ci: small improvements to some workflows (deepset-ai#12034)

Author: anakin87

.github/workflows/codeql.yml

@@ -1,10 +1,17 @@
 name: CodeQL
 
 on:
+  # Skip runs that do not touch Python code
   push:
     branches: [main]
+    paths:
+      - "**/*.py"
+      - ".github/workflows/codeql.yml"
   pull_request:
     branches: [main]
+    paths:
+      - "**/*.py"
+      - ".github/workflows/codeql.yml"
   workflow_dispatch:
 
 permissions:

.github/workflows/docs-website-test-docs-snippets.yml

@@ -26,10 +26,8 @@ jobs:
       AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
       AZURE_OPENAI_AD_TOKEN: ${{ secrets.AZURE_OPENAI_AD_TOKEN }}
       AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
-      CORE_AZURE_CS_ENDPOINT: ${{ secrets.CORE_AZURE_CS_ENDPOINT }}
       HF_API_TOKEN: ${{ secrets.HUGGINGFACE_API_KEY }}
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-      SERPERDEV_API_KEY: ${{ secrets.SERPERDEV_API_KEY }}
 
     steps:
       - name: Checkout

.github/workflows/e2e.yml

@@ -17,9 +17,6 @@ env:
   PYTHON_VERSION: "3.10"
   OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
   HATCH_VERSION: "1.16.5"
-  # we use HF_TOKEN instead of HF_API_TOKEN to work around a Hugging Face bug
-  # see https://github.com/deepset-ai/haystack/issues/9552
-  HF_TOKEN: ${{ secrets.HUGGINGFACE_API_KEY }}
 
 permissions:
   contents: read

.github/workflows/slow.yml

@@ -11,7 +11,6 @@ name: Slow Integration Tests
 
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  HF_API_TOKEN: ${{ secrets.HUGGINGFACE_API_KEY }}
   PYTHON_VERSION: "3.10"
   HATCH_VERSION: "1.16.5"
   HAYSTACK_MPS_ENABLED: false
@@ -75,7 +74,7 @@ jobs:
       github.event_name == 'workflow_dispatch' ||
       github.event_name == 'schedule' ||
       (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'run-slow-tests')) ||
-      (github.event_name == 'push' && github.ref == 'refs/heads/v[0-9].*[0-9].x') ||
+      github.event_name == 'push' ||
       (needs.check-if-changed.outputs.changes == 'true')
 
     strategy:

.github/workflows/tests.yml

@@ -16,8 +16,9 @@ on:
       - "v[0-9].*[0-9].x"
     # when we push, we do not need to satisfy Branch Protection rules, so we can ignore PRs that just change docs
     paths-ignore:
-      - "docs/**"
       - "docs-website/**"
+      - "**/*.md"
+      - "images/**"
   pull_request:
     types:
       - opened
@@ -26,11 +27,8 @@ on:
 
 env:
   OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-  CORE_AZURE_CS_ENDPOINT: ${{ secrets.CORE_AZURE_CS_ENDPOINT }}
-  CORE_AZURE_CS_API_KEY: ${{ secrets.CORE_AZURE_CS_API_KEY }}
   AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }}
   AZURE_OPENAI_ENDPOINT: ${{ secrets.AZURE_OPENAI_ENDPOINT }}
-  HF_API_TOKEN: ${{ secrets.HUGGINGFACE_API_KEY }}
   PYTHON_VERSION: "3.10"
   HATCH_VERSION: "1.16.5"
 

.github/workflows/update-platform-components.yml

@@ -1,9 +1,8 @@
 name: Update Platform Components Table
 
 on:
-  push:
-    branches:
-      - main
+  schedule:
+    - cron: "0 2 * * *"
   workflow_dispatch:
 
 concurrency: