From 0c1c8bdcf4242d644a636e97bd9d1bd27541bcf9 Mon Sep 17 00:00:00 2001
From: Kristoffer Dalby <kristoffer@dalby.cc>
Date: Fri, 4 Sep 2026 14:10:58 +0000
Subject: [PATCH] .github: gate CI on flake.lock and flakehashes.json

Neither file was listed in any paths-filter, so a lockfile-only change
skipped build, check-generated, check-tests and the whole integration
matrix. Also drops integration_test/, which has never existed.
---
 .github/workflows/build.yml             | 3 ++-
 .github/workflows/check-generated.yml   | 2 ++
 .github/workflows/check-tests.yaml      | 3 ++-
 .github/workflows/nix-module-test.yml   | 1 +
 .github/workflows/test-integration.yaml | 3 +++
 5 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1326599e..89b064e0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -31,7 +31,8 @@ jobs:
               - '*.nix'
               - 'go.*'
               - '**/*.go'
-              - 'integration_test/'
+              - 'flake.lock'
+              - 'flakehashes.json'
               - 'config-example.yaml'
       - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
         if: steps.changed-files.outputs.files == 'true'
diff --git a/.github/workflows/check-generated.yml b/.github/workflows/check-generated.yml
index 09e0a14a..bbcfdf7c 100644
--- a/.github/workflows/check-generated.yml
+++ b/.github/workflows/check-generated.yml
@@ -32,7 +32,9 @@ jobs:
               - '*.nix'
               - 'go.*'
               - '**/*.go'
+              - 'flake.lock'
               - 'tools/**'
+              - 'Makefile'
       - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
         if: steps.changed-files.outputs.files == 'true'
       - uses: Mic92/hestia@fb239a2f72d4b6e26eec5425f289dea23b27a527 # v2.0.0
diff --git a/.github/workflows/check-tests.yaml b/.github/workflows/check-tests.yaml
index 1d8899ce..c5bded4a 100644
--- a/.github/workflows/check-tests.yaml
+++ b/.github/workflows/check-tests.yaml
@@ -26,8 +26,9 @@ jobs:
               - '*.nix'
               - 'go.*'
               - '**/*.go'
-              - 'integration_test/'
+              - 'flake.lock'
               - 'config-example.yaml'
+              - '.github/workflows/gh-action-integration-generator.go'
       - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
         if: steps.changed-files.outputs.files == 'true'
       - uses: Mic92/hestia@fb239a2f72d4b6e26eec5425f289dea23b27a527 # v2.0.0
diff --git a/.github/workflows/nix-module-test.yml b/.github/workflows/nix-module-test.yml
index b0e22dd3..076f4c6d 100644
--- a/.github/workflows/nix-module-test.yml
+++ b/.github/workflows/nix-module-test.yml
@@ -32,6 +32,7 @@ jobs:
               - 'nix/**'
               - 'flake.nix'
               - 'flake.lock'
+              - 'flakehashes.json'
             go:
               - 'go.*'
               - '**/*.go'
diff --git a/.github/workflows/test-integration.yaml b/.github/workflows/test-integration.yaml
index 0fe2d069..9e4a6250 100644
--- a/.github/workflows/test-integration.yaml
+++ b/.github/workflows/test-integration.yaml
@@ -34,8 +34,11 @@ jobs:
               - '*.nix'
               - 'go.*'
               - '**/*.go'
+              - 'flake.lock'
+              - 'flakehashes.json'
               - 'integration/**'
               - 'config-example.yaml'
+              - 'Makefile'
               - '.github/workflows/test-integration.yaml'
               - '.github/workflows/integration-test-template.yml'
               - 'Dockerfile.*'