Merge branch 'main' into feat/shell-exec-synchronous-endpoint

Author: jobordu

.github/actions/associated-pr/action.yml

@@ -10,6 +10,17 @@ inputs:
     description: GitHub user to Slack user mapping
     required: false
     default: "{}"
+  display-pr-details:
+    description: Whether to display associated PR details in the step summary
+    required: false
+    default: "false"
+  export-file-changes:
+    description: |
+      Newline-separated list of filenames to check for changes in the PR.
+      When provided, populates the `changes` output with the subset of these files
+      that were modified in the PR.
+    required: false
+    default: ""
 
 outputs:
   number:
@@ -31,11 +42,16 @@ outputs:
     description: The head repository full name of the PR
     value: ${{ steps.associated-pr.outputs.head_repo }}
   labels:
-    description: Comma-separated list of PR labels
+    description: JSON array of PR label names (use `fromJSON(...)` in expressions)
     value: ${{ steps.associated-pr.outputs.labels }}
   closed:
     description: Whether the PR is closed
     value: ${{ steps.associated-pr.outputs.closed }}
+  changes:
+    description: |
+      JSON array of filenames from `export-file-changes` that were modified in the PR.
+      Empty array when `export-file-changes` is not provided or no PR was found.
+    value: ${{ steps.associated-pr.outputs.changes }}
 
 runs:
   using: "composite"
@@ -73,36 +89,44 @@ runs:
       env:
         GH_USER_TO_SLACK_USER: ${{ inputs.gh-user-to-slack-user }}
         INPUT_SHA: ${{ steps.get-sha.outputs.sha }}
+        INPUT_EXPORT_FILE_CHANGES: ${{ inputs.export-file-changes }}
       with:
         script: | # js
           const commitSha = process.env.INPUT_SHA || context.sha;
-          let pr = context.payload.pull_request;
-
-          if (!pr || pr.head?.sha !== commitSha) {
-            const maxRetries = 5;
-            const baseDelay = 2000;
-
-            // Retry logic to handle timing issues with GitHub API
-            // Sometimes the commit-PR association isn't immediately available after merge
-            for (let attempt = 0; attempt < maxRetries; attempt++) {
-              if (attempt > 0) {
-                // Exponential backoff: 2s, 4s, 8s, 16s, 32s
-                const delay = baseDelay * Math.pow(2, attempt - 1);
-                core.info(`PR not found, retrying in ${delay}ms (attempt ${attempt + 1}/${maxRetries})...`);
-                await new Promise(resolve => setTimeout(resolve, delay));
-              }
-
-              const response = await github.rest.repos.listPullRequestsAssociatedWithCommit({
-                commit_sha: commitSha,
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-              });
-
-              if (response.data && response.data.length > 0) {
-                pr = response.data[0];
-                core.info(`Found PR #${pr.number} on attempt ${attempt + 1}`);
-                break;
-              }
+          const filesToTrack = (process.env.INPUT_EXPORT_FILE_CHANGES || '')
+            .split('\n')
+            .map(s => s.trim())
+            .filter(Boolean);
+          core.setOutput('changes', '[]');
+          core.setOutput('labels', '[]');
+
+          let pr;
+          const maxRetries = 5;
+          const baseDelay = 2000;
+
+          // Always fetch from the API rather than reading context.payload.pull_request:
+          // the webhook payload is frozen at event-fire time and does not reflect
+          // label/metadata changes made afterwards.
+          // Retry logic also handles timing issues where the commit-PR association
+          // isn't immediately available after merge.
+          for (let attempt = 0; attempt < maxRetries; attempt++) {
+            if (attempt > 0) {
+              // Exponential backoff: 2s, 4s, 8s, 16s, 32s
+              const delay = baseDelay * Math.pow(2, attempt - 1);
+              core.info(`PR not found, retrying in ${delay}ms (attempt ${attempt + 1}/${maxRetries})...`);
+              await new Promise(resolve => setTimeout(resolve, delay));
+            }
+
+            const response = await github.rest.repos.listPullRequestsAssociatedWithCommit({
+              commit_sha: commitSha,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+            });
+
+            if (response.data && response.data.length > 0) {
+              pr = response.data[0];
+              core.info(`Found PR #${pr.number} on attempt ${attempt + 1}`);
+              break;
             }
           }
 
@@ -124,11 +148,33 @@ runs:
           core.setOutput('title', pr.title);
           core.setOutput('head_ref', pr.head.ref);
           core.setOutput('head_repo', pr.head.repo?.full_name || '');
-          core.setOutput('labels', (pr.labels || []).map(l => l.name).join(','));
+          core.setOutput('labels', JSON.stringify((pr.labels || []).map(l => l.name)));
           core.setOutput('closed', pr.closed_at ? 'true' : 'false');
 
           const author = pr.merged_by?.login || pr.user.login;
           core.setOutput('author', author);
 
           const userMapping = JSON.parse(process.env.GH_USER_TO_SLACK_USER || '{}');
           core.setOutput('slack-user', userMapping[author] || "");
+
+          if (filesToTrack.length > 0) {
+            const files = await github.paginate(github.rest.pulls.listFiles, {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: pr.number,
+            });
+            const changedFilenames = new Set(files.map(f => f.filename));
+            const changes = filesToTrack.filter(f => changedFilenames.has(f));
+            core.setOutput('changes', JSON.stringify(changes));
+          }
+
+    - name: Display associated PR details
+      if: steps.associated-pr.outputs.number != '' && inputs.display-pr-details == 'true'
+      env:
+        PR_NUMBER: ${{ steps.associated-pr.outputs.number }}
+        PR_TITLE: ${{ steps.associated-pr.outputs.title }}
+      shell: bash
+      run: | # shell
+        pr_url="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/pull/${PR_NUMBER}"
+        echo "### Associated PR" >> "$GITHUB_STEP_SUMMARY"
+        echo "[#${PR_NUMBER} - ${PR_TITLE}](${pr_url})" >> "$GITHUB_STEP_SUMMARY"

.github/actions/console-web-ui-testing/action.yml

@@ -34,9 +34,15 @@ inputs:
     description: Mailsac API key for email verification
     required: true
   email-verification-strategy:
-    description: Email verification strategy (mailsac or auth0-ticket)
+    description: Email verification strategy (mailsac-code or auth0-ticket)
+    required: false
+    default: "mailsac-code"
+  test-user-email:
+    description: Pre-registered test user email for authenticated tests
+    required: false
+  test-user-password:
+    description: Pre-registered test user password for authenticated tests
     required: false
-    default: "mailsac"
 
 runs:
   using: "composite"
@@ -63,6 +69,8 @@ runs:
         AUTH0_M2M_CLIENT_SECRET: ${{ inputs.auth0-m2m-client-secret }}
         MAILSAC_API_KEY: ${{ inputs.mailsac-api-key }}
         EMAIL_VERIFICATION_STRATEGY: ${{ inputs.email-verification-strategy }}
+        TEST_USER_EMAIL: ${{ inputs.test-user-email }}
+        TEST_USER_PASSWORD: ${{ inputs.test-user-password }}
         USER_DATA_DIR: ${{ runner.temp }}/chrome-profile-${{ github.run_id }}-${{ github.run_attempt }}
         CI: "true"
       shell: bash

.github/actions/poll-check-status/action.yml

@@ -37,7 +37,7 @@ runs:
         MAX_RETRIES: ${{ inputs.max_retries }}
         EXPECTED_CONCLUSIONS: ${{ inputs.expected_conclusions }}
       with:
-        script: |
+        script: | # js
           const checkName = process.env.CHECK_NAME;
           const sha = process.env.CHECK_SHA;
           const checkType = process.env.CHECK_TYPE;