ci(openapi): fix drf-spectacular job DEV-1177 (#6386)

### 💭 Notes

#6287 never worked (see
[logs](https://github.com/kobotoolbox/kpi/actions/runs/17979532426/job/51141577133#step:9:31))
for two reasons:
- `/dev/tty` doesn't exist in GHAs -> add a workaround
- run script through `kobo-install` like locally makes no sense on GHA
-> revert to run script directly

Also
- add bash flags to fail on errors within piping
- simplify the job one-value-matrix
- run job on manual schema changes


### 👀 Preview steps

1. see the GHA job
2. 🟢 notice that schema is generated normally successfully
3. 🟢 notice that diff check fails, because `main` contains outdated
schema file.

Author: Akuukis

.github/filters.yml

@@ -20,10 +20,12 @@ biome:
   - '.github/workflows/biome.yml'      # ci
 
 openapi:
-  - '{kpi,kobo,hub}/**/*.!(md)'        # backend
-  - 'dependencies/**/*.!(md)'          # pip
-  - 'pyproject.toml'                   # (can affect build/tests)
-  - '.github/workflows/openapi.yml'    # ci
+  - '{kpi,kobo,hub}/**/*.!(md)'           # backend
+  - 'dependencies/**/*.!(md)'             # pip
+  - 'pyproject.toml'                      # (can affect build/tests)
+  - 'static/openapi/*'                    # output
+  - 'jsapp/js/api/{models,react-query}/*' # output
+  - '.github/workflows/openapi.yml'       # ci
 
 pytest:
   - '{kpi,kobo,hub}/**/*.!(md)'    # backend

.github/workflows/openapi.yml

@@ -23,9 +23,6 @@ jobs:
       KOBOFORM_URL: http://kpi
       SKIP_TESTS_WITH_CONCURRENCY: 'True'
       KPI_SRC_DIR: '.'
-    strategy:
-      matrix:
-        python-version: ['3.10']
     services:
       postgres:
         image: postgis/postgis:14-3.4
@@ -44,10 +41,10 @@ jobs:
 
       - uses: actions/checkout@v5
 
-      - name: Set up Python ${{ matrix.python-version }}
+      - name: Set up Python 3.10
         uses: actions/setup-python@v6
         with:
-          python-version: ${{ matrix.python-version }}
+          python-version: '3.10'
 
       - name: Install pip-tools
         run: python -m pip install pip-tools==7.\*
@@ -66,8 +63,12 @@ jobs:
         run: pip-sync dependencies/pip/dev_requirements.txt
 
       - name: Generate OpenAPI with drf-spectacular
+        # GitHub Actions run without a TTY device. This is a workaround to get one,
+        # based on https://github.com/actions/runner/issues/241#issuecomment-2019042651
+        # and https://github.com/actions/runner/issues/241#issuecomment-842566950
+        shell: 'script --return --quiet --log-out /dev/null --command "bash --noprofile --norc -eo pipefail {0}"'
         run: |
-          if ./run.py -cf run --rm kpi ./scripts/generate_api.sh --skip-orval 2>&1 | tee /dev/tty | grep -q "Warning"; then
+          if ./scripts/generate_api.sh --skip-orval 2>&1 | tee /dev/tty | grep -q "Warning"; then
             echo ""
             echo "A warning found, aborted! Please treat drf-spectacular warnings as errors and resolve them."
             echo "P.S. This is only the first warning. You may want to run the script locally to see all warnings at once."

scripts/generate_api.sh

@@ -12,7 +12,7 @@ WHOAMI=$(whoami)
 OWNER=$(ls -ld . | awk '{print $3}')
 DESTINATION_FOLDER="${KPI_SRC_DIR}/static/openapi"
 
-# For example, `bash -c`` will run on CI, while `gosu` will run in docker.
+# For example, `bash -c` will run on CI, while `gosu` will run in docker.
 function run () { bash -c "$*"; }
 if [ "$WHOAMI" != "$OWNER" ]; then
     echo "FYI: Applied gosu!"