6 Commits

Author SHA1 Message Date
renovate[bot]
caa96c8c48 Update actions/github-script action to v9 (#5372)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 13:04:55 +01:00
Doug
b1b0966cae Add zizmor checks on CI. (#5161)
* Add zizmor checks on CI.

* Fix zizmor credentials warnings

* Add persist-credentials: false to action-cached-lfs-checkout too.

* Add empty permissions by default.

* Ignore pull_request_target failure and add a warning.
2026-03-05 13:54:51 +00:00
renovate[bot]
c461e8011e Update actions/github-script action to v8 (#4471)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-04 18:39:18 +01:00
Robin
5ee50faff8 Run the 'Prevent blocked' check whenever a PR branch is updated (#4155)
Because we're now requiring the 'Prevent blocked' check to pass before merging a PR, GitHub Actions apparently expects it to be associated with the latest Git ref of the PR's branch whenever the branch is updated. Therefore we need to re-run the workflow on the 'synchronize' event.
2025-05-29 09:53:07 +01:00
Robin
bb8b9d8967 Run the 'prevent blocked' workflow even if PR has conflicts (#3914)
See the description of pull_request versus pull_request_target documented at https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#pull_request.
2025-03-19 11:44:41 +00:00
Robin
f31a71c6e2 Prevent PRs with the X-Blocked label from being merged (#3864)
Just a small CI suggestion: X-Blocked is useful for requesting review on a change while ensuring it won't be merged until all external dependencies are accounted for, and it'd be nice to have this enforced more consistently across the org.
Adapted from matrix-js-sdk (https://github.com/matrix-org/matrix-js-sdk/blob/develop/.github/workflows/pull_request.yaml)
2025-03-04 13:01:39 +01:00