chore: extract/consolidate contributor pr workflow

[cacieprins]

• Closes

Additional details

Previously, we had an entirely separate workflow defined for contributor pull requests. This was implemented in order to require maintainer approval for running expensive CI jobs on contributor pull requests.

This consolidates the contributor PR into the primary pull-request workflow, while keeping the same behavior.

The node_modules_install, build, check-ts, lint, and lint-types jobs will still run for external contributors. Any subsequent jobs require that the approve-contributor-pr job be approved by a maintainer. Because the approve-contributor-pr job is conditional based on the branch pattern, declaring it as required for subsequent jobs will only be enforced if that job runs - internal contributor/maintainer PRs will not run that job, so it will be skipped as required.

Steps to test

Fork this branch to another account, and open a pull request. Verify that it prevents expensive jobs from running prior to approval.

How has the user experience changed?

PR Tasks

• [NA] Have tests been added/updated?
• [NA] Has a PR for user-facing changes been opened in cypress-documentation?
• [NA] Have API changes been updated in the type definitions?

---

Note

Consolidates contributor PR handling into the main pull-request workflow with an approval gate and dynamic PR detection, and removes the separate contributor workflow.

• CI (CircleCI):
  • Pull Request Workflow:
    • Consolidates contributor PRs into workflows/pull-request.yml.
    • Splits builds into internal-pr-build and external-pr-build with branch filters; adds approve-contributor-pr approval for external PRs before running gated jobs.
    • Updates job requirements to depend on internal/external builds and approval; moves finalization steps (percy-finalize, verify-accessibility-results) to a dedicated section.
  • Main Workflow:
    • Removes the separate linux-x64-contributor workflow and its jobs.
    • Keeps core linux-x64 workflow intact; dependency lists adjusted accordingly.
  • Pipeline commands:
    • Replaces build job param is_contributor_pr with dynamic detection based on << pipeline.git.branch >> and passes it to circle-env.js.

^{Written by Cursor Bugbot for commit 5eccac1. This will update automatically on new commits. Configure here.}

[cypress]

cypress    Run #66301

Run Properties:   Failed #66301  •  5eccac1c57: Merge branch 'develop' into ci/extract-contributor-workflow

Project	cypress
Branch Review	ci/extract-contributor-workflow
Run status	Failed #66301
Run duration	20m 33s
Commit	5eccac1c57: Merge branch 'develop' into ci/extract-contributor-workflow
Committer	Cacie Prins
View all properties for this run ↗︎

---

Test results
Failures	1
Flaky	12
Pending	1102
Skipped	4
Passing	26707
View all changes introduced in this branch ↗︎

---

Warning

Partial Report: The results for the Application Quality reports may be incomplete.

UI Coverage  45.27%
Untested elements	186
Tested elements	158

Accessibility  97.97%
Failed rules	4 critical   8 serious   2 moderate   2 minor
Failed elements	101

---

Tests for review

  cypress/e2e/studio/studio.cy.ts • 1 failed test • app-e2e

View Output

Test		Artifacts
Cypress Studio > updates an existing test with assertions		Test Replay Screenshots

  issues/28527.cy.ts • 1 flaky test • 5x-driver-electron

View Output

Test		Artifacts
issue 28527 > fails and then retries and verifies about:blank is not displayed		Test Replay Screenshots

  commands/waiting.cy.js • 1 flaky test • 5x-driver-chrome

View Output

Test		Artifacts
... > errors > throws when route is never resolved		Test Replay

  commands/actions/selectFile.cy.ts • 1 flaky test • 5x-driver-chrome

View Output

Test		Artifacts
... > throws with aliased intercepts		Test Replay

  issues/28527.cy.ts • 1 flaky test • 5x-driver-chrome

View Output

Test		Artifacts
issue 28527 > fails and then retries and verifies about:blank is not displayed		Test Replay Screenshots

  commands/net_stubbing.cy.ts • 1 flaky test • 5x-driver-firefox

View Output

Test		Artifacts
... > stops waiting when an xhr request is canceled		</td> </tr></table> The first 5 flaky specs are shown, see all 12 specs in Cypress Cloud.

[AtofStryker]

@cacieprins I created #32574 to test this workflow out and job is running on https://app.circleci.com/pipelines/github/cypress-io/cypress/75143

[cacieprins]

@cacieprins I created #32574 to test this workflow out and job is running on https://app.circleci.com/pipelines/github/cypress-io/cypress/75143

Correct - this is the same pattern as the old linux-x64-contributor-pr. It will run node_modules_install, build, check-ts, lint and lint-types and wait for approval before running anything else

[AtofStryker]

@cacieprins I think the jobs lacking the approval button are automatically locked

it looks to still be automatically locked after clicking approve and the workflow automatically fails

[AtofStryker]

@cacieprins I'm running a contributor PR running against the branch https://app.circleci.com/pipelines/github/cypress-io/cypress/75579