exclude some tokens dependent jobs on PRs

Author: machine424

.github/workflows/cmo-make-targets.yaml

@@ -62,13 +62,15 @@ jobs:
           git checkout -- jsonnet/jsonnetfile.lock.json;
         fi
     - name: Get app token for pull request creation
+      if: github.event_name != 'pull_request'
       id: pr
       uses: actions/create-github-app-token@v3
       with:
         app-id: ${{ secrets.pr-app-id }}
         private-key: ${{ secrets.pr-app-private-key }}
         owner: openshift
     - name: Get app token for repository cloning
+      if: github.event_name != 'pull_request'
       id: cloner
       uses: actions/create-github-app-token@v3
       with:
@@ -80,6 +82,7 @@ jobs:
       run: |
         echo sandbox="$(echo ${{ inputs.make-targets }} | sed 's/ /-/g')" >> "$GITHUB_OUTPUT"
     - name: Create Pull Request
+      if: github.event_name != 'pull_request'
       id: create-pr
       uses: peter-evans/create-pull-request@v8
       with:
@@ -96,6 +99,7 @@ jobs:
         branch-token: ${{ steps.cloner.outputs.token }}
         maintainer-can-modify: false
     - name: Compose slack message body
+      if: github.event_name != 'pull_request' && success()
       id: slack-message
       run: |
         if [ "${{ steps.create-pr.outputs.pull-request-url }}" == "" ]; then
@@ -107,7 +111,7 @@ jobs:
         fi
     - uses: slackapi/slack-github-action@v3
       continue-on-error: true
-      if: success()
+      if: github.event_name != 'pull_request' && success()
       with:
         webhook: ${{ secrets.slack-webhook-url }}
         webhook-type: incoming-webhook
@@ -120,7 +124,7 @@ jobs:
           }
     - uses: slackapi/slack-github-action@v3
       continue-on-error: true
-      if: failure()
+      if: github.event_name != 'pull_request' && failure()
       with:
         webhook: ${{ secrets.slack-webhook-url }}
         webhook-type: incoming-webhook

.github/workflows/merge-prometheus-operator.yaml

@@ -41,7 +41,7 @@ jobs:
   # and other generated assets stay in sync with the upstream release.
   check-prometheus-operator-jsonnet-pin:
     needs: prometheus-operator-merge
-    # Run even if the merge job fails (e.g. due to conflicts).
+    # Run even if the merge job fails (e.g. due to conflicts). We still need a PR anyway.
     if: always() && needs.prometheus-operator-merge.outputs.upstream-release != ''
     runs-on: ubuntu-latest
     outputs:
@@ -96,11 +96,12 @@ jobs:
         Updates the prometheus-operator jsonnet branch pin in
         [`jsonnet/jsonnetfile.json`](https://github.com/openshift/cluster-monitoring-operator/blob/main/jsonnet/jsonnetfile.json)
         to match the latest upstream release, and regenerates all
-        assets including prometheus-operator CRDs YAMLs.
+        assets (CRDs YAMLs, etc.).
 
         Note: the [downstream openshift/prometheus-operator](https://github.com/openshift/prometheus-operator/blob/main/VERSION)
         may still be on an older version.
-        That is not necessarily a blocker for this PR.
+        That is not necessarily a blocker; in fact, landing this PR
+        first may unblock the downstream fork bump.
     secrets:
       pr-app-id: ${{ secrets.APP_ID }}
       pr-app-private-key: ${{ secrets.APP_PRIVATE_KEY }}