ci: add path filtering and final status checks to workflows

Signed-off-by: ComixHe <ComixHe1895@outlook.com>

Author: ComixHe

.github/workflows/build.yaml

@@ -3,19 +3,34 @@ name: build
 on:
   pull_request:
     branches: ['master', 'release/**']
-    paths-ignore: ['**.md', '**.toml', '**.yaml', 'docs/**']
   push:
     branches: ['master', 'release/**']
-    paths-ignore: ['**.md', '**.toml', '**.yaml', 'docs/**']
 
 jobs:
+  path-filter:
+    runs-on: ubuntu-latest
+    outputs:
+      should_build: ${{ steps.filter.outputs.code }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          filters: |
+            code:
+              - '!**.md'
+              - '!**.toml'
+              - '!**.yaml'
+              - '!docs/**'
+
   build-on-ubuntu-24:
+    needs: path-filter
+    if: ${{ needs.path-filter.outputs.should_build == 'true' }}
     name: build on ${{ matrix.os }} with Qt6
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         os: ['ubuntu-24.04', 'ubuntu-24.04-arm']
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
@@ -43,10 +58,11 @@ jobs:
         run: cmake --build build --parallel
 
       - name: Run tests
-        run: |
-          cmake --build build --target test
+        run: cmake --build build --target test
 
   build-on-ubuntu-22:
+    needs: path-filter
+    if: ${{ needs.path-filter.outputs.should_build == 'true' }}
     name: build on ${{ matrix.os }} with Qt5
     runs-on: ${{ matrix.os }}
     strategy:
@@ -79,3 +95,16 @@ jobs:
 
       - name: Build
         run: cmake --build build --parallel
+
+  build-status:
+    name: Final build Status
+    needs: [path-filter, build-on-ubuntu-24, build-on-ubuntu-22]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Decide status
+        run: |
+          if [[ "${{ needs.build-on-ubuntu-24.result }}" == "failure" || "${{ needs.build-on-ubuntu-22.result }}" == "failure" ]]; then
+            exit 1
+          fi
+          exit 0

.github/workflows/codecov.yaml

@@ -1,22 +1,44 @@
 name: coverage
+
 on:
-  pull_request_target:
+  pull_request:
+    branches: ['master', 'release/**']
   push:
-    branches:
-      - master
-      - 'release/**'
+    branches: ['master', 'release/**']
+
 jobs:
+  path-filter:
+    runs-on: ubuntu-latest
+    outputs:
+      should_scan: ${{ steps.filter.outputs.code }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          filters: |
+            code:
+              - '!**.md'
+              - '!**.toml'
+              - '!**.yaml'
+              - '!docs/**'
+
   codecov:
+    needs: path-filter
+    if: ${{ needs.path-filter.outputs.should_scan == 'true' }}
     name: codecov
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
+      - uses: actions/checkout@v6
 
       - uses: awalsh128/cache-apt-pkgs-action@latest
         with:
-          packages: gcovr cmake debhelper-compat erofs-utils erofsfuse intltool libcap-dev libcli11-dev libcurl4-openssl-dev libdeflate-dev libelf-dev libexpected-dev libfuse3-dev libglib2.0-dev libgmock-dev libgtest-dev liblz4-dev liblzma-dev libostree-dev libpcre2-dev libselinux1-dev libssl-dev libsystemd-dev libyaml-cpp-dev libzstd-dev nlohmann-json3-dev pkg-config qtbase5-dev qtbase5-private-dev systemd zlib1g-dev
+          packages: >-
+            gcovr cmake debhelper-compat erofs-utils erofsfuse intltool libcap-dev libcli11-dev
+            libcurl4-openssl-dev libdeflate-dev libelf-dev libexpected-dev libfuse3-dev libglib2.0-dev libgmock-dev
+            libgtest-dev liblz4-dev liblzma-dev libostree-dev libpcre2-dev libselinux1-dev libssl-dev libsystemd-dev
+            libyaml-cpp-dev libzstd-dev nlohmann-json3-dev pkg-config qt6-base-dev qt6-base-private-dev systemd zlib1g-dev
+            libwayland-dev wayland-protocols libgl1-mesa-dev
           version: 1.0
 
       - name: Generate coverage
@@ -30,3 +52,19 @@ jobs:
           files: ./build-generate-coverage/report/index.xml
           disable_search: true
           disable_telem: true
+
+  coverage_final_status:
+    name: Coverage Check Success
+    needs: [path-filter, codecov]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Decide Status
+        run: |
+          RESULT="${{ needs.codecov.result }}"
+          if [[ "$RESULT" == "failure" ]]; then
+            echo "Coverage generation failed."
+            exit 1
+          fi
+          echo "Coverage passed or skipped."
+          exit 0

.github/workflows/lint.yml

@@ -1,4 +1,5 @@
 name: lint
+
 on:
   pull_request:
     branches: ['master', 'release/**']
@@ -18,13 +19,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
 
-      - uses: dorny/paths-filter@v3
-        id: filter
-        with:
-          filters: |
-            code:
-              - '!(docs/**|**.md)'
-
       - name: Set up Python
         if: steps.filter.outputs.code == 'true'
         uses: actions/setup-python@v6
@@ -34,3 +28,21 @@ jobs:
       - name: Run pre-commit
         if: steps.filter.outputs.code == 'true'
         uses: pre-commit/action@v3.0.1
+
+  lint_final_status:
+    name: Lint Check Success
+    needs: [check_job, pre_commit_job]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check Overall Status
+        run: |
+          COMMIT_RESULT="${{ needs.check_job.result }}"
+          STYLE_RESULT="${{ needs.pre_commit_job.result }}"
+
+          if [[ "$COMMIT_RESULT" == "failure" || "$STYLE_RESULT" == "failure" ]]; then
+            echo "Lint failed."
+            exit 1
+          fi
+          echo "All lint checks passed."
+          exit 0