Merge pull request #740 from camunda/ci/no-duplicate-ci-on-main-merge

ci: drop CI workflow on push to main (Release workflow covers it)

Author: jwulf

.github/workflows/ci.yml

@@ -1,14 +1,13 @@
 name: CI
 
 on:
-  # Push triggers act as a stability gate: they run on `main` (post-merge,
-  # including SaaS jobs) and on `stable/**` branches (release stability).
-  # Feature branches are covered by the `pull_request` trigger, so listing
-  # them here would cause duplicate (push) + (pull_request) runs on the
-  # same commit.
+  # Push trigger acts as a stability gate for `stable/**` branches only.
+  # Merges to `main` are handled by the Release workflow (which runs the
+  # full release pipeline including its own validation), so we don't
+  # double-up by also running CI here. Feature branches are covered by
+  # the `pull_request` trigger.
   push:
     branches:
-      - main
       - "stable/**"
   pull_request:
 
@@ -135,78 +134,3 @@ jobs:
         if: always()
         run: docker compose -f docker/8.9/docker-compose.yaml down
 
-  # SaaS integration tests hit real SaaS endpoints and require environment
-  # secrets. To protect secret material and avoid running untrusted code
-  # against production-like infrastructure, these only run on pushes to
-  # `main` — i.e. after a PR has been reviewed and merged.
-  saas_integration:
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    environment: integration
-    steps:
-      - name: Check out the repo
-        uses: actions/checkout@v6
-
-      - name: Use Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: "22"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run Integration Tests
-        run: |
-          npm run test:8.7:saas
-        env:
-          ZEEBE_REST_ADDRESS: ${{ vars.ZEEBE_REST_ADDRESS }}
-          ZEEBE_GRPC_ADDRESS: ${{ vars.ZEEBE_GRPC_ADDRESS }}
-          ZEEBE_CLIENT_ID: ${{ secrets.ZEEBE_CLIENT_ID }}
-          ZEEBE_AUTHORIZATION_SERVER_URL: ${{ vars.ZEEBE_AUTHORIZATION_SERVER_URL }}
-          ZEEBE_CLIENT_SECRET: ${{ secrets.ZEEBE_CLIENT_SECRET }}
-          ZEEBE_TOKEN_AUDIENCE: ${{ vars.ZEEBE_TOKEN_AUDIENCE }}
-          CAMUNDA_OAUTH_URL: ${{ vars.CAMUNDA_OAUTH_URL }}
-          CAMUNDA_TASKLIST_BASE_URL: ${{ vars.CAMUNDA_TASKLIST_BASE_URL }}
-          CAMUNDA_OPERATE_BASE_URL: ${{ vars.CAMUNDA_OPERATE_BASE_URL }}
-          CAMUNDA_OPTIMIZE_BASE_URL: ${{ vars.CAMUNDA_OPTIMIZE_BASE_URL }}
-          CAMUNDA_MODELER_BASE_URL: https://modeler.cloud.camunda.io/api
-          CAMUNDA_CONSOLE_CLIENT_ID: ${{ secrets.CAMUNDA_CONSOLE_CLIENT_ID }}
-          CAMUNDA_CONSOLE_CLIENT_SECRET: ${{ secrets.CAMUNDA_CONSOLE_CLIENT_SECRET }}
-          CAMUNDA_CONSOLE_BASE_URL: ${{ vars.CAMUNDA_CONSOLE_BASE_URL }}
-          CAMUNDA_CONSOLE_OAUTH_AUDIENCE: ${{ vars.CAMUNDA_CONSOLE_OAUTH_AUDIENCE}}
-
-  # SaaS 8.8 integration. Same policy as saas_integration — main pushes only.
-  saas_integration_8_8:
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    environment: integration-8.8
-    steps:
-      - name: Check out the repo
-        uses: actions/checkout@v6
-
-      - name: Use Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: "22"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run Integration Tests
-        run: |
-          npm run test:8.8:saas
-        env:
-          ZEEBE_REST_ADDRESS: ${{ vars.ZEEBE_REST_ADDRESS }}
-          ZEEBE_GRPC_ADDRESS: ${{ vars.ZEEBE_GRPC_ADDRESS }}
-          ZEEBE_CLIENT_ID: ${{ secrets.ZEEBE_CLIENT_ID }}
-          ZEEBE_AUTHORIZATION_SERVER_URL: ${{ vars.ZEEBE_AUTHORIZATION_SERVER_URL }}
-          ZEEBE_CLIENT_SECRET: ${{ secrets.ZEEBE_CLIENT_SECRET }}
-          ZEEBE_TOKEN_AUDIENCE: ${{ vars.ZEEBE_TOKEN_AUDIENCE }}
-          CAMUNDA_OAUTH_URL: ${{ vars.CAMUNDA_OAUTH_URL }}
-          CAMUNDA_TASKLIST_BASE_URL: ${{ vars.CAMUNDA_TASKLIST_BASE_URL }}
-          CAMUNDA_OPERATE_BASE_URL: ${{ vars.CAMUNDA_OPERATE_BASE_URL }}
-          CAMUNDA_OPTIMIZE_BASE_URL: ${{ vars.CAMUNDA_OPTIMIZE_BASE_URL }}
-          CAMUNDA_MODELER_BASE_URL: https://modeler.cloud.camunda.io/api
-          CAMUNDA_CONSOLE_CLIENT_ID: ${{ secrets.CAMUNDA_CONSOLE_CLIENT_ID }}
-          CAMUNDA_CONSOLE_CLIENT_SECRET: ${{ secrets.CAMUNDA_CONSOLE_CLIENT_SECRET }}
-          CAMUNDA_CONSOLE_BASE_URL: ${{ vars.CAMUNDA_CONSOLE_BASE_URL }}