ci: skip CI when only release.yml changes

[Mossaka]

Summary

• Adds paths-ignore: ['.github/workflows/release.yml'] to 10 CI workflow triggers so that PRs modifying only release.yml don't trigger slow integration tests and other unnecessary checks
• Affected workflows: build, codeql, dependency-audit, lint, test-action, test-chroot, test-coverage, test-examples, test-integration-suite, test-integration
• workflow_dispatch and push to main triggers are unchanged, so scheduled/manual runs still work

Test plan

• Verify this PR itself triggers the expected subset of workflows (all workflows should still run since this PR touches workflow files beyond just release.yml)
• Create a test PR that only modifies release.yml and confirm no test/build workflows are triggered

🤖 Generated with Claude Code

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.56%	82.70%	📈 +0.14%
Statements	82.57%	82.70%	📈 +0.13%
Functions	83.01%	83.01%	➡️ +0.00%
Branches	75.12%	75.20%	📈 +0.08%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/docker-manager.ts	84.1% → 84.6% (+0.54%)	83.4% → 83.9% (+0.52%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts

[Copilot]

Pull request overview

This PR updates GitHub Actions workflow triggers to avoid running the main CI suite on pull requests that only modify the release workflow definition (.github/workflows/release.yml), reducing unnecessary CI load while leaving push to main and workflow_dispatch behavior intact.

Changes:

• Add paths-ignore: ['.github/workflows/release.yml'] to pull_request triggers across multiple CI workflows.
• Extend existing paths-ignore lists (where present) to include the release workflow file.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/build.yml	Ignore PRs that only change .github/workflows/release.yml for the build verification workflow.
.github/workflows/codeql.yml	Ignore PRs that only change .github/workflows/release.yml for CodeQL on PRs.
.github/workflows/dependency-audit.yml	Add release workflow file to PR paths-ignore for dependency auditing.
.github/workflows/lint.yml	Add release workflow file to PR paths-ignore for linting.
.github/workflows/test-action.yml	Add release workflow file to PR paths-ignore for action tests.
.github/workflows/test-chroot.yml	Ignore PRs that only change .github/workflows/release.yml for chroot integration tests.
.github/workflows/test-coverage.yml	Add release workflow file to PR paths-ignore for coverage reporting.
.github/workflows/test-examples.yml	Add release workflow file to PR paths-ignore for examples testing.
.github/workflows/test-integration-suite.yml	Ignore PRs that only change .github/workflows/release.yml for the integration suite.
.github/workflows/test-integration.yml	Ignore PRs that only change .github/workflows/release.yml for integration tests.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The PR title/description implies that PRs changing only .github/workflows/release.yml will skip CI broadly, but there are other workflows still triggered on pull_request without a matching paths-ignore (e.g. .github/workflows/build-test.lock.yml, smoke-*.lock.yml, container-scan.yml, pr-title.yml). As-is, a release-workflow-only PR will still run those checks; either extend the same paths-ignore to the remaining PR-triggered workflows you want to suppress, or adjust the PR title/description to reflect that only this subset is being skipped.

[github-actions]

Smoke Test Results — PASS

• ✅ GitHub MCP: fix: push only tag in release workflow to avoid branch protection violation #1258 fix: push only tag in release workflow, feat(proxy): add --openai-api-target and --anthropic-api-target flags #1249 feat(proxy): add --openai-api-target and --anthropic-api-target flags
• ✅ Playwright: github.com title contains "GitHub"
• ✅ File write: /tmp/gh-aw/agent/smoke-test-claude-23015440358.txt created
• ✅ Bash verify: file contents confirmed

💥 [THE END] — Illustrated by Smoke Claude for issue #1261

[github-actions]

PR titles:

• ci: skip CI when only release.yml changes
• fix: make release workflow compatible with branch protection
  Tests:
• GitHub MCP merged PRs: ✅
• safeinputs-gh pr list: ✅
• Playwright title check: ✅
• Tavily search: ❌
• File write: ✅
• Bash cat: ✅
• Discussion comment: ✅
• Build: ✅
  Overall: FAIL

🔮 The oracle has spoken through Smoke Codex for issue #1261

[github-actions]

Smoke test results for run 23015440360:

✅ GitHub MCP — Last 2 merged PRs: #1258 fix: push only tag in release workflow to avoid branch protection violation, #1254 fix: resolve test coverage regression and locked PR comment failure
✅ Playwright — github.com title contains "GitHub"
✅ File Write — /tmp/gh-aw/agent/smoke-test-copilot-23015440360.txt created
✅ Bash Tool — file verified via cat

Overall: PASS | Author: @Mossaka

📰 BREAKING: Report filed by Smoke Copilot for issue #1261

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	passed	✅ PASS
Go	env	✅	passed	✅ PASS
Go	uuid	✅	passed	✅ PASS
Java	gson	❌	N/A	❌ FAIL
Java	caffeine	❌	N/A	❌ FAIL
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 7/8 ecosystems passed — ❌ FAIL

---

❌ Failure Details

Java (gson, caffeine) — Maven compile failed: network unreachable when downloading Maven plugins from repo.maven.apache.org.

[ERROR] Could not transfer artifact org.apache.maven.plugins:maven-resources-plugin:pom:3.3.1
        from/to central (https://repo.maven.apache.org/maven2): Network is unreachable

Maven requires downloading plugin POMs on first use and cannot reach the Maven Central repository from this environment. The JAVA_TOOL_OPTIONS env var was set with a squid-proxy proxy host (not reachable outside the AWF container), and without that proxy the network is directly unreachable.

Generated by Build Test Suite for issue #1261 · ◷