From 3dae90698f5cacbd244ad2317a24d20de13a1809 Mon Sep 17 00:00:00 2001 From: Mahmoud Mabrouk Date: Wed, 22 Jul 2026 23:37:09 +0200 Subject: [PATCH] ci(website): preview skips Dependabot PRs, fires on ready_for_review MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dependabot PRs run without repository secrets by GitHub policy, so the preview deploy can never succeed there — skip instead of failing red. Also run when a draft flips to ready, which previously produced no run. Claude-Session: https://claude.ai/code/session_013Qe1Vf2yvj33BVd5W1q7HB --- .github/workflows/15-website-preview.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/15-website-preview.yml b/.github/workflows/15-website-preview.yml index 43f23cfee8..933c858c8b 100644 --- a/.github/workflows/15-website-preview.yml +++ b/.github/workflows/15-website-preview.yml @@ -2,7 +2,7 @@ name: "15 - website preview" on: pull_request: - types: [opened, synchronize, reopened] + types: [opened, synchronize, reopened, ready_for_review] paths: - 'website/**' - '.github/workflows/15-website-preview.yml' @@ -30,10 +30,13 @@ jobs: name: Build and deploy preview runs-on: ubuntu-latest # Fork PRs get no secrets: skip when the head repo is not this repo. + # Dependabot PRs run without repository secrets (GitHub policy), so the + # deploy could never succeed there; skip them cleanly instead of failing. if: >- github.event_name == 'workflow_dispatch' || (github.event.pull_request.head.repo.full_name == github.repository && - !github.event.pull_request.draft) + !github.event.pull_request.draft && + github.actor != 'dependabot[bot]') env: PR_NUMBER: ${{ github.event.pull_request.number || inputs.pr_number }} steps: