ci: reduce repeated Windows and fuzz tests on pull requests (#10043)

* ci: reduce repeated Windows and fuzz tests on pull requests

Signed-off-by: WenyXu <wenymedia@gmail.com>

* ci: use the nightly merge label as the enqueue opt-in

Signed-off-by: WenyXu <wenymedia@gmail.com>

* ci: log nightly merge decisions for dry-run verification

Signed-off-by: WenyXu <wenymedia@gmail.com>

* ci: gate expensive jobs on GitHub script tests

Signed-off-by: WenyXu <wenymedia@gmail.com>

* ci: grant pull request write permission for nightly label sync

Signed-off-by: WenyXu <wenymedia@gmail.com>

* ci: run platform checks on schedule or manual dispatch

Signed-off-by: WenyXu <wenymedia@gmail.com>

* test(ci): update PR gate count for scheduled platform checks

Signed-off-by: WenyXu <wenymedia@gmail.com>

---------

Signed-off-by: WenyXu <wenymedia@gmail.com>

.github/scripts/tests/nightly-merge.test.cjs

@@ -61,16 +61,22 @@ async function run({ sync = false, body = checked, labels = ['merge nightly'],
   const summary = { addHeading() { return this; }, addTable(rows) { calls.push(['summary', rows]); return this; }, async write() {} };
   await scripts[sync ? 0 : 1](github,
     { repo: { owner: 'GreptimeTeam', repo: 'greptimedb' }, payload: { pull_request: { number: 1 } } },
-    { summary, warning() {}, setFailed: message => calls.push(['failed', message]) },
+    { summary, info() {}, warning() {}, setFailed: message => calls.push(['failed', message]) },
     { env: { DRY_RUN: String(dryRun) } });
   return calls;
 }
 
+test('label sync grants PR label write permission without checking out PR code', () => {
+  const syncJob = workflow.split('  sync-label:\n')[1].split('  enqueue:\n')[0];
+  assert.match(syncJob, /^      pull-requests: write$/m);
+  assert.doesNotMatch(syncJob, /uses: actions\/checkout/);
+});
+
 test('template opts in and checkbox edits reconcile only the nightly label', async () => {
   assert.ok(readFileSync(resolve(__dirname, '../../pull_request_template.md'), 'utf8').includes(checked));
   assert.deepEqual(await run({ sync: true, labels: ['bug'] }), [['add', ['merge nightly']]]);
   assert.deepEqual(await run({ sync: true }), []);
-  for (const body of [checked.replace('[x]', '[ ]'), '', null, `> ${checked}`]) {
+  for (const body of [checked.replace('[x]', '[ ]')]) {
     assert.deepEqual(await run({ sync: true, body }), [['remove', 'merge nightly']]);
   }
   assert.deepEqual(await run({ sync: true, body: checked.replace('[x]', '[X]'), labels: [] }), [['add', ['merge nightly']]]);
@@ -83,7 +89,7 @@ test('eligible PR is enqueued with its checked head; dry run performs no mutatio
 
 test('each eligibility gate independently prevents enqueueing', async () => {
   for (const options of [
-    { body: checked.replace('[x]', '[ ]') }, { labels: [] },
+    { labels: [] },
     { current: { draft: true } }, { current: { state: 'closed' } }, { current: { base: { ref: 'release/v1.3' } } },
     { detail: { reviewDecision: 'REVIEW_REQUIRED' } }, { detail: { reviewDecision: 'CHANGES_REQUESTED' } },
     { detail: { mergeStateStatus: 'BLOCKED' } }, { detail: { mergeStateStatus: 'UNKNOWN' } },
@@ -106,3 +112,14 @@ test('per-run cap and individual failures do not prevent later candidates', asyn
   assert.equal(calls.filter(c => c[0] === 'enqueue').length, 2);
   assert.equal(calls.filter(c => c[0] === 'failed').length, 1);
 });
+
+test('label-only opt-in survives PRs without a template and does not require a checkbox', async () => {
+  for (const body of ['', null, 'Existing PR description', `> ${checked}`]) {
+    assert.deepEqual(await run({ sync: true, body }), []);
+    assert.deepEqual(await run({ sync: true, body, labels: [] }), []);
+    assert.equal((await run({ body })).filter(call => call[0] === 'enqueue').length, 1);
+    assert.equal((await run({ body, labels: [] })).some(call => call[0] === 'enqueue'), false);
+  }
+  // The label is authoritative for admission, even before checkbox synchronization.
+  assert.equal((await run({ body: checked.replace('[x]', '[ ]') })).some(call => call[0] === 'enqueue'), true);
+});

.github/scripts/tests/test_ci_slash.py

@@ -136,7 +136,7 @@ class CiSlashTest(unittest.TestCase):
 
     def test_fork_rerun_gates_cover_standard_jobs(self):
         import re
-        for name, count in [("rust", 7), ("integration", 7), ("checks", 6), ("docs", 3)]:
+        for name, count in [("rust", 6), ("integration", 8), ("checks", 6), ("docs", 3)]:
             workflow = (SCRIPT.parents[1] / "workflows" / (name + ".yml")).read_text()
             gates = re.findall(r"^    if:.*github.run_attempt > 1.*$", workflow, re.MULTILINE)
             self.assertEqual(len(gates), count, name)