Skip to content

ci: cut Actions minutes — path-filtered PR tests, gateway-only Postgres/concurrency, secrets push on main only - #154

Merged
PetrefiedThunder merged 3 commits into
mainfrom
devops/ci-minutes-cut
Oct 20, 2026
Merged

PetrefiedThunder merged 3 commits into
mainfrom
devops/ci-minutes-cut

Conversation

@PetrefiedThunder

@PetrefiedThunder PetrefiedThunder commented Oct 20, 2026 •

Copy link
Copy Markdown
Collaborator

Cuts CI minutes (Oct 18–19 burst ~11.8k min = ~150 agent-PR CI runs × 31 jobs + 258 secrets-scan pushes on all branches; no loop). PR runs test only changed projects; full matrix on main/merge_group/dispatch; CI result job always reports; Postgres proofs/concurrency only on gateway changes; secrets.yml push limited to main. No Python versions removed. Code by Codex CLI.


Note

Medium Risk
PRs may skip jobs if the change-detection heuristics miss a dependency; incorrect filtering could let regressions merge until full CI on main.

Overview
PR CI now scopes work by what changed on pull requests while main, merge groups, and manual runs still exercise the full discovered project matrix. The workflow stays unfiltered at the top level so the branch-protection CI result job always reports.

A new Changed projects job (PR-only) diffs HEAD^1 vs HEAD, classifies shared changes (workflows, repo scripts, root config), and outputs filtered Python/TypeScript project lists plus gateway / shared flags. Downstream jobs use those outputs on PRs: Python/TypeScript matrices shrink to affected packages (with expansions such as sdk/python pulling gateway and integrations, spec pulling SDKs, etc.). Postgres concurrency/proofs, gateway image smoke, and the trust release gate skip on PRs unless gateway-related or shared files changed; they still run on non-PR events.

The Python job adds an Offline verifier vectors step for sdk/python on 3.12. secrets.yml is adjusted so the secrets workflow runs on push to main only (per PR intent; file contents not shown in the diff).

Reviewed by Cursor Bugbot for commit f92d66f. Bugbot is set up for automated code reviews on this repo. Configure here.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-20T04:19:54.006553Z a60a093 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a60a093db0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/ci.yml
@PetrefiedThunder
PetrefiedThunder merged commit 5621797 into main Oct 20, 2026
44 checks passed
@PetrefiedThunder
PetrefiedThunder deleted the devops/ci-minutes-cut branch October 20, 2026 04:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant