internal/ci: skip "check git tags" when testing CLs

This step is only important so that we notice if any git tags vanish
from either GitHub or Gerrit. Its value comes mainly from running
regularly, i.e. on pushes to master and the nightly runs. It doesn't
have to run when testing every incoming CL or PR, because those don't
affect the presence of any tags.

This step is fast, but it still takes 2-5s on the slowest matrix job.

Signed-off-by: Daniel Martí <[email protected]>
Change-Id: I15bd92a354cec05fe025a6ea9b83fc4fc4facc96
Reviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1217961
TryBot-Result: CUEcueckoo <[email protected]>
Reviewed-by: Paul Jolly <[email protected]>
Unity-Result: CUE porcuepine <[email protected]>

Author: mvdan

.github/workflows/trybot.yaml

@@ -151,7 +151,9 @@ jobs:
           version: "2025.1"
           install-go: false
           use-cache: false
-      - if: (matrix.go-version == '1.24.x' && matrix.runner == 'ns-ubuntu-amd64')
+      - if: |-
+          (((github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/heads/release-branch.')) && (! (contains(github.event.head_commit.message, '
+          Dispatch-Trailer: {"type":"')))) || (github.ref == 'refs/heads/ci/test')) && (matrix.go-version == '1.24.x' && matrix.runner == 'ns-ubuntu-amd64')
         name: Check all git tags are available
         run: |-
           cd $(mktemp -d)

internal/ci/github/trybot.cue

@@ -193,12 +193,12 @@ workflows: trybot: _repo.bashWorkflow & {
 
 	_checkTags: githubactions.#Step & {
 		// Ensure that GitHub and Gerrit agree on the full list of available tags.
-		// This way, if there is any discrepancy, we will get a useful go-cmp diff.
+		// This way, if there is any discrepancy, we will get a useful diff.
 		//
 		// We use `git ls-remote` to list all tags from each remote git repository
 		// because it does not depend on custom REST API endpoints and is very fast.
 		// Note that it sorts tag names as strings, which is not the best, but works OK.
-		if:   _isLatestLinux
+		if:   "(\(_repo.isProtectedBranch) || \(_repo.isTestDefaultBranch)) && \(_isLatestLinux)"
 		name: "Check all git tags are available"
 		run: """
 			cd $(mktemp -d)