From cc5f99b4ec762545ff760734d0b0fb615d1d0691 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 12 Jun 2026 10:27:27 -0400
Subject: [PATCH] ci: Enable merge queue support

Add the merge_group event trigger so CI runs when a pull request
enters the GitHub merge queue. Also add a required-checks sentinel
job that gates on all other jobs, which is the single check name to
configure in the repository branch protection settings.

xref: https://github.com/bootc-dev/infra/issues/143

Assisted-by: OpenCode (Claude Sonnet 4.6)
Signed-off-by: Colin Walters <walters@verbum.org>
---
 .github/workflows/ci.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2c3a400..8b59713 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,6 +5,7 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
+  merge_group:
 
 env:
   CARGO_TERM_COLOR: always
@@ -74,3 +75,20 @@ jobs:
       - run: chmod +x /usr/local/bin/cfsrun /usr/local/bin/cfsctl
       - name: Run rootful integration tests
         run: cargo test --test integration
+
+  required-checks:
+    name: Required Checks
+    if: always()
+    needs: [fmt, build, integration-rootful]
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Check all jobs
+        env:
+          NEEDS: ${{ toJson(needs) }}
+        run: |
+          FAILED=$(echo "$NEEDS" | jq -r 'to_entries[] | select(.value.result | IN("success","skipped") | not) | .key')
+          if [ -n "$FAILED" ]; then
+            echo "The following jobs did not succeed: $FAILED"
+            exit 1
+          fi
+          echo "All jobs succeeded or were skipped."