ci(v2): authorize stacked migration PRs

Treat DEV-v2 as an authorized development base in build, artifact-comment, and PR restriction workflows. GitHub evaluates pull_request policy from the base branch, so child PR changes cannot authorize themselves.

This allows PRs 648 and 649 to run validation without weakening restrictions for unrelated target branches. Workflow diffs and git diff checks pass.
This commit is contained in:
Pascal André 2026-08-19 00:51:54 +02:00
parent 4c65e60fa9
commit fe12ff0a78
No known key found for this signature in database
3 changed files with 4 additions and 4 deletions

View file

@ -32,7 +32,7 @@ jobs:
shell: bash
run: |
set -euo pipefail
if [ "$BASE_REF" = "dev" ]; then
if [ "$BASE_REF" = "dev" ] || [ "$BASE_REF" = "DEV-v2" ]; then
echo "allowed=true" >> "$GITHUB_OUTPUT"
exit 0
fi

View file

@ -32,7 +32,7 @@ jobs:
shell: bash
run: |
set -euo pipefail
if [ "$BASE_REF" = "dev" ]; then
if [ "$BASE_REF" = "dev" ] || [ "$BASE_REF" = "DEV-v2" ]; then
echo "allowed=true" >> "$GITHUB_OUTPUT"
exit 0
fi

View file

@ -14,7 +14,7 @@ permissions:
jobs:
restrict-non-dev-prs:
if: ${{ github.event.pull_request.base.ref != 'dev' }}
if: ${{ github.event.pull_request.base.ref != 'dev' && github.event.pull_request.base.ref != 'DEV-v2' }}
runs-on: ubuntu-latest
env:
ALLOWED_ACTORS: ${{ vars.ALLOWED_NON_DEV_PR_ACTORS }}
@ -39,7 +39,7 @@ jobs:
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
gh pr comment "$PR_NUMBER" --body "Thanks for the contribution. PRs need to target \`dev\` branch. Please retarget this PR to the dev branch"
gh pr comment "$PR_NUMBER" --body "Thanks for the contribution. PRs need to target the \`dev\` or \`DEV-v2\` branch. Please retarget this PR to an authorized development branch."
- name: Close unauthorized PR
if: ${{ steps.auth.outputs.authorized != 'true' }}