ci: allow dependabot PRs to skip deployments to cloudflare#1235
ci: allow dependabot PRs to skip deployments to cloudflare#1235fhammerschmidt merged 7 commits intomasterfrom
Conversation
GitHub restricts secrets for pull_request events triggered by dependabot[bot]. Switch dependabot PRs to pull_request_target, which runs in the base branch context and has access to secrets. - Add pull_request_target trigger - Route dependabot PRs through pull_request_target only - Route all other PRs through pull_request only (no double runs) - Checkout PR head SHA for pull_request_target events
…nto vlk/allow-dependabot-to-merge
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…ang/rescript-lang.org into vlk/allow-dependabot-to-merge
jderochervlk
changed the title
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Cloudflare deploymentDeployement ID: ebe8e590-bda1-4041-b6cc-b30f3c016503 ⛅️ wrangler 4.63.0 (update available 4.81.0) ✨ Uploading _redirects |
This pull request updates the deployment workflow to prevent certain steps from running when the workflow is triggered by Dependabot. Specifically, the deployment and pull request comment steps will now be skipped if the actor is Dependabot.
Workflow condition updates:
.github/workflows/deploy.ymlso it does not run when the workflow is triggered bydependabot[bot].dependabot[bot].