chore: extract/consolidate contributor pr workflow

[cacieprins]

• Closes

Additional details

Previously, we had an entirely separate workflow defined for contributor pull requests. This was implemented in order to require maintainer approval for running expensive CI jobs on contributor pull requests.

This consolidates the contributor PR into the primary pull-request workflow, while keeping the same behavior.

The node_modules_install, build, check-ts, lint, and lint-types jobs will still run for external contributors. Any subsequent jobs require that the approve-contributor-pr job be approved by a maintainer. Because the approve-contributor-pr job is conditional based on the branch pattern, declaring it as required for subsequent jobs will only be enforced if that job runs - internal contributor/maintainer PRs will not run that job, so it will be skipped as required.

Steps to test

Fork this branch to another account, and open a pull request. Verify that it prevents expensive jobs from running prior to approval.

How has the user experience changed?

PR Tasks

• [NA] Have tests been added/updated?
• [NA] Has a PR for user-facing changes been opened in cypress-documentation?
• [NA] Have API changes been updated in the type definitions?

---

Note

Consolidates contributor PR CI into the main pull-request workflow with an approval gate, removes the separate contributor workflow, and auto-detects contributor PRs during build.

• CI Workflows:
  • Consolidation: Fold linux-x64-contributor workflow into workflows/pull-request.yml using a single workflow.
    • Adds approve-contributor-pr gate for branches matching ^pull/[0-9]+$.
    • Splits build into internal-pr-build (non-pull branches) and external-pr-build (pull branches); all subsequent jobs require the appropriate build(s) and approval for external PRs.
    • Reorders finalization jobs; moves percy-finalize and verify-accessibility-results to a dedicated final section.
  • Removal: Deletes the separate contributor workflow block from workflows/@main.yml.
• Pipeline:
  • Contributor Detection: In @pipeline.yml build step, replaces parameters.is_contributor_pr with branch-based detection (<< pipeline.git.branch >> regex) when invoking scripts/circle-env.js.

^{Written by Cursor Bugbot for commit 1d87d6a. This will update automatically on new commits. Configure here.}

[cypress]

cypress    Run #66390

Run Properties:   Failed #66390  •  1d87d6a0db: Merge branch 'develop' into ci/extract-contributor-workflow

Project	cypress
Branch Review	ci/extract-contributor-workflow
Run status	Failed #66390
Run duration	20m 35s
Commit	1d87d6a0db: Merge branch 'develop' into ci/extract-contributor-workflow
Committer	Cacie Prins
View all properties for this run ↗︎

---

Test results
Failures	1
Flaky	13
Pending	1102
Skipped	4
Passing	26730
View all changes introduced in this branch ↗︎

---

Warning

Partial Report: The results for the Application Quality reports may be incomplete.

UI Coverage  45.27%
Untested elements	186
Tested elements	158

Accessibility  97.97%
Failed rules	4 critical   8 serious   2 moderate   2 minor
Failed elements	101

---

Tests for review

  cypress/e2e/studio/studio.cy.ts • 1 failed test • app-e2e

View Output

Test		Artifacts
Cypress Studio > updates an existing test with assertions		Test Replay Screenshots

  e2e/origin/config_env.cy.ts • 1 flaky test • 5x-driver-electron

View Output

Test		Artifacts
cy.origin- Cypress.config() > serializable > overwrites different values in secondary if one exists in the primary		Test Replay

  issues/28527.cy.ts • 1 flaky test • 5x-driver-electron

View Output

Test		Artifacts
issue 28527 > fails and then retries and verifies about:blank is not displayed		Test Replay Screenshots

  issues/28527.cy.ts • 1 flaky test • 5x-driver-chrome

View Output

Test		Artifacts
issue 28527 > fails and then retries and verifies about:blank is not displayed		Test Replay Screenshots

  commands/waiting.cy.js • 2 flaky tests • 5x-driver-chrome:beta

View Output

Test		Artifacts
... > errors > throws when route is never resolved		Test Replay
... > errors > throws when waiting for 2nd response to route		Test Replay

  commands/location.cy.js • 1 flaky test • 5x-driver-chrome:beta

View Output

Test		Artifacts
... > does not log an additional log on failure		Test Replay

The first 5 flaky specs are shown, see all 12 specs in Cypress Cloud.

[AtofStryker]

@cacieprins I created #32574 to test this workflow out and job is running on https://app.circleci.com/pipelines/github/cypress-io/cypress/75143

[cacieprins]

@cacieprins I created #32574 to test this workflow out and job is running on https://app.circleci.com/pipelines/github/cypress-io/cypress/75143

Correct - this is the same pattern as the old linux-x64-contributor-pr. It will run node_modules_install, build, check-ts, lint and lint-types and wait for approval before running anything else

[AtofStryker]

@cacieprins I think the jobs lacking the approval button are automatically locked

it looks to still be automatically locked after clicking approve and the workflow automatically fails

[AtofStryker]

@cacieprins I'm running a contributor PR running against the branch https://app.circleci.com/pipelines/github/cypress-io/cypress/75579

[cursor]

Bug: Mutually Exclusive Builds Block Workflow

Many workflow jobs now require both internal-pr-build and external-pr-build. These two build jobs are mutually exclusive, with internal-pr-build running for internal PRs and external-pr-build for external PRs. This setup means one required build will always be skipped, causing dependent jobs to hang indefinitely.