Skip to content

fix: let the release pull request receive its required checks - #4

Merged
Mearman merged 1 commit into
mainfrom
ci/stage-release-with-deploy-key
Oct 10, 2026
Merged

Mearman merged 1 commit into
mainfrom
ci/stage-release-with-deploy-key

Conversation

@Mearman

@Mearman Mearman commented Oct 10, 2026

Copy link
Copy Markdown
Member

The release commit's default message carried [skip ci], which makes GitHub skip push and pull_request workflows for the head commit, so the staged release PR could never report Required Checks. The GITHUB_TOKEN push has the same effect on its own. This drops [skip ci] from the default, pushes the release branch from this repo's staging job with a deploy key (secret RELEASE_DEPLOY_KEY, read-write deploy key on the repo), runs CI on release/** pushes, and stops the staging job running on the merged release commit itself.

Verification after merge: the staging run re-pushes release/1.0.0 and the PR should show Required Checks.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-10T14:58:22.998738Z 00e97d0 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

GitHub skips push and pull_request workflows for a head commit whose message carries its
skip-workflow token, so the default release commit message kept the staged pull request from
ever reporting a required check. The default no longer carries the token.

A release branch pushed with GITHUB_TOKEN also starts no workflow. This repository's own staging
job now checks out with a deploy key so the push runs CI, CI runs on release/** pushes, and the
job skips the push that lands the merged release commit.
@Mearman
Mearman force-pushed the ci/stage-release-with-deploy-key branch from 56df96a to 00e97d0 Compare October 10, 2026 14:47
@Mearman

Mearman commented Oct 10, 2026

Copy link
Copy Markdown
Member Author

@codex security review

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review

Security review completed. No security issues were found in this pull request.

Reviewed commit: 00e97d02a3

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@Mearman
Mearman merged commit 2f3828e into main Oct 10, 2026
7 checks passed
@Mearman
Mearman deleted the ci/stage-release-with-deploy-key branch October 10, 2026 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant