From fdd7a15c7994d5182f6400112de5ea4787a338ab Mon Sep 17 00:00:00 2001 From: DarkIsDude Date: Mon, 15 Jun 2026 16:40:55 +0200 Subject: [PATCH 1/2] =?UTF-8?q?=E2=9C=85=20skip=20async/await=20diff=20che?= =?UTF-8?q?ck=20when=20PR=20has=20skip-async-migration=20label?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Issue: CLDSRV-926 --- .github/workflows/tests.yaml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 90a28c06da..33311f7783 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -73,6 +73,7 @@ env: permissions: contents: read packages: write + pull-requests: read jobs: lint: @@ -107,7 +108,15 @@ jobs: - name: Lint Yaml run: yamllint -c yamllint.yml $(git ls-files "*.yml") - name: Check async/await compliance in diff - run: yarn run check-diff-async + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: | + if gh pr list --head "${{ github.ref_name }}" --state open --json labels \ + --jq '.[].labels[].name' 2>/dev/null | grep -qx 'skip-async-migration'; then + echo "Skipping async/await check: 'skip-async-migration' label found" + else + yarn run check-diff-async + fi async-migration-report: runs-on: ubuntu-24.04 From 523f3349ddbf0dcc0d5b23a6471277b9e85432bc Mon Sep 17 00:00:00 2001 From: DarkIsDude Date: Tue, 16 Jun 2026 15:29:11 +0200 Subject: [PATCH 2/2] =?UTF-8?q?=F0=9F=94=92=20harden=20script=20injection?= =?UTF-8?q?=20in=20async/await=20check=20step?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Issue: CLDSRV-926 --- .github/workflows/tests.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 33311f7783..525dd6695a 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -110,8 +110,9 @@ jobs: - name: Check async/await compliance in diff env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + BRANCH_NAME: ${{ github.ref_name }} run: | - if gh pr list --head "${{ github.ref_name }}" --state open --json labels \ + if gh pr list --head "$BRANCH_NAME" --state open --json labels \ --jq '.[].labels[].name' 2>/dev/null | grep -qx 'skip-async-migration'; then echo "Skipping async/await check: 'skip-async-migration' label found" else