mirror of
https://github.com/pchuan98/codex.git
synced 2026-07-01 00:31:56 +08:00
Adam Perry @ OpenAI
1168254bd9
## Why It's hard to change the set of required jobs when they're managed in the GitHub UI, and when each workflow is responsible for choosing it's own scheduling it's easy to end up with skew between what we enforce on PRs vs. on main. ## What - add a `blocking-ci` caller workflow, triggered by pull requests and pushes to `main`, for Bazel, blob size, cargo-deny, Codespell, `repo-checks`, rust CI, and SDK CI - add an `always()` terminal job named `CI required` that fails unless every called workflow succeeds - add a `postmerge-ci` caller workflow for `rust-ci-full` and `v8-canary`, with a terminal `Postmerge CI results` job - centralize V8 relevance detection in `v8_canary_changes.py`; unrelated PR and postmerge runs execute metadata only and skip the expensive build matrices - leave `v8-canary` outside the blocking gate and leave the external `cla` check independent ## Rollout A repository admin must replace the existing required GitHub Actions contexts with `CI required` in the main-branch ruleset. Retain `cla` as a separate required check. Until that change is coordinated, this PR cannot satisfy the old standalone check names. In-flight PRs will need to be rebased after this lands.
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
name: postmerge-ci
|
|
|
|
# This is the single entrypoint for main-only CI that is intentionally outside
|
|
# the merge-blocking suite. It keeps the broader postmerge signal in one run.
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
# Keep reusable workflow calls alphabetized. Each child retains its own
|
|
# workflow_dispatch trigger so maintainers can rerun flaky suites directly.
|
|
rust-ci-full:
|
|
name: rust-ci-full
|
|
uses: ./.github/workflows/rust-ci-full.yml
|
|
secrets: inherit
|
|
|
|
v8-canary:
|
|
name: v8-canary
|
|
uses: ./.github/workflows/v8-canary.yml
|
|
secrets: inherit
|
|
|
|
results:
|
|
name: Postmerge CI results
|
|
needs:
|
|
- rust-ci-full
|
|
- v8-canary
|
|
if: ${{ always() }}
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
# Postmerge runs use the pushed main commit, so this helper always comes
|
|
# from the same revision that defined the parent workflow.
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
ref: ${{ github.sha }}
|
|
persist-credentials: false
|
|
|
|
- name: Require successful dependencies
|
|
env:
|
|
NEEDS: ${{ toJSON(needs) }}
|
|
run: python3 .github/scripts/check_ci_results.py
|