Skip to content

Infra: Require CI checks before auto-merge - #3832

Open
kevinjqliu wants to merge 4 commits into
apache:mainfrom
kevinjqliu:kevinjqliu/codex-required-ci-gates
Open

Infra: Require CI checks before auto-merge#3832
kevinjqliu wants to merge 4 commits into
apache:mainfrom
kevinjqliu:kevinjqliu/codex-required-ci-gates

Conversation

@kevinjqliu

@kevinjqliu kevinjqliu commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

Rationale for this change

PR #3815 enabled auto-merge, but main has no required status-check contexts. Adding them is necessary for two reasons:

  1. Auto-merge waits only for required checks; without them, GitHub can merge while CI is still running.
  2. GitHub shows the auto-merge option only while immediate merging is blocked. Once review and branch-update requirements are satisfied, required CI checks provide that blocker; otherwise GitHub shows the regular merge action instead.

When a pull_request path filter skips an entire workflow, GitHub does not report its check. Branch protection then waits indefinitely for that required check, preventing auto-merge. Removing the path filters ensures every required check reports a result on every PR.

Are these changes tested?

Yes. Workflow linting, YAML validation, and commit hooks pass.

Are there any user-facing changes?

No.

Copilot AI lite review requested due to automatic review settings August 22, 2026 16:55

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s CI/merge infrastructure so GitHub auto-merge cannot merge a PR until merge-critical workflows have actually produced the expected check contexts.

Changes:

  • Removes pull_request.paths filters from key workflows so they always run on PRs (preventing “required check pending because workflow was skipped”).
  • Adds an explicit required_status_checks.contexts allowlist for main in .asf.yaml to require specific CI check contexts before merging.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
.github/workflows/python-integration.yml Removes PR path filters so integration suites always run on PRs.
.github/workflows/python-ci.yml Removes PR path filters so unit/lint/Windows/smoke checks always run on PRs.
.github/workflows/check-md-link.yml Removes PR path filters so markdown link checking runs on all PRs.
.asf.yaml Explicitly enumerates required CI check contexts for branch protection / auto-merge gating.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .asf.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants