49 lines
2 KiB
YAML
49 lines
2 KiB
YAML
# Safety net OPS18: when a PR merges to main with `Related #N`, promote Issues
|
|
# that are still awaiting their intention plan (`blocked` + docs/plans/ link)
|
|
# to `ready`. Idempotent with `pnpm agent:ready` (agent happy path). OPS71:
|
|
# the PR lives on GitHub, the issues on the Forgejo tracker — the job passes
|
|
# the PR body via PR_BODY and scripts/agent-promote-related-on-merge.mjs flips
|
|
# labels on the Forgejo API (FORGEJO_API_TOKEN; the built-in GITHUB_TOKEN
|
|
# cannot touch Forgejo issues — OPS61).
|
|
#
|
|
# Does NOT run on open PRs — only after merge — so the claim race stays closed.
|
|
# Job is gated on Related # in the body so non-plan merges skip checkout/Node.
|
|
# Fork guard: on a merged fork PR the checkout pulls the fork's own script,
|
|
# which would run with the repo PAT (RCE — same class as
|
|
# agent-pr-ready-automerge.yml).
|
|
name: Promote plan-issue Related on main merge
|
|
|
|
on:
|
|
pull_request:
|
|
types: [closed]
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
plan-issue-ready:
|
|
if: >-
|
|
github.event.pull_request.merged == true &&
|
|
github.event.pull_request.head.repo.full_name == github.repository &&
|
|
(
|
|
contains(github.event.pull_request.body, 'Related #') ||
|
|
contains(github.event.pull_request.body, 'related #') ||
|
|
contains(github.event.pull_request.body, 'RELATED #')
|
|
)
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 5
|
|
env:
|
|
FORGEJO_API_TOKEN: ${{ secrets.FORGEJO_API_TOKEN }}
|
|
PR_BODY: ${{ github.event.pull_request.body }}
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
# Script is plain Node (stdlib) — no pnpm. Disable
|
|
# package-manager-cache: setup-node@v5 defaults to true and looks for
|
|
# pnpm (packageManager in package.json) before pnpm/action-setup.
|
|
- uses: actions/setup-node@v5
|
|
with:
|
|
node-version: 24
|
|
package-manager-cache: false
|
|
- name: Promote Related #N awaiting plan → ready
|
|
run: node scripts/agent-promote-related-on-merge.mjs --pr "${{ github.event.pull_request.number }}"
|