chore(repo): ignore docs changes in workflows (#411)

* chore(repo): ignore docs changes in workflows

* .

* .

* chore(repo): remove workflows from merge_group so they don't trigger every time a PR gets merged to main, add merge-gatekeeper

.github/workflows/ci-all.yml

@@ -14,7 +14,6 @@ on:
       - "lib/**"
       - "script/**"
       - "!docs/**"
-  merge_group:
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/ci-lint.yml

@@ -3,7 +3,8 @@ name: CI - Lint
 on:
   pull_request:
     types: [opened, reopened, edited, synchronize]
-  merge_group:
+    paths:
+      - "!docs/**"
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/ci-provers.yml

@@ -7,11 +7,12 @@ on:
     paths:
       - "pipelines/**"
       - "harness/**"
+      - "!docs/**"
   pull_request:
     paths:
       - "pipelines/**"
       - "harness/**"
-  merge_group:
+      - "!docs/**"
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/ci-risc0.yml

@@ -6,10 +6,11 @@ on:
     branches: ["main"]
     paths:
       - "provers/risc0/**"
+      - "!docs/**"
   pull_request:
     paths:
       - "provers/risc0/**"
-  merge_group:
+      - "!docs/**"
 
 jobs:
   build-test-risc0:

.github/workflows/ci-sgx-all.yml

@@ -6,10 +6,11 @@ on:
     branches: ["main"]
     paths:
       - "provers/sgx/**"
+      - "!docs/**"
   pull_request:
     paths:
       - "provers/sgx/**"
-  merge_group:
+      - "!docs/**"
 
 jobs:
   build-test-sgx:

.github/workflows/ci-sgx-docker.yml

@@ -6,10 +6,11 @@ on:
     branches: ["main"]
     paths:
       - "docker/**"
+      - "!docs/**"
   pull_request:
     paths:
       - "docker/**"
-  merge_group:
+      - "!docs/**"
 
 jobs:
   build-test-sgx-with-docker:

.github/workflows/ci-sp1.yml

@@ -6,10 +6,11 @@ on:
     branches: ["main"]
     paths:
       - "provers/sp1/**"
+      - "!docs/**"
   pull_request:
     paths:
       - "provers/sp1/**"
-  merge_group:
+      - "!docs/**"
 
 jobs:
   build-test-sp1:

.github/workflows/openapi-deploy.yml

@@ -3,10 +3,11 @@ name: OpenAPI
 on:
   push:
     branches: ["main"]
-    paths-ignore:
-      - "docs/**"
+    paths:
+      - "!docs/**"
   pull_request:
-  merge_group:
+    paths:
+      - "!docs/**"
 
 permissions:
   contents: read

.github/workflows/repo--merge-gatekeeper.yml

@@ -0,0 +1,21 @@
+name: Merge Gatekeeper
+
+on:
+  pull_request:
+    branches:
+      - main
+  merge_group: # Trigger in merge queue to pass the required status check
+
+jobs:
+  merge-gatekeeper:
+    if: ${{ github.event_name == 'pull_request' && github.event.pull_request.draft == false }}
+    runs-on: [arc-runner-set]
+    permissions:
+      checks: read
+      statuses: read
+    steps:
+      - name: Run Merge Gatekeeper
+        uses: upsidr/merge-gatekeeper@v1
+        with:
+          timeout: 1200
+          token: ${{ secrets.GITHUB_TOKEN }}