feat: skip CI jobs a change cannot affect, gated on the paths it touched

.config/.copier-answers.yml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: v0.2.0
+_commit: v0.2.0-9-g450438cb
 _src_path: gh:LabAutomationAndScreening/copier-base-template.git
 copier_answers_directory: .config
 description: A web app that is hosted within a local intranet. Nuxt frontend, python

.github/workflows/ci.yaml

@@ -272,11 +272,14 @@ jobs:
         if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
         env:
           GH_TOKEN: ${{ github.token }}
+          # A status belongs to a commit: the PR's head commit on pull_request events, the merge group's head on
+          # merge_group events, whose payload carries no pull_request at all.
+          COMMIT_SHA: ${{ github.event_name == 'merge_group' && github.event.merge_group.head_sha || github.event.pull_request.head.sha }}
         run: |
           gh api \
             -X POST -H "Accept: application/vnd.github.v3+json" \
-            "${{ github.event.pull_request.statuses_url }}" \
-            -f state=success -f context="required-check" -f description="✅ All required checks passed in the job triggered by pull_request" \
+            "/repos/${{ github.repository }}/statuses/${COMMIT_SHA}" \
+            -f state=success -f context="required-check" -f description="✅ All required checks passed in the job triggered by ${{ github.event_name }}" \
             -f target_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
 
       - name: Mark updated dependabot hash commit as succeeded

extensions/context.py

@@ -38,7 +38,7 @@ def hook(  # noqa: PLR0915 # yes, this is a lot of statements, but it's all just
         context["pulumi_aws_version"] = ">=7.48.0"
         context["pulumi_aws_native_version"] = ">=1.81.0"
         context["pulumi_command_version"] = ">=1.2.1"
-        context["pulumi_github_version"] = ">=6.14.0"
+        context["pulumi_github_version"] = ">=6.15.0"
         context["pulumi_okta_version"] = ">=6.6.0"
         context["boto3_version"] = ">=1.43.88"
         context["ephemeral_pulumi_deploy_version"] = ">=0.0.8"
@@ -124,6 +124,7 @@ def hook(  # noqa: PLR0915 # yes, this is a lot of statements, but it's all just
         context["gha_action_gh_release"] = "v3.0.3"
         context["gha_codecov"] = "v7.1.0"
         context["gha_mutex"] = "1ebad517141198e08d47cf72f3c0975316620a65 # v1.0.0-alpha.10"
+        context["gha_paths_filter"] = "ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3"
         context["gha_pypi_publish"] = "v1.14.2"
         context["gha_sleep"] = "v2.0.4"
         context["gha_absaoss_k3d"] = "v2.4.0"

template/.github/path-filters.yaml.jinja

@@ -0,0 +1,31 @@
+# Path classes for the `changes` job in .github/workflows/ci.yaml. Every top-level key becomes a boolean in that job's
+# `classes` output, read as fromJSON(needs.changes.outputs.classes).<key>, true when the change touched a matching
+# path. Globs follow dorny/paths-filter (picomatch); a leading `!` excludes.
+#
+# `code` is every path a build, test or packaging job may depend on, so exclude only paths no such job reads. A code
+# path that no other class claims switches every class on, which means an unlisted path can never cause a job to be
+# skipped. A project that builds its documentation excludes the sources here and claims them in a class of its own
+# that gates the docs job. Project classes go below `code`.
+code:
+  - '**'
+  - '!**/*.md'
+  - '!.coderabbit.yaml'
+  - '!**/*.mmd'
+  - '!*.code-workspace'
+  - '!.github/ISSUE_TEMPLATE/**'
+  - '!LICENSE'
+  # unit-level tests never reach a build artifact; their own classes still run them{% if has_backend %}
+  - '!backend/tests/unit/**'{% endif %}
+  - '!frontend/tests/unit/**'
+  - '!frontend/tests/compiled/**'
+frontend:
+  - 'frontend/**'
+  - 'pnpm-lock.yaml'
+  - 'pnpm-workspace.yaml'{% if has_backend %}
+  - 'backend/tests/unit/__snapshots__/test_basic_server_functionality/test_openapi_schema.json'
+backend:
+  - 'backend/**'
+  - 'pytest.ini'{% endif %}{% if install_as_windows_service %}
+installer:
+  - 'installer/**'
+  - '!installer/**/*.md'{% endif %}