From 4cfce964cb6104bdf1abd2cac86d82a9fadea1c5 Mon Sep 17 00:00:00 2001
From: Saadi Myftija <saadi@myftija.com>
Date: Fri, 28 Aug 2026 17:35:18 +0200
Subject: [PATCH] ci(publish): skip publish for packages not built into the
 images

publish.yml builds the webapp and worker/supervisor images. Ignore changes
confined to packages that never land in those images so a docker publish (and
the downstream enterprise-image dispatch) isn't triggered for a no-op:

- packages: cli-v3, build, python, react-hooks, rsc, schema-to-json (npm-only)
- internal-packages: testcontainers, sdk-compat-tests, observability-map (test/tooling)

Verified by imports, not the dependency closure: the webapp imports
@internal/clickhouse and @internal/replication despite not declaring them, so
those (and everything else in the image) keep triggering publish.
---
 .github/workflows/publish.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1b9e55c3b34..8f55076ffbb 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -33,7 +33,18 @@ on:
       - "packages/**"
       - "!packages/**/*.md"
       - "!packages/**/*.eslintrc"
+      # CLI + libraries published to npm; none are built into the webapp/supervisor images.
+      - "!packages/cli-v3/**"
+      - "!packages/build/**"
+      - "!packages/python/**"
+      - "!packages/react-hooks/**"
+      - "!packages/rsc/**"
+      - "!packages/schema-to-json/**"
       - "internal-packages/**"
+      # Test/tooling-only internal packages, never in an image.
+      - "!internal-packages/testcontainers/**"
+      - "!internal-packages/sdk-compat-tests/**"
+      - "!internal-packages/observability-map/**"
       - "apps/**"
       - "!apps/**/*.md"
       - "!apps/**/*.eslintrc"