feat: added a checks-done step we could bind our GitHub "Require status checks to pass" rule on

Author: mfranzke

.github/workflows/default.yml

@@ -141,11 +141,24 @@ jobs:
       contents: read
       pull-requests: write
 
+  # Aggregate status check for branch protection rules
+  checks-done:
+    name: All Checks Complete
+    needs: [lint, quality, security, audit-fix, ci, performance]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 1
+    permissions:
+      contents: read
+
+    steps:
+      - name: All required checks passed
+        run: echo "✅ All required checks completed successfully"
+
   # Stage 4: Deploy to GitHub Pages (main branch only, requires all previous stages)
   deploy:
     name: Deploy to GitHub Pages
-    needs: [ci, performance]
-    if: always() && needs.ci.result == 'success' && (needs.performance.result == 'success' || needs.performance.result == 'skipped') && github.ref == 'refs/heads/main' && github.event_name == 'push'
+    needs: [checks-done]
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
     uses: ./.github/workflows/deploy-pages.yml
     secrets: inherit
     permissions:
@@ -156,8 +169,8 @@ jobs:
   # Stage 5: Release (main branch only, requires all checks to pass)
   release:
     name: Release Management
-    needs: [ci, performance, deploy]
-    if: always() && needs.ci.result == 'success' && (needs.performance.result == 'success' || needs.performance.result == 'skipped') && (needs.deploy.result == 'success' || needs.deploy.result == 'skipped') && github.ref == 'refs/heads/main' && github.event_name == 'push'
+    needs: [checks-done]
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
     uses: ./.github/workflows/release.yml
     secrets: inherit
     permissions: