From 20976e41ce49f13eca233fdbcba8b44e6943f1bc Mon Sep 17 00:00:00 2001 From: Derek Misler Date: Tue, 30 Jun 2026 15:59:26 +0000 Subject: [PATCH 1/2] ci: add concurrency group to pr-review-trigger to prevent duplicate reviews Signed-off-by: Derek Misler --- .github/workflows/pr-review-trigger.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/pr-review-trigger.yml b/.github/workflows/pr-review-trigger.yml index c176020256e5..827013152f3a 100644 --- a/.github/workflows/pr-review-trigger.yml +++ b/.github/workflows/pr-review-trigger.yml @@ -7,8 +7,18 @@ on: permissions: {} +# Deduplicate simultaneous pull_request events for the same fork PR. +# When reviewers are requested at the same time, GitHub fires multiple +# review_requested events. Without this group each event triggers a +# separate review via workflow_run, producing duplicate reviews. +concurrency: + group: pr-review-trigger-${{ github.event.pull_request.number }} + cancel-in-progress: true + jobs: save-context: + # Only run on fork PRs; skip GitHub App bot accounts (Dependabot, Renovate, etc.) early. + if: github.event.pull_request.head.repo.fork && github.event.sender.type != 'Bot' runs-on: ubuntu-latest steps: - name: Save event context From ecd53d5839780806c5e4847a22e6a2351a706aa7 Mon Sep 17 00:00:00 2001 From: Derek Misler Date: Tue, 30 Jun 2026 19:25:57 +0000 Subject: [PATCH 2/2] ci: remove bot filter to keep Dependabot PRs reviewable The sender.type != 'Bot' guard would have prevented reviews on Dependabot PRs. Per maintainer feedback, those reviews are useful for catching behavior changes in dependency updates. The concurrency group (the core fix for duplicate reviews) is independent of the bot filter and remains in place. --- .github/workflows/pr-review-trigger.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/pr-review-trigger.yml b/.github/workflows/pr-review-trigger.yml index 827013152f3a..1ecc03b098dc 100644 --- a/.github/workflows/pr-review-trigger.yml +++ b/.github/workflows/pr-review-trigger.yml @@ -17,8 +17,7 @@ concurrency: jobs: save-context: - # Only run on fork PRs; skip GitHub App bot accounts (Dependabot, Renovate, etc.) early. - if: github.event.pull_request.head.repo.fork && github.event.sender.type != 'Bot' + if: github.event.pull_request.head.repo.fork runs-on: ubuntu-latest steps: - name: Save event context