Avoid creating deployments for automation jobs (astral-sh#29626)

Jobs that reference the `automations` environment create deployment
records, which add noise to pull requests when reports are published.
Set `deployment: false` so these jobs retain access to the environment’s
secrets without creating deployment records.

Co-authored-by: zaniebot <242828183+zaniebot@users.noreply.github.com>

Author: zaniebot

.github/workflows/publish-pull-request-report.yml

@@ -37,7 +37,9 @@ jobs:
       github.event.pull_request.head.repo.full_name == github.repository
     runs-on: github-ubuntu-24.04-x86_64-2
     timeout-minutes: 10
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write

.github/workflows/pull-request-reviewers.yml

@@ -24,7 +24,9 @@ jobs:
       github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main'
     runs-on: github-ubuntu-24.04-x86_64-2
     timeout-minutes: 10
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write

.github/workflows/release-prepare.yml

@@ -18,7 +18,9 @@ jobs:
   prepare-release:
     if: github.repository == 'astral-sh/ruff' && github.ref == 'refs/heads/main'
     runs-on: ${{ github.repository == 'astral-sh/ruff' && 'github-ubuntu-24.04-x86_64-4' || 'ubuntu-latest' }}
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write # for the credential broker

.github/workflows/sync-ruff-security.yml

@@ -16,7 +16,9 @@ jobs:
     name: Sync ruff-security
     if: github.repository == 'astral-sh/ruff' && github.ref == 'refs/heads/main'
     runs-on: ${{ github.repository == 'astral-sh/ruff' && 'github-ubuntu-24.04-x86_64-4' || 'ubuntu-latest' }}
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       id-token: write # for the credential broker
     defaults:

.github/workflows/sync_typeshed.yaml

@@ -74,7 +74,9 @@ jobs:
     timeout-minutes: 20
     # Don't run the cron job on forks:
     if: ${{ github.repository == 'astral-sh/ruff' || github.event_name != 'schedule' }}
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write # for STS
@@ -158,7 +160,9 @@ jobs:
     # (https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#example-requiring-successful-dependent-jobs)
     if: ${{ github.repository == 'astral-sh/ruff' || github.event_name != 'schedule' }}
 
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write # for STS
@@ -217,7 +221,9 @@ jobs:
     # (https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#example-requiring-successful-dependent-jobs)
     if: ${{ github.repository == 'astral-sh/ruff' || github.event_name != 'schedule' }}
 
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write # for STS
@@ -360,7 +366,9 @@ jobs:
     # update-snapshots is deliberately NOT included here: it shouldn't block PR creation if it fails or times out.
     if: ${{ always() && needs.sync.result == 'success' && needs.docstrings-windows.result == 'success' && needs.docstrings-macos.result == 'success' && (github.repository == 'astral-sh/ruff' || github.event_name != 'schedule') }}
 
-    environment: automations
+    environment:
+      name: automations
+      deployment: false
     permissions:
       contents: read
       id-token: write # for STS