github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 09:14:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Run workflows when labelled with "Rebuild: Unchanged"

Browse Source
This commit is contained in:
Michael B. Gale
2026-09-10 17:37:59 +01:00
parent 065b8dea87
commit f31b0a8ffd
57 changed files with 514 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/__all-platform-bundle.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: windows-latest
version: nightly-latest
name: All-platform bundle
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__analysis-kinds.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -59,7 +64,9 @@ jobs:
version: nightly-latest
analysis-kinds: risk-assessment
name: Analysis kinds
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__analyze-ref-input.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-latest
version: default
name: "Analyze: 'ref' and 'sha' from inputs"
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__autobuild-action.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -51,7 +56,9 @@ jobs:
- os: windows-latest
version: linked
name: autobuild-action
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__autobuild-direct-tracing-with-working-dir.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -53,7 +58,9 @@ jobs:
- os: windows-latest
version: nightly-latest
name: Autobuild direct tracing (custom working directory)
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__autobuild-working-dir.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Autobuild working directory
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__build-mode-autobuild.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -53,7 +58,9 @@ jobs:
- os: windows-latest
version: nightly-latest
name: Build mode autobuild
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__build-mode-manual.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Build mode manual
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__build-mode-none.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Build mode none
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__build-mode-rollback.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Build mode rollback
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__bundle-from-nightly.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: 'Bundle: From nightly'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__bundle-from-toolcache.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: toolcache
name: 'Bundle: From toolcache'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__bundle-toolcache.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: windows-latest
version: linked
name: 'Bundle: Caching checks'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__cleanup-db-cluster-dir.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Clean up database cluster directory
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__config-export.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Config export
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__config-input.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Config input
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__cpp-deptrace-disabled.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'C/C++: disabling autoinstalling dependencies (Linux)'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__cpp-deptrace-enabled-on-macos.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: 'C/C++: autoinstalling dependencies is skipped (macOS)'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__cpp-deptrace-enabled.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'C/C++: autoinstalling dependencies (Linux)'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__diagnostics-export.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Diagnostic export
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__export-file-baseline-information.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: windows-latest
version: nightly-latest
name: Export file baseline information
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__extractor-ram-threads.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Extractor ram and threads options test
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__global-proxy.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Proxy test
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-custom-queries.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -59,7 +64,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Go: Custom queries'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-indirect-tracing-workaround-diagnostic.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -47,7 +52,9 @@ jobs:
- os: ubuntu-latest
version: default
name: 'Go: diagnostic when Go is changed after init step'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-indirect-tracing-workaround-no-file-program.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -47,7 +52,9 @@ jobs:
- os: ubuntu-latest
version: default
name: 'Go: diagnostic when `file` is not installed'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-indirect-tracing-workaround.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -47,7 +52,9 @@ jobs:
- os: ubuntu-latest
version: default
name: 'Go: workaround for indirect tracing'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-tracing-autobuilder.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -67,7 +72,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: 'Go: tracing with autobuilder step'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-tracing-custom-build-steps.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -67,7 +72,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: 'Go: tracing with custom build steps'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__go-tracing-legacy-workflow.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -67,7 +72,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: 'Go: tracing with legacy workflow'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__init-with-registries.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Packaging: Download using registries'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
packages: read

11
.github/workflows/__javascript-source-root.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Custom source root
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__job-run-uuid-sarif.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Job run UUID added to SARIF
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__language-aliases.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Language aliases
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__linux-arm64.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-24.04-arm
version: nightly-latest
name: Linux Arm64
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__local-bundle.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Local CodeQL bundle
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__multi-language-autodetect.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -91,7 +96,9 @@ jobs:
- os: macos-latest-xlarge
version: nightly-latest
name: Multi-language repository
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__overlay-init-fallback.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -39,7 +44,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Overlay database init fallback
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__packaging-codescanning-config-inputs-js.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Packaging: Config and input passed to the CLI'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__packaging-config-inputs-js.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Packaging: Config and input'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__packaging-config-js.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Packaging: Config file'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__packaging-inputs-js.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: 'Packaging: Action input'
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__remote-config.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -59,7 +64,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Remote config file
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__resolve-environment-action.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Resolve environment
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__rubocop-multi-language.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: ubuntu-latest
version: default
name: RuboCop multi-language
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__ruby.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -47,7 +52,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: Ruby analysis
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__rust.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -45,7 +50,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Rust analysis
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__split-workflow.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -67,7 +72,9 @@ jobs:
- os: macos-latest
version: nightly-latest
name: Split workflow
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__start-proxy.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: windows-latest
version: linked
name: Start proxy
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__submit-sarif-failure.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -41,7 +46,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Submit SARIF after failure
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: write

11
.github/workflows/__swift-autobuild.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -37,7 +42,9 @@ jobs:
- os: macos-latest-xlarge
version: nightly-latest
name: Swift analysis using autobuild
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__swift-custom-build.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -61,7 +66,9 @@ jobs:
- os: macos-latest-xlarge
version: nightly-latest
name: Swift analysis using a custom build command
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__unset-environment.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -59,7 +64,9 @@ jobs:
- os: ubuntu-latest
version: nightly-latest
name: Test unsetting environment variables
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__upload-ref-sha-input.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-latest
version: default
name: "Upload-sarif: 'ref' and 'sha' from inputs"
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__upload-sarif.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -64,7 +69,9 @@ jobs:
version: default
analysis-kinds: code-scanning,code-quality
name: Test different uses of `upload-sarif`
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

11
.github/workflows/__with-checkout-path.yml generated vendored
View File

@@ -12,7 +12,12 @@ on:
branches:
- main
- releases/v*
pull_request: {}
pull_request:
types:
- opened
- synchronize
- reopened
- labeled
merge_group:
types:
- checks_requested
@@ -57,7 +62,9 @@ jobs:
- os: ubuntu-latest
version: linked
name: Use a custom `checkout_path`
if: github.triggering_actor != 'dependabot[bot]'
if: |-
(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
github.event.label.name == 'Rebuild: Unchanged'
permissions:
contents: read
security-events: read

14
pr-checks/sync.ts
View File

@@ -503,8 +503,12 @@ function getSetupSteps(checkSpecification: JobSpecification): {
* Condition used to prevent jobs from running for Dependabot PRs
* to avoid unnecessary runs if the "Rebuild" workflow ends up
* changing the JavaScript bundles.
*
* Also allows jobs to run if a PR was labelled with "Rebuild: Unchanged".
*/
const dependabotCheck = "github.triggering_actor != 'dependabot[bot]'";
const jobRunCheck = new yaml.Scalar(
"(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||\ngithub.event.label.name == 'Rebuild: Unchanged'",
);
/**
* Generates an Actions job from the `checkSpecification`.
@@ -579,7 +583,7 @@ function generateJob(
},
},
name: checkSpecification.name,
if: dependabotCheck,
if: jobRunCheck,
permissions: {
contents: "read",
"security-events": "read",
@@ -629,7 +633,7 @@ function generateValidationJob(
const validationJob: Record<string, any> = {
name: jobSpecification.name,
if: dependabotCheck,
if: jobRunCheck,
needs: [checkName],
permissions: {
contents: "read",
@@ -772,7 +776,9 @@ function main(): void {
push: {
branches: ["main", "releases/v*"],
},
pull_request: {},
pull_request: {
types: ["opened", "synchronize", "reopened", "labeled"],
},
merge_group: {
types: ["checks_requested"],
},