Try to stop running duplicate builds - 2nd try

Author: alitheg

.github/workflows/analyze.yml

@@ -15,7 +15,18 @@ env:
   BIOME_VERSION: '2.3.8'
 
 jobs:
+  # Skip the analysis if this commit already passed on another branch.
+  dedup:
+    uses: ./.github/workflows/dedup.yml
+    permissions:
+      actions: read
+    with:
+      workflow_file: analyze.yml
+
   analyze:
+    needs: dedup
+    # Manual dispatch always runs so we can force a re-analysis.
+    if: needs.dedup.outputs.already_built != 'true' || github.event_name == 'workflow_dispatch'
     # Trusted sources on our own runner; fork PRs on the hosted runner.
     runs-on: ${{ (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && 'self-hosted' || 'ubuntu-latest' }}
     strategy:

.github/workflows/build.yml

@@ -14,37 +14,18 @@ env:
   UV_VERSION: '0.8.8'
 
 jobs:
-  # Gate - if this exact commit already passed on another branch (recorded as a
-  # build-result status) then skip the main job below. Runs on the same runner
-  # pool as the build so we don't reintroduce a wait on the hosted queue.
+  # Skip the build if this commit already passed on another branch.
   dedup:
-    runs-on: ${{ (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && 'self-hosted' || 'ubuntu-latest' }}
+    uses: ./.github/workflows/dedup.yml
     permissions:
-      statuses: read
-    outputs:
-      already_built: ${{ steps.check.outputs.already_built }}
-    steps:
-      - name: Look for an existing build-result status on this commit
-        id: check
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          body=$(curl -fsS \
-            -H "Authorization: Bearer ${GH_TOKEN}" \
-            -H "Accept: application/vnd.github+json" \
-            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/commits/${GITHUB_SHA}/status")
-          if echo "$body" | grep -Eq '"context"[[:space:]]*:[[:space:]]*"build-result"'
-          then
-            echo "already_built=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "already_built=false" >> "$GITHUB_OUTPUT"
-          fi
+      actions: read
+    with:
+      workflow_file: build.yml
 
   test:
     needs: dedup
     permissions:
       contents: read
-      statuses: write
     # Run on our own runner for trusted sources (push/dispatch, or a same-repo
     # PR); fork PRs fall back to the hosted runner so they never touch it.
     runs-on: ${{ (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && 'self-hosted' || 'ubuntu-latest' }}
@@ -92,14 +73,3 @@ jobs:
       - name: Run Playwright end-to-end tests
         run: |
           sh tests/run-playwright.sh
-
-      - name: Record a build-result status for this commit
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          curl -fsS -X POST \
-            -H "Authorization: Bearer ${GH_TOKEN}" \
-            -H "Accept: application/vnd.github+json" \
-            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/statuses/${GITHUB_SHA}" \
-            -d "{\"state\":\"success\",\"context\":\"build-result\",\"description\":\"Build and test passed\",\"target_url\":\"${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}\"}"

.github/workflows/dedup.yml

@@ -0,0 +1,46 @@
+name: Dedup gate
+
+# Reusable gate - reports whether the calling workflow has already succeeded for
+# this commit (e.g. on another branch), so the caller can skip duplicate work.
+# It reads the run history rather than writing a commit status, so it adds
+# nothing to the commit's checks list.
+on:
+  workflow_call:
+    inputs:
+      workflow_file:
+        description: The caller's workflow file name, e.g. build.yml
+        required: true
+        type: string
+    outputs:
+      already_built:
+        description: true if this workflow already succeeded for this commit
+        value: ${{ jobs.check.outputs.already_built }}
+
+jobs:
+  check:
+    # Match the caller's runner pool so we don't reintroduce a hosted-queue wait.
+    runs-on: ${{ (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) && 'self-hosted' || 'ubuntu-latest' }}
+    permissions:
+      actions: read
+    outputs:
+      already_built: ${{ steps.check.outputs.already_built }}
+    steps:
+      - name: Look for a prior successful run of this workflow on this commit
+        id: check
+        env:
+          GH_TOKEN: ${{ github.token }}
+          WORKFLOW_FILE: ${{ inputs.workflow_file }}
+        run: |
+          count=$(curl -fsS \
+            -H "Authorization: Bearer ${GH_TOKEN}" \
+            -H "Accept: application/vnd.github+json" \
+            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/actions/workflows/${WORKFLOW_FILE}/runs?head_sha=${GITHUB_SHA}&status=success&per_page=1" \
+            | grep -oE '"total_count"[[:space:]]*:[[:space:]]*[0-9]+' \
+            | head -n1 \
+            | grep -oE '[0-9]+')
+          if [ "${count:-0}" -gt 0 ]
+          then
+            echo "already_built=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "already_built=false" >> "$GITHUB_OUTPUT"
+          fi