From cb9f34d6b36a4930d8708b9ba30609c143f104a7 Mon Sep 17 00:00:00 2001 From: radu-mocanu Date: Tue, 1 Sep 2026 14:29:56 +0300 Subject: [PATCH] ci: run checks and publish on release branches Hotfix releases are cut on release/* branches, but both workflows are scoped to main: - ci.yml only fires for PRs targeting main, so a PR into a release branch gets no checks. The branch ruleset covers refs/heads/release/* and requires lint, commit-lint, Sonar and the test matrix, so those contexts sit at Expected forever and the PR cannot merge without a bypass. - cd.yml only fires on push to main, so merging a hotfix publishes nothing and every release needs a manual workflow_dispatch. Publishing stays safe: detect_publishable_packages.py only emits packages whose version is absent from PyPI, so a push to a release branch that does not bump a version publishes nothing. --- .github/workflows/cd.yml | 1 + .github/workflows/ci.yml | 2 ++ 2 files changed, 3 insertions(+) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 434e9d57d..6deeb2a3c 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -5,6 +5,7 @@ on: push: branches: - main + - 'release/**' paths: - 'packages/*/pyproject.toml' - '!packages/*/samples/**/pyproject.toml' diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1dd0471f0..2b4be4f51 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -4,9 +4,11 @@ on: pull_request: branches: - main + - 'release/**' push: branches: - main + - 'release/**' permissions: contents: read