Warn on opening a PR to `release` workflow (MithrilJS/mithril.js)

The Warn on opening a PR to release workflow from MithrilJS/mithril.js, explained and optimized by Latchkey.

What it does

This is the Warn on opening a PR to release workflow from the MithrilJS/mithril.js repository, a real project running GitHub Actions. It is shown here with attribution under its MIT license.

Below, Latchkey shows a faster, safer version produced by its optimization engine.

The workflow

name: Warn on opening a PR to `release`
on:
  pull_request_target:
    types: [opened]
    branches: [release]
permissions:
  issues: write
jobs:
  comment:
    # Don't auto-close actual release PRs
    if: ${{github.actor != 'JAForbes' || !contains(github.event.issue.title, 'Release - v')}}
    uses: MithrilJS/infra/.github/workflows/reject-pr.yml@main
    secrets: inherit

The same workflow, on Latchkey

Removes redundant runs and caps runaway jobs. Added and changed lines are highlighted.

name: Warn on opening a PR to `release`
on:
  pull_request_target:
    types: [opened]
    branches: [release]
permissions:
  issues: write
jobs:
  comment:
    timeout-minutes: 30
    # Don't auto-close actual release PRs
    if: ${{github.actor != 'JAForbes' || !contains(github.event.issue.title, 'Release - v')}}
    uses: MithrilJS/infra/.github/workflows/reject-pr.yml@main
    secrets: inherit
 

What changed

• Add a job timeout so a hung step cannot burn hours of runner time.

1 third-party action is referenced by a movable tag. Pin it to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.

This workflow runs 1 job per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.