pull_request.yml

name: Pull Request 📥

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
  cancel-in-progress: true

on:
  pull_request_target:
    branches:
      - master
      - release*
    paths-ignore:
      - '**/*.md'
  merge_group:

jobs:
  automation:
    name: Automation 🎛️
    if: ${{ github.event_name == 'pull_request_target' && github.repository == 'jellyfin/jellyfin-web' }}
    uses: ./.github/workflows/__automation.yml
    secrets:
      JF_BOT_TOKEN: ${{ secrets.JF_BOT_TOKEN }}

  merge-queue-build:
    name: Build 🏗️
    if: ${{ github.event_name == 'merge_group' }}
    uses: ./.github/workflows/__package.yml
    with:
      commit: ${{ github.sha }}

  merge-queue-quality:
    name: Quality checks 👌🧪
    if: ${{ github.event_name == 'merge_group' }}
    uses: ./.github/workflows/__quality_checks.yml
    permissions: {}
    with:
      commit: ${{ github.sha }}

  merge-queue-codeql:
    name: GitHub CodeQL 🔬
    if: ${{ github.event_name == 'merge_group' }}
    uses: ./.github/workflows/__codeql.yml
    permissions:
      actions: read
      contents: read
      security-events: write
    with:
      commit: ${{ github.sha }}

  merge-queue-deploy:
    name: Deploy 🚀
    if: ${{ github.event_name == 'merge_group' && github.repository == 'jellyfin/jellyfin-web' }}
    uses: ./.github/workflows/__deploy.yml
    needs:
      - merge-queue-build
    permissions:
      contents: read
      deployments: write
    secrets:
      CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
      CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
      JF_BOT_TOKEN: ${{ secrets.JF_BOT_TOKEN }}
    with:
      branch: ${{ github.head_ref }}
      commit: ${{ github.sha }}
      comment: false