File sync from hanakai-rb/repo-sync

Updated files:

- .github/workflows/ci.yml
- .github/workflows/pr-comments.yml

Author: github-actions[bot]

.github/workflows/ci.yml

@@ -14,8 +14,6 @@ on:
 jobs:
   tests:
     name: Tests (Ruby ${{ matrix.ruby }})
-    permissions:
-      pull-requests: write
     runs-on: ubuntu-latest
     continue-on-error: ${{ matrix.optional || false }}
     strategy:
@@ -55,13 +53,14 @@ jobs:
             exit 0  # Ignore error here to keep the green checkmark
           fi
           exit ${status}
-      - name: Add comment for optional failures
-        uses: thollander/actions-comment-pull-request@v3
+      - name: Create optional failure comment
         if: ${{ matrix.optional && github.event.pull_request }}
+        uses: hanakai-rb/repo-sync/pr-comment-artifact@main
         with:
-          comment-tag: "${{ matrix.ruby }}-optional-failure-notice"
-          message: |
-            ℹ️ Optional job failed: Ruby ${{ matrix.ruby }}
+          name: ci-ruby-${{ matrix.ruby }}
+          pr-number: ${{ github.event.pull_request.number }}
+          comment-tag: ruby-${{ matrix.ruby }}-optional-failure
+          message: "ℹ️ Optional job failed: Ruby ${{ matrix.ruby }}"
           mode: ${{ steps.test.outputs.optional_fail == 'true' && 'upsert' || 'delete' }}
 
   workflow-keepalive:

.github/workflows/pr-comments.yml

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+# This file is synced from hanakai-rb/repo-sync
+
+# Downloads comment artifacts from completed workflows and posts them to PRs. This allows source
+# workflows to run with read-only permissions on fork PRs while still posting comments via this
+# privileged workflow that runs in the base repo context.
+#
+# Comment artifacts should be generated using the `hanakai-rb/repo-sync/pr-comment-artifact@main`
+# action.
+
+name: PR comments
+
+on:
+  workflow_run:
+    workflows: ["CI"]
+    types:
+      - completed
+
+permissions:
+  pull-requests: write
+
+jobs:
+  post-comments:
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.event == "pull_request"
+
+    steps:
+      - name: Post comments
+        uses: hanakai-rb/repo-sync/pr-comments-from-artifacts@main
+        with:
+          workflow-run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}