From 73254279d7fcbc95deb9fc538d46d67765a2317b Mon Sep 17 00:00:00 2001 From: Mike Dalessio Date: Thu, 15 Oct 2026 11:45:23 -0400 Subject: [PATCH] Run SaaS CI after syncing a Dependabot lockfile The sync job pushed with `GITHUB_TOKEN`, which doesn't trigger push workflows, so the head commit of Dependabot bundler PRs never ran the app tests. Dispatch `CI (SaaS)` on the branch after the sync commit is pushed. ref: https://github.com/basecamp/fizzy/pull/3180 --- .github/workflows/ci-saas.yml | 1 + .github/workflows/dependabot-sync-saas-lockfile.yml | 7 ++++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci-saas.yml b/.github/workflows/ci-saas.yml index 8961f7e752..d71bdf5630 100644 --- a/.github/workflows/ci-saas.yml +++ b/.github/workflows/ci-saas.yml @@ -2,6 +2,7 @@ name: CI (SaaS) on: push: + workflow_dispatch: permissions: contents: read diff --git a/.github/workflows/dependabot-sync-saas-lockfile.yml b/.github/workflows/dependabot-sync-saas-lockfile.yml index 4abc2d454d..1cc7971c19 100644 --- a/.github/workflows/dependabot-sync-saas-lockfile.yml +++ b/.github/workflows/dependabot-sync-saas-lockfile.yml @@ -9,6 +9,7 @@ on: permissions: contents: write + actions: write jobs: sync: @@ -24,7 +25,10 @@ jobs: - name: Forward Gemfile.lock changes to Gemfile.saas.lock run: bin/bundle-drift forward - - name: Commit updated lockfile + # Pushes made with GITHUB_TOKEN don't trigger push workflows, so start CI on the new commit explicitly. + - name: Commit updated lockfile and run CI + env: + GH_TOKEN: ${{ github.token }} run: | git add Gemfile.saas.lock if ! git diff --cached --quiet; then @@ -32,4 +36,5 @@ jobs: git config user.email "github-actions[bot]@users.noreply.github.com" git commit -m "Sync Gemfile.saas.lock" git push + gh workflow run ci-saas.yml --ref "$GITHUB_REF_NAME" fi