## Summary - Fixes a race condition where the automerge workflow merged PR #94 despite `browser-tests` failing - Adds SHA verification to ensure the CI run matches the PR's latest commit (prevents stale merges from earlier pushes) - Adds a failed-checks guard that inspects all PR check statuses before merging ## What happened PR #94 had two CI runs: an earlier one that passed and a later one where `browser-tests` failed. The automerge workflow triggered on the first successful run and merged the PR before the second run completed, because it only checked `workflow_run.conclusion == 'success'` without verifying it was for the latest commit. ## Test plan - [x] Push a PR with the Automerge label, verify it merges when all checks pass - [x] Push a follow-up commit that breaks browser-tests — verify the earlier success doesn't trigger a merge - [x] Verify PRs without the Automerge label are unaffected |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| FUNDING.yml | ||