Skip to content

Scope test-smokes-built.yml's workflow_run trigger to main - #14923

Merged
cderv merged 1 commit into
mainfrom
fix/test-smokes-built-workflow-run-branch-filter
Sep 23, 2026
Merged

cderv merged 1 commit into
mainfrom
fix/test-smokes-built-workflow-run-branch-filter

Conversation

@cderv

@cderv cderv commented Sep 22, 2026

Copy link
Copy Markdown
Member

Found while reviewing #14706 before merge: test-smokes-built.yml's workflow_run trigger has no branches filter, so any completed create-release.yml run fans out the full built-version smoke/playwright/feature-format-matrix suite across three OSes, including manual workflow_dispatch runs from non-main branches. In the last 300 create-release.yml runs, 22 ran on a non-main branch, several in bursts during packaging/signing work.

Fix

Adds branches: [main] to the workflow_run trigger, so only main-branch create-release.yml runs (scheduled or dispatched) trigger the built-version suite. Release branches (v1.9, v1.10) are excluded on purpose: they predate the binary-mode test harness added in #14706, so a workflow_run on those branches would run main's copy of the workflow against sources missing that harness and fail on every leg, not on a real defect.

The manual escape hatch is unaffected: dispatching test-smokes-built.yml directly with source=nightly and an explicit run id still works, and doesn't require the upstream run to have succeeded, only that its artifacts are non-expired.

Test Plan

  • actionlint .github/workflows/test-smokes-built.yml — clean
  • Post-merge: dispatch create-release.yml from a non-main branch, confirm it does not trigger a new test-smokes-built.yml run (checked via gh run list against a recorded baseline run id/timestamp)
  • Confirm the next scheduled nightly create-release.yml run on main still triggers test-smokes-built.yml as before

No changelog entry, CI-only, not user-visible.

@posit-snyk-bot

posit-snyk-bot commented Sep 22, 2026

Copy link
Copy Markdown
Collaborator

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

With no branches filter, any completed create-release.yml run - including
manual workflow_dispatch from a non-main branch, a common pattern during
packaging/signing work (22 such dispatches in the last 300 runs) - fans out
the full built-version smoke/playwright/feature-format-matrix suite across
three OSes. Release branches (v1.9, v1.10) are excluded from the filter
since they predate the binary-mode test harness added in #14706 and would
fail on a missing harness rather than a real defect. The manual escape
hatch (dispatching this workflow with source=nightly and an explicit
run-id) is unaffected.
@cderv
cderv force-pushed the fix/test-smokes-built-workflow-run-branch-filter branch from ce9841a to 97680a5 Compare September 23, 2026 13:23
@cderv
cderv merged commit a906d23 into main Sep 23, 2026
49 checks passed
@cderv
cderv deleted the fix/test-smokes-built-workflow-run-branch-filter branch September 23, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants