Evan Hu
8fa00f5576
release.yml 是从 main 运行的，branch-guard 也按 PR 的 base 分支加载工作流定义。两者只合进 develop 时都不生效：main 上的 release-please 仍会把版本 PR 开到默认分支 develop，而提到 main 的 PR 根本不会触发拦截。
38 lines
1.2 KiB
YAML
38 lines
1.2 KiB
YAML
name: Branch guard
|
|
|
|
# main is the release branch: it only moves when develop is promoted for a release, or when
|
|
# release-please lands the version commit it generates on top of that promotion. Everything else
|
|
# targets develop.
|
|
#
|
|
# This is a check rather than a ruleset rule because GitHub rulesets can protect a base branch but
|
|
# cannot say which head branches may target it. Add it to main's required status checks so a pull
|
|
# request opened against the wrong base cannot be merged.
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
base:
|
|
name: Base branch
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 5
|
|
steps:
|
|
- name: Check the head branch may target main
|
|
env:
|
|
HEAD_REF: ${{ github.head_ref }}
|
|
run: |
|
|
case "$HEAD_REF" in
|
|
develop | release/* | release-please--*)
|
|
echo "$HEAD_REF may target main."
|
|
;;
|
|
*)
|
|
echo "::error::'$HEAD_REF' cannot target main. Day-to-day changes are merged into develop; main only receives develop promotions and release-please version branches. Retarget this pull request at develop."
|
|
exit 1
|
|
;;
|
|
esac
|