Skip to content

workflows: add osdc-renovate-autoapprove auto-merge gate#642

Open
jeanschmidt wants to merge 1 commit into
gh/jeanschmidt/39/basefrom
gh/jeanschmidt/39/head
Open

workflows: add osdc-renovate-autoapprove auto-merge gate#642
jeanschmidt wants to merge 1 commit into
gh/jeanschmidt/39/basefrom
gh/jeanschmidt/39/head

Conversation

@jeanschmidt
Copy link
Copy Markdown
Contributor

@jeanschmidt jeanschmidt commented May 27, 2026

Stack from ghstack (oldest at bottom):

Impact: new PR-triggered GitHub Actions workflow
Risk: medium

What

Adds osdc-renovate-autoapprove.yml. On Renovate-authored PRs that
touch only osdc/clusters.yaml, this workflow validates the diff,
approves the PR under the bot identity, dispatches
osdc-pr-validate.yml, waits for the resulting commit status, and
on success squash-merges the PR.

Why

A Renovate runner-image bump is a high-frequency, low-risk change
that we want shipped quickly without burning human review cycles —
but only if the diff is shaped exactly the way we expect AND the
staging deploy is green.

How

  • Trigger: pull_request_target on Renovate-authored PRs.
  • Eligibility gate: bot author, branch prefix, single-file diff
    scoped to osdc/clusters.yaml.
  • Validation: validate-runner-bump.py for single-line strict-semver
    monotonic bump.
  • Approve via the bot identity, then dispatch + wait on
    osdc-pr-validate.yml using wait-for-pr-validate.py.
  • Squash-merge only if the commit status returns success.

Changes

  • .github/workflows/osdc-renovate-autoapprove.yml: new workflow.

Notes

Depends on:

  • validate-runner-bump.py (earlier in stack).
  • osdc-pr-validate.yml (earlier in stack).
  • wait-for-pr-validate.py (earlier in stack).
  • Renovate must be opening PRs (earlier) and merged PRs must be
    deploying (earlier).

Testing

  • Wait for the next Renovate bump PR after this lands; observe the
    full auto-approve -> validate -> merge -> deploy chain.

Signed-off-by: Jean Schmidt contato@jschmidt.me

[ghstack-poisoned]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant