From 10565f05de957e1ad39858c8ae6425c5f7259777 Mon Sep 17 00:00:00 2001 From: chodeus Date: Tue, 21 Jul 2026 02:47:55 +0800 Subject: [PATCH] ci: fire lint/CodeQL on release-please PRs Lint and CodeQL were path-filtered to **/*.py only, so release-please PRs (which touch only .release-please-manifest.json, VERSION, and CHANGELOG.md) triggered zero checks. automerge-release.yml then blind-merged them with no CI having run at all. Add the manifest file, VERSION, and each workflow's own file to their paths filters so these PRs actually get linted/scanned. --- .github/workflows/codeql.yml | 6 ++++++ .github/workflows/lint.yml | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ab834ea..e01dd31 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -5,10 +5,16 @@ on: branches: [ "main" ] paths: - '**/*.py' + - '.release-please-manifest.json' + - 'VERSION' + - '.github/workflows/codeql.yml' pull_request: branches: [ "main" ] paths: - '**/*.py' + - '.release-please-manifest.json' + - 'VERSION' + - '.github/workflows/codeql.yml' schedule: - cron: '27 3 * * 1' diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 09d9695..e1a530b 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -5,10 +5,16 @@ on: branches: [ "main" ] paths: - '**/*.py' + - '.release-please-manifest.json' + - 'VERSION' + - '.github/workflows/lint.yml' pull_request: branches: [ "main" ] paths: - '**/*.py' + - '.release-please-manifest.json' + - 'VERSION' + - '.github/workflows/lint.yml' permissions: contents: read