From 3b6f9e79fc24b7453c8569c56f37f3096d89fbb3 Mon Sep 17 00:00:00 2001 From: pasta Date: Sat, 31 Oct 2026 23:22:48 +0000 Subject: [PATCH] ci: run the milestone check on the light runner The milestone check is a few lines of shell that never checks out the PR, yet it sat queued for GitHub-hosted ubuntu-latest capacity. Route it through DASH_LIGHT_RUNNER like the other short metadata jobs, keeping ubuntu-latest as the fallback where the variable is unset. Variables are not passed to pull_request runs from forks, so trigger on pull_request_target, as the PR title check already does. The job reads only the milestone from the event payload, so running the base branch's workflow with base context is safe. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/check-milestone.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/check-milestone.yml b/.github/workflows/check-milestone.yml index fb6bc50ae4ce..62c77178619b 100644 --- a/.github/workflows/check-milestone.yml +++ b/.github/workflows/check-milestone.yml @@ -1,7 +1,7 @@ name: Check PR milestone on: - pull_request: + pull_request_target: # zizmor: ignore[dangerous-triggers] reads only the milestone from the event; does not check out PR code types: - opened - edited @@ -17,7 +17,7 @@ jobs: main: name: Require a milestone if: ${{ !github.event.pull_request.draft }} - runs-on: ubuntu-latest + runs-on: ${{ vars.DASH_LIGHT_RUNNER || 'ubuntu-latest' }} steps: - name: Check that a milestone is set env: