Pull request checks - 1fanwang - #1898: fix(bigquery): qualify column refs in test_unique / test_not_null to avoid row-struct resolution #5037
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # **what?** | |
| # Runs all necessary checks on pull requests: changelog entry validation, code quality, build verification, unit tests, and integration tests. | |
| # **why?** | |
| # Ensures pull requests meet quality standards and don't break existing functionality before merging. | |
| # **when?** | |
| # This workflow runs automatically when a PR is opened, reopened, synchronized, or when labels are added/removed. | |
| name: "Pull request checks" | |
| run-name: "Pull request checks - ${{ github.actor }} - #${{ github.event.pull_request.number }}: ${{ github.event.pull_request.title }}" | |
| on: | |
| pull_request_target: | |
| types: [opened, reopened, synchronize, labeled, unlabeled] | |
| # only run this once per PR at a time | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.number }} | |
| cancel-in-progress: true | |
| # ensures that no permissions are granted globally, only to the specific jobs that need them | |
| permissions: {} | |
| env: | |
| CI_LABEL: "ci:approve-public-fork-ci" | |
| jobs: | |
| check-run-approval: | |
| permissions: | |
| pull-requests: write | |
| contents: read | |
| # to prevent CI from running against public forks without us looking at the code, we will check for the presence of the proper label | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "If the event is to synchronize, we should remove the label from the PR" | |
| # also triggers on reopen to avoid a user closing, pushing changes and then reopening the PR | |
| if: ${{ github.event_name == 'pull_request_target' && (github.event.action == 'synchronize' || github.event.action == 'reopened') && github.event.pull_request.head.repo.full_name != github.repository && contains(github.event.pull_request.labels.*.name, env.CI_LABEL) }} | |
| run: | | |
| echo "Synchronizing PR, removing '${{ env.CI_LABEL }}' label" | |
| gh pr edit ${{ github.event.pull_request.number }} --remove-label ${{ env.CI_LABEL }} --repo ${{ github.repository }} | |
| msg="All pull request updates require re-approval of CI. No CI will be run." | |
| echo "::error::$msg" | |
| exit 1 | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: "Check that forks have the '${{ env.CI_LABEL }}' label" | |
| if: ${{ github.event.pull_request.head.repo.full_name != github.repository && !contains(github.event.pull_request.labels.*.name, env.CI_LABEL) }} | |
| run: | | |
| msg="Pull request is from a public fork but does not have the '${{ env.CI_LABEL }}' label. No CI will be run." | |
| echo "::error::$msg" | |
| exit 1 | |
| affected-packages: | |
| permissions: | |
| contents: read | |
| needs: check-run-approval | |
| runs-on: ubuntu-latest | |
| outputs: | |
| changelog-entry-check: ${{ steps.changelog-entry-check.outputs.changes }} | |
| verify-build: ${{ steps.verify-build.outputs.changes }} | |
| unit-tests: ${{ steps.unit-tests.outputs.changes }} | |
| integration-tests: ${{ steps.integration-tests.outputs.changes }} | |
| steps: | |
| - name: "Checkout PR branch" | |
| uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| submodules: true | |
| - name: "Check changelog entry paths" | |
| id: changelog-entry-check | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # dorny/paths-filter@v3 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| filters: .github/filters/changelog-entry-check.yml | |
| - name: "Check verify-build paths" | |
| id: verify-build | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # dorny/paths-filter@v3 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| filters: .github/filters/verify-build.yml | |
| - name: "Check unit-tests paths" | |
| id: unit-tests | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # dorny/paths-filter@v3 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| filters: .github/filters/unit-tests.yml | |
| - name: "Check integration-tests paths" | |
| id: integration-tests | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # dorny/paths-filter@v3 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| filters: .github/filters/integration-tests.yml | |
| changelog-entry-check: | |
| uses: ./.github/workflows/_changelog-entry-check.yml | |
| needs: affected-packages | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| if: ${{ toJSON(fromJSON(needs.affected-packages.outputs.changelog-entry-check)) != '[]' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| package: ${{ fromJSON(needs.affected-packages.outputs.changelog-entry-check) }} | |
| with: | |
| package: ${{ matrix.package }} | |
| pull-request: ${{ github.event.pull_request.number }} | |
| secrets: inherit | |
| code-quality: | |
| permissions: | |
| contents: read | |
| uses: ./.github/workflows/_code-quality.yml | |
| needs: check-run-approval | |
| with: | |
| branch: ${{ github.event.pull_request.head.sha }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| secrets: inherit | |
| verify-build: | |
| permissions: read-all | |
| uses: ./.github/workflows/_verify-build.yml | |
| needs: affected-packages | |
| if: ${{ toJSON(fromJSON(needs.affected-packages.outputs.verify-build)) != '[]' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| package: ${{ fromJSON(needs.affected-packages.outputs.verify-build) }} | |
| with: | |
| package: ${{ matrix.package }} | |
| branch: ${{ github.event.pull_request.head.sha }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| os: ${{ vars.DEFAULT_RUNNER }} | |
| python-version: ${{ vars.DEFAULT_PYTHON_VERSION }} | |
| secrets: inherit | |
| unit-tests: | |
| permissions: | |
| contents: read | |
| uses: ./.github/workflows/_unit-tests.yml | |
| needs: affected-packages | |
| if: ${{ toJSON(fromJSON(needs.affected-packages.outputs.unit-tests)) != '[]' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| package: ${{ fromJSON(needs.affected-packages.outputs.unit-tests) }} | |
| with: | |
| package: ${{ matrix.package }} | |
| branch: ${{ github.event.pull_request.head.sha }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| os: ${{ vars.DEFAULT_RUNNER }} | |
| python-version: ${{ vars.DEFAULT_PYTHON_VERSION }} | |
| hatch-env: "ci" | |
| secrets: inherit | |
| integration-tests: | |
| uses: ./.github/workflows/_integration-tests.yml | |
| needs: affected-packages | |
| permissions: | |
| id-token: write | |
| contents: read | |
| if: ${{ toJSON(fromJSON(needs.affected-packages.outputs.integration-tests)) != '[]' }} | |
| with: | |
| packages: ${{ needs.affected-packages.outputs.integration-tests }} | |
| branch: ${{ github.event.pull_request.head.sha }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| os: ${{ vars.DEFAULT_RUNNER }} | |
| python-version: ${{ vars.DEFAULT_PYTHON_VERSION }} | |
| hatch-env: "ci" | |
| secrets: inherit | |
| # This job does nothing and is only used for branch protection | |
| results: | |
| permissions: | |
| actions: read | |
| name: "Pull request checks" # keep this name, branch protection references it | |
| if: ${{ !cancelled() }} | |
| needs: | |
| [ | |
| check-run-approval, | |
| changelog-entry-check, | |
| code-quality, | |
| verify-build, | |
| unit-tests, | |
| integration-tests, | |
| ] | |
| runs-on: ${{ vars.DEFAULT_RUNNER }} | |
| steps: | |
| - uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # re-actors/alls-green@release/v1 | |
| with: | |
| jobs: ${{ toJSON(needs) }} | |
| allowed-skips: "changelog-entry-check,verify-build,unit-tests,integration-tests" |