From d3e6602b88dddea7372506f18c58ea8ca64e33f6 Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Sat, 17 Oct 2026 00:48:24 -0700 Subject: [PATCH] Run CI on pull requests to release branches Patch releases are prepared on a release-* branch cut from their tag, and CI only ran on pull requests to main. Pushes to a release branch stay untriggered, as zizmor treats a push trigger on release branches as a publishing workflow whose setup-ruby cache could be poisoned. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e7da9705..b27c2123 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -4,7 +4,7 @@ on: push: branches: [ main ] pull_request: - branches: [ main ] + branches: [ main, "release-*" ] permissions: {}