ci: run checks on PRs and gate deploy to main merges #65

Merged

gertjan merged 2 commits from ci/pr-workflow into main

2026-06-21 13:02:33 +00:00

gertjan commented

2026-06-21 12:49:48 +00:00

Owner

First PR landing via the new PR-based workflow.

check job now also triggers on pull_request -> main (lint/typecheck/tests/audit validate before merge).
deploy job gated to push on main, so PRs never deploy — only a squash-merge does.

Branch protection (no direct pushes to main, required check status) and squash-only merge are now enabled on the repo.

First PR landing via the new PR-based workflow. - `check` job now also triggers on `pull_request` -> main (lint/typecheck/tests/audit validate before merge). - `deploy` job gated to `push` on main, so PRs never deploy — only a squash-merge does. Branch protection (no direct pushes to main, required `check` status) and squash-only merge are now enabled on the repo.

gertjan added 1 commit

2026-06-21 12:49:48 +00:00

ci: run checks on PRs and gate deploy to main merges

Deploy / check (pull_request) Failing after 4m36s

Details

Deploy / deploy (pull_request) Has been skipped

Details

c560567ac9

Add a pull_request trigger so the check job (lint/typecheck/tests/audit)
runs on PRs targeting main, and guard the deploy job with an
event_name == 'push' && ref == main condition so only merges deploy.
This is the first change to land via the new PR workflow.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

gertjan added 1 commit

2026-06-21 12:56:26 +00:00

fix(deps): bump pydantic-settings 2.14.1 -> 2.14.2 (GHSA-4xgf-cpjx-pc3j)

Deploy / check (pull_request) Successful in 4m22s

Details

Deploy / deploy (pull_request) Has been skipped

Details

2484c8ab26

The audit gate on this PR flagged a newly-published fixable advisory in
pydantic-settings 2.14.1. Lockfile-only bump (spec stays >=2.6.0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>