ci: auto-label new package PRs with '8.has: package (new)'

Author: qweered

.github/actions/checkout/action.yml

@@ -99,16 +99,13 @@ runs:
               break
           }
 
-          // Create all worktrees in parallel.
-          await Promise.all(
-            commits
-              .filter(({ path }) => Boolean(path))
-              .map(async ({ sha, path }) => {
-                await run('git', 'worktree', 'add', join('nixpkgs', path), sha, '--no-checkout')
-                await run('git', '-C', join('nixpkgs', path), 'sparse-checkout', 'disable')
-                await run('git', '-C', join('nixpkgs', path), 'checkout', '--progress')
-              })
-          )
+          // Create worktrees sequentially to avoid git lock conflicts.
+          // Parallel worktree creation can fail with "failed to read .git/worktrees/.../commondir".
+          for (const { sha, path } of commits.filter(({ path }) => Boolean(path))) {
+            await run('git', 'worktree', 'add', join('nixpkgs', path), sha, '--no-checkout')
+            await run('git', '-C', join('nixpkgs', path), 'sparse-checkout', 'disable')
+            await run('git', '-C', join('nixpkgs', path), 'checkout', '--progress')
+          }
 
           // Apply pin bump to untrusted worktree
           if (pin_bump_sha) {

ci/github-script/bot.js

@@ -68,8 +68,19 @@ module.exports = async ({ github, context, core, dry }) => {
 
     // We get here when none of the 10 commits we looked at contained a maintainer map.
     // For the master branch, we don't have any fallback options, so we error out.
+    // In forks without merge-group history, return empty map to allow testing.
+    if (branch === 'master') {
+      const isFork = context.repo.owner !== 'NixOS'
+      if (isFork) {
+        core.warning(
+          'No maintainer map found. Using empty map (expected in forks without merge-group history).',
+        )
+        return {}
+      }
+      throw new Error('No maintainer map found.')
+    }
+
     // For other branches, we select a suitable fallback below.
-    if (branch === 'master') throw new Error('No maintainer map found.')
 
     const { stable, version } = classify(branch)
 
@@ -109,6 +120,11 @@ module.exports = async ({ github, context, core, dry }) => {
       return []
     }
 
+    // Forks don't have NixOS teams, return empty list
+    if (context.repo.owner !== 'NixOS') {
+      return []
+    }
+
     if (!members[team_slug]) {
       members[team_slug] = github.paginate(github.rest.teams.listMembersInOrg, {
         org: context.repo.owner,
@@ -304,9 +320,16 @@ module.exports = async ({ github, context, core, dry }) => {
         expectedHash: artifact.digest,
       })
 
-      const evalLabels = JSON.parse(
+      const changedPaths = JSON.parse(
         await readFile(`${pull_number}/changed-paths.json`, 'utf-8'),
-      ).labels
+      )
+      const evalLabels = changedPaths.labels
+
+      // Label new package PRs when title contains ": init at" pattern
+      const hasNewPackages = changedPaths.attrdiff?.added?.length > 0
+      const titleIndicatesNewPackage = /: init at\b/.test(pull_request.title)
+      evalLabels['8.has: package (new)'] =
+        hasNewPackages && titleIndicatesNewPackage
 
       // TODO: Get "changed packages" information from list of changed by-name files
       // in addition to just the Eval results, to make this work for these packages