Skip to content

Stop suppressing every workflow on the version commit - #1878

Merged
flowzone-app[bot] merged 1 commit into
masterfrom
kyle/version-commit-no-skip-ci
Aug 10, 2026
Merged

Stop suppressing every workflow on the version commit#1878
flowzone-app[bot] merged 1 commit into
masterfrom
kyle/version-commit-no-skip-ci

Conversation

@klutchell

Copy link
Copy Markdown
Contributor

The version commit that versioned_source pushes carried [skip ci]. GitHub applies skip directives repository-wide rather than per-workflow, so it also silenced downstream pipelines that key deployments off pushes to the default branch (balena-os).

Replace the directive with a Flowzone-version-commit trailer and veto the re-entrant run inside Flowzone instead, so only Flowzone skips. Every job lists event_types in its needs, directly or transitively, which makes that job's if: the single point able to veto a whole run. Two independent signals, because either can be absent: the app's sender login covers any push the app makes, and the trailer covers the legacy FLOWZONE_TOKEN path where the pusher is a human account.

The veto is required rather than a cost saving. balena_publish, website_publish and custom_always gate only on trusted, which is true for any push, so a self-triggered run would push a second balena release and redeploy the Cloudflare Pages site.

Change-type: patch

The version commit that versioned_source pushes carried a GitHub skip-ci
directive. GitHub applies those repository-wide rather than per-workflow, so it
also silenced downstream pipelines that key deployments off pushes to the
default branch (balena-os).

Replace the directive with a Flowzone-version-commit trailer and veto the
re-entrant run inside Flowzone instead, so only Flowzone skips. Every job
lists event_types in its needs, directly or transitively, which makes that
job's if: the single point able to veto a whole run. Two independent signals,
because either can be absent: the app's sender login covers any push the app
makes, and the trailer covers the legacy FLOWZONE_TOKEN path where the pusher
is a human account.

The veto is required rather than a cost saving. balena_publish,
website_publish and custom_always gate only on `trusted`, which is true for
any push, so a self-triggered run would push a second balena release and
redeploy the Cloudflare Pages site.

Change-type: patch
Signed-off-by: Kyle Harding <kyle@balena.io>
@flowzone-app

flowzone-app Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Website deployed to CF Pages, 👀 preview link https://581d6552.flowzone.pages.dev

@flowzone-app
flowzone-app Bot enabled auto-merge August 10, 2026 13:14

@shaunmulligan shaunmulligan left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@flowzone-app
flowzone-app Bot merged commit 6b9f2a5 into master Aug 10, 2026
71 checks passed
@flowzone-app
flowzone-app Bot deleted the kyle/version-commit-no-skip-ci branch August 10, 2026 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants