From 418650e01ca74e7f278bafe8f9b2ac51f2b31a2b Mon Sep 17 00:00:00 2001 From: Riccardo Cipolleschi Date: Tue, 7 Jul 2026 11:02:48 +0200 Subject: [PATCH 1/3] Treat 260318099.0.0-staging as a non-releasing branch like static_h We must never release from the staging branch. Mirror the static_h setup: - Add the staging branch to the force-dry-run guard in set_release_type so RELEASE_TYPE is always dry-run, even for a manual workflow_dispatch that requests 'release'. Previously only static_h was guarded, so a dispatch on staging could have produced a real release. - Add the staging branch to the push and pull_request triggers so the RN build actually runs (and is verified) on the branch and its PRs. --- .github/workflows/rn-build-hermes.yml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/rn-build-hermes.yml b/.github/workflows/rn-build-hermes.yml index 5ab50f81d04..999a7e0aef2 100644 --- a/.github/workflows/rn-build-hermes.yml +++ b/.github/workflows/rn-build-hermes.yml @@ -14,10 +14,12 @@ on: pull_request: branches: - static_h + - 260318099.0.0-staging push: branches: - 250829098.0.0-stable - static_h + - 260318099.0.0-staging jobs: set_release_type: @@ -38,9 +40,10 @@ jobs: uses: ./.github/actions/yarn-install - id: set_release_type run: | - # Guard: never allow release mode on static_h branch - if [[ $REF == "refs/heads/static_h" ]]; then - echo "Branch is static_h, forcing dry-run mode" + # Guard: never allow release mode on non-releasing branches + # (static_h and the staging branch), even via workflow_dispatch. + if [[ $REF == "refs/heads/static_h" || $REF == "refs/heads/260318099.0.0-staging" ]]; then + echo "Branch is a non-releasing branch, forcing dry-run mode" echo "RELEASE_TYPE=dry-run" >> $GITHUB_OUTPUT elif [[ $EVENT_NAME == "workflow_dispatch" ]]; then echo "Setting release type to ${{ github.event.inputs.release-type }}" From 1df5cef4d5b8fdc48d1e0dec7a8cbb12d3190a22 Mon Sep 17 00:00:00 2001 From: Riccardo Cipolleschi Date: Tue, 7 Jul 2026 11:04:37 +0200 Subject: [PATCH 2/3] Force dry-run for any branch ending in -staging Generalize the release guard so any *-staging branch (not just 260318099.0.0-staging) is always built in dry-run mode, including via workflow_dispatch. Release branches (*-stable) are unaffected. --- .github/workflows/rn-build-hermes.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/rn-build-hermes.yml b/.github/workflows/rn-build-hermes.yml index 999a7e0aef2..d950abcfa75 100644 --- a/.github/workflows/rn-build-hermes.yml +++ b/.github/workflows/rn-build-hermes.yml @@ -40,9 +40,10 @@ jobs: uses: ./.github/actions/yarn-install - id: set_release_type run: | - # Guard: never allow release mode on non-releasing branches - # (static_h and the staging branch), even via workflow_dispatch. - if [[ $REF == "refs/heads/static_h" || $REF == "refs/heads/260318099.0.0-staging" ]]; then + # Guard: never allow release mode on non-releasing branches: + # static_h and any branch whose name ends in `-staging`, even via + # workflow_dispatch. + if [[ $REF == "refs/heads/static_h" || $REF == refs/heads/*-staging ]]; then echo "Branch is a non-releasing branch, forcing dry-run mode" echo "RELEASE_TYPE=dry-run" >> $GITHUB_OUTPUT elif [[ $EVENT_NAME == "workflow_dispatch" ]]; then From f8479c5fafdc55b7ab0373908247252ee6dfeb15 Mon Sep 17 00:00:00 2001 From: Riccardo Cipolleschi Date: Tue, 7 Jul 2026 15:10:22 +0200 Subject: [PATCH 3/3] Re-trigger CI / CLA check