From 73b268999d21e15d84f23d8d10df47b7b15ed1bb Mon Sep 17 00:00:00 2001 From: Timo Stamm Date: Mon, 12 Oct 2026 15:19:11 +0200 Subject: [PATCH] Skip dependabot pushes to BSR Skips dependabot pushes to buf.build. These are no longer skipped in CI by the action as github provides way to give secrets to dependabot. However, this isn't useful for us, so skip them in CI. --- .github/workflows/buf-ci.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/buf-ci.yaml b/.github/workflows/buf-ci.yaml index 25e02015..05cb86c3 100644 --- a/.github/workflows/buf-ci.yaml +++ b/.github/workflows/buf-ci.yaml @@ -31,4 +31,7 @@ jobs: with: version: "1.72.0" token: ${{ secrets.BUF_TOKEN }} - push: ${{ github.ref != 'refs/heads/main' && github.event_name == 'push' }} + # main is published as a managed module from releases (#470). Push all + # other branches, except dependabot's: their push runs do not have + # access to a BUF_TOKEN. + push: ${{ github.event_name == 'push' && github.ref != 'refs/heads/main' && github.actor != 'dependabot[bot]' }}