Repository navigation
ci: qualify next analysis checks for merge groups - #4150
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Castiron custom codeEvaluated next: Trusted main policy: ✅ No new custom-code files detected. 48 mixed files remain; 0 existing customizations changed. Compared 48 existing customizations unchanged
8 more in the full report. A changed generated baseline means this report cannot reliably identify which handwritten lines changed. Inspect the custom-code diffDownload the exact patch produced by this run (requires repository access): gh run download 39708538574 --repo openai/openai-python \
--name castiron-custom-code-39708538574-1 --dir /tmp/castiron-custom-code-39708538574-1
git apply --stat /tmp/castiron-custom-code-39708538574-1/custom-code.patch
cat /tmp/castiron-custom-code-39708538574-1/custom-code.patchOr reproduce it from an SDK checkout containing the vendored reporter: git fetch --no-tags origin b3eca25737d570ee277f77dcb6f10691f8656ef6 8c525da8b7c4dd7f31d75f63972d731e536464fb
python3 scripts/castiron/custom_code_report.py report \
--base b3eca25737d570ee277f77dcb6f10691f8656ef6 \
--head 8c525da8b7c4dd7f31d75f63972d731e536464fb --target-branch next --fetch --require-head-hash --public \
--out /tmp/castiron-custom-code-8c525da8b7c4
cat /tmp/castiron-custom-code-8c525da8b7c4/custom-code.patchThis is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR. |
Next pull requests and merge groups need CodeQL and breaking-change checks that cannot be satisfied by a main-target run sharing the same head. Run CodeQL for next PRs and merge groups, and run both existing breaking-change detectors against the merge group's exact base SHA with full history. Reject missing or unrelated baselines before dependency bootstrap.
Next PR/group runs publish
Analyze Python (next)anddetect-breaking-changes (next). Existing main check names remain; PR retargeting retriggers evaluation. Checkout credentials are not persisted. This changes check producers only; branch protection and merge-queue activation remain separate.Validation: actionlint passes both workflows. Focused tests cover seven event/target combinations using the actual expressions, release dispatch and edited triggers, real Git base validation, and the unchanged shell detector restoring base tests while retaining candidate SDK code. Actual hosted CodeQL and next merge-group qualification remain required before these contexts become required checks.