helper on the same combined revision as the child workflows so
|
|
# the merge gate evaluates the exact candidate they validated.
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Require successful dependencies
|
|
env:
|
|
NEEDS: ${{ toJSON(needs) }}
|
|
run: python3 .github/scripts/check_ci_results.py
|