[2025.2][DEVOPS-3735] ci: github actions for PR static check

.github/workflows/build.yml

@@ -14,19 +14,6 @@ on:
       - '.gitignore'
       - '.github/vale-styles/**'
 
-  pull_request:
-    branches:
-      - master
-    # Duplicated list because github does not support YAML anchors.
-    # https://github.com/actions/runner/issues/1182
-    paths-ignore:
-      - README.md
-      - 'docs/**'
-      - 'architecture/**'
-      - 'managed/**'
-      - '.gitignore'
-      - '.github/vale-styles/**'
-
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "build"

.github/workflows/pull_check_upgrade.yml

@@ -0,0 +1,25 @@
+name: "yb-gh"
+
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+    paths:
+      - 'src/**/*.proto'
+
+jobs:
+  pr-upgrade:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check PR upgrade info
+        run: |
+          body="${{ github.event.pull_request.body }}"
+          UPG_RE='upgrade.*(downgrade|rollback)\ssafety'
+          # downcase the body for regex matching
+          if [[ ! "${body,,}" =~ $UPG_RE ]]; then
+            echo "::error ::PR description must include upgrade/rollback safety information"
+            echo "::error ::for any changes to .proto files."
+            echo "::error ::This should include whether the change is safe for rollback"
+            echo "::error ::and any special procedures needed."
+            echo "::error ::Example: Upgrade/Downgrade Safety: ..."
+            exit 1
+          fi

.github/workflows/pull_checks.yml

@@ -0,0 +1,59 @@
+name: "yb-gh"
+
+# The title/description checks are only really needed on open/edit events,
+# But then it won't be available from head commit if the PR is synchronized.
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+    paths-ignore:
+      - README.md
+      - 'docs/**'
+
+jobs:
+  pr-title:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check PR title
+        run: |
+          TITLE_RE='^(\[(BACKPORT )?([0-9]+(\.[0-9]+)+)\])?'
+          TITLE_RE+='\[((#[0-9]+(,#[0-9]+)*)|([A-Z]+-[0-9]+(,[A-Z]+-[0-9]+)*))\]'
+          TITLE_RE+=' [a-zA-Z0-9_-]+(,[[a-zA-Z0-9_]-]+)*:'
+          TITLE_RE+=' \S.{8,98}\S$'
+
+          if [[ ! "${{ github.event.pull_request.title }}" =~ $TITLE_RE ]]; then
+            echo "::error ::PR title must include issue ID, code area (no extra whitespace),"
+            echo "::error :: and a short description."
+            echo "::error ::Issue referenced must be a github issue or YB-internal Jira ID"
+            echo "::error ::Short description must be less than 100 characters."
+            echo "::error ::Backport branch should be used only for non-master release branches."
+            echo "::error ::Examples:"
+            echo "::error ::  [#12345,#12367] area: Cool feature xyz"
+            echo "::error ::  [BACKPORT 2045.1][#12345] area1,area2: Must have fix"
+            exit 1
+          fi
+
+      - name: Check Backport title
+        run: |
+          BACKPORT_RE='^(\[(BACKPORT )?([0-9]+(\.[0-9]+)+)\])'
+          if [[ "${{ github.base_ref }}" == "master" ]]; then
+            if [[ "${{ github.event.pull_request.title }}" =~ $BACKPORT_RE ]]; then
+              echo "::error ::PR title should not specify target branch if targeting master."
+              exit 1
+            fi
+          else
+            if [[ "${{ github.event.pull_request.title }}" =~ $BACKPORT_RE ]]; then
+              BACKPORT_BRANCH="${BASH_REMATCH[1]}"
+              if [[ "${BACKPORT_BRANCH}" != "${{ github.base_ref }}" ]]; then
+                echo "::error ::Backport branch in title (${BACKPORT_BRANCH}) does not match"
+                echo "::error :: PR base ref (${{ github.base_ref }})."
+                exit 1
+              fi
+            else
+              echo "::error ::PR title must begin with target release branch in square brackets."
+              echo "::error ::Examples:"
+              echo "::error ::  [BACKPORT 2045.1][#12345] area1,area2: Must have fix from master"
+              echo "::error ::  [2045.2][#12345] area: release-specific change"
+              exit 1
+            fi
+          fi
+          # Check if there is backport commit/PR info in desc.

.github/workflows/pull_lint.yml

@@ -0,0 +1,44 @@
+name: "yb-gh"
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, edited ]
+    paths-ignore:
+      - README.md
+      - 'docs/**'
+
+jobs:
+  pr-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          fetch-tags: 'false'
+
+      # TODO: Create GH custom image with pycodestyle & golint installed
+      - name: Lint
+        run: |
+          docker run \
+            --user root \
+            -v "$(pwd):$(pwd)" \
+            -w "$(pwd)" \
+            yugabyteci/yb_build_infra_ubuntu2204_x86_64:latest \
+            bash -c 'chown -R yugabyteci .'
+          docker run \
+            --user yugabyteci \
+            -v "$(pwd):$(pwd)" \
+            -w "$(pwd)" \
+            yugabyteci/yb_build_infra_ubuntu2204_x86_64:latest \
+            bash -c '
+              set -euo pipefail
+              # Base reference should be set for PR actions.
+              set -x
+              if [[ -n "${{ github.base_ref }}" ]]; then
+                git fetch origin ${{ github.base_ref }}
+                ./build-support/lint.py --rev origin/${{ github.base_ref }}
+              else
+                echo No base reference to compare
+                exit 1
+              fi
+            '

build-support/jenkins/yb-jenkins-build.sh

@@ -39,6 +39,9 @@ EOT
 
 echo "Jenkins Build script ${BASH_SOURCE[0]} is running"
 
+echo "Intentional build failure"
+exit 1
+
 while [ $# -gt 0 ]; do
   case "$1" in
     -h|--help)