renovate[bot]
caa96c8c48
Update actions/github-script action to v9 ( #5372 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 13:04:55 +01:00
Doug
b1b0966cae
Add zizmor checks on CI. ( #5161 )
...
* Add zizmor checks on CI.
* Fix zizmor credentials warnings
* Add persist-credentials: false to action-cached-lfs-checkout too.
* Add empty permissions by default.
* Ignore pull_request_target failure and add a warning.
2026-03-05 13:54:51 +00:00
renovate[bot]
c461e8011e
Update actions/github-script action to v8 ( #4471 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-04 18:39:18 +01:00
Robin
5ee50faff8
Run the 'Prevent blocked' check whenever a PR branch is updated ( #4155 )
...
Because we're now requiring the 'Prevent blocked' check to pass before merging a PR, GitHub Actions apparently expects it to be associated with the latest Git ref of the PR's branch whenever the branch is updated. Therefore we need to re-run the workflow on the 'synchronize' event.
2025-05-29 09:53:07 +01:00
Robin
bb8b9d8967
Run the 'prevent blocked' workflow even if PR has conflicts ( #3914 )
...
See the description of pull_request versus pull_request_target documented at https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#pull_request .
2025-03-19 11:44:41 +00:00
Robin
f31a71c6e2
Prevent PRs with the X-Blocked label from being merged ( #3864 )
...
Just a small CI suggestion: X-Blocked is useful for requesting review on a change while ensuring it won't be merged until all external dependencies are accounted for, and it'd be nice to have this enforced more consistently across the org.
Adapted from matrix-js-sdk (https://github.com/matrix-org/matrix-js-sdk/blob/develop/.github/workflows/pull_request.yaml )
2025-03-04 13:01:39 +01:00