chore: adjust CI to better serve external collaborators

Author: sam-goodwin

.github/workflows/pkg-pr.yml

@@ -7,7 +7,6 @@ on:
 jobs:
   pkg-pr:
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -22,7 +21,7 @@ jobs:
 
       - name: Build
         run: bun run --filter alchemy build
-    
+
       # pkr.pr.new relies on pnpm-workspace.yaml for the `--pnpm` flag
       # which we need to resolve `catalog:` dependencies prior to publishing
       - name: Prepare Publish

.github/workflows/pr-preview.yml

@@ -11,7 +11,7 @@ concurrency:
 
 jobs:
   deploy-preview:
-    if: ${{ github.event.action != 'closed' }}
+    if: (github.event.action != 'closed' && github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -54,7 +54,7 @@ jobs:
           PULL_REQUEST: ${{ github.event.pull_request.number }}
 
   cleanup-preview:
-    if: ${{ github.event.action == 'closed' }}
+    if: (github.event.action == 'closed' && github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: ubuntu-latest
     permissions:
       id-token: write

.github/workflows/test.yml

@@ -9,7 +9,7 @@ on:
 
 # Ensure only one workflow runs at a time
 concurrency:
-  group: "tests-${{ github.ref }}"
+  group: "tests-${{ github.event.pull_request.number }}"
   cancel-in-progress: false
 
 jobs:
@@ -30,17 +30,26 @@ jobs:
         with:
           node-version: "22"
 
-      - name: Setup Alchemy Environment
-        uses: ./.github/actions/setup-alchemy
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
         with:
-          aws-role-arn: ${{ secrets.AWS_ROLE_ARN }}
-          aws-region: us-west-2
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
 
       - name: Check Types and Lint
-        run: | 
+        run: |
           bun run build
           bun run check
 
+      - name: Setup Alchemy Environment
+        uses: ./.github/actions/setup-alchemy
+        if: github.event_name != 'pull_request'
+        with:
+          aws-role-arn: ${{ secrets.AWS_ROLE_ARN }}
+          aws-region: us-west-2
+
       - name: Run tests
         if: github.event_name != 'pull_request'
         run: bun run test:fast
@@ -70,4 +79,3 @@ jobs:
           UPSTASH_API_KEY: ${{ env.UPSTASH_API_KEY }}
           UPSTASH_EMAIL: sam@alchemy.run
           VERCEL_ACCESS_TOKEN: ${{ env.VERCEL_ACCESS_TOKEN }}
-