ci: refine workflow triggers and release validation

Author: zjw1111

.github/workflows/build_and_test.yaml

@@ -21,12 +21,10 @@ on:
   push:
     branches:
       - '**'
-    tags:
-      - '**'
   pull_request:
 
 concurrency:
-  group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}
+  group: ${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
 permissions:

.github/workflows/build_docs.yaml

@@ -18,20 +18,27 @@
 name: "Publish Docs"
 
 on:
+  pull_request:
+    paths:
+      - 'apidoc/**'
+      - 'docs/**'
+      - 'include/**'
+      - '.github/workflows/build_docs.yaml'
   push:
     branches:
       - main
     paths:
       - 'apidoc/**'
       - 'docs/**'
       - 'include/**'
+      - '.github/workflows/build_docs.yaml'
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   docs:
@@ -67,8 +74,33 @@ jobs:
             touch /tmp/site/.nojekyll
             cd -
 
+      - name: Upload docs site
+        if: github.event_name == 'push'
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: docs-site
+          path: /tmp/site/
+          include-hidden-files: true
+          if-no-files-found: error
+
+  deploy:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    needs: docs
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v6.0.1
+        with:
+          fetch-depth: 1
+
+      - name: Download docs site
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: docs-site
+          path: /tmp/site
+
       - name: Deploy to gh-pages
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         run: |
           git config --global user.name 'GitHub Actions'
           git config --global user.email 'actions@github.com'

.github/workflows/gcc8_test.yaml

@@ -21,12 +21,10 @@ on:
   push:
     branches:
       - '**'
-    tags:
-      - '**'
   pull_request:
 
 concurrency:
-  group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}
+  group: ${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
 permissions:

.github/workflows/license_check.yaml

@@ -22,6 +22,11 @@ on:
   push:
     branches:
       - main
+      - 'release-*'
+
+concurrency:
+  group: ${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}-${{ github.workflow }}
+  cancel-in-progress: true
 
 jobs:
   rat-license-check:

.github/workflows/pre-commit.yaml

@@ -23,6 +23,10 @@ on:
     branches:
       - '**'
 
+concurrency:
+  group: ${{ github.repository }}-${{ github.event.pull_request.number || github.ref }}-${{ github.workflow }}
+  cancel-in-progress: true
+
 jobs:
   pre-commit:
     runs-on: ubuntu-24.04

.github/workflows/release_candidate.yaml

@@ -14,9 +14,10 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: Release Candidate
+name: Release Artifact
 
 on:
+  workflow_dispatch:
   pull_request:
     paths:
       - ".github/workflows/release_candidate.yaml"
@@ -29,7 +30,7 @@ on:
       - "scripts/releasing/**"
   push:
     tags:
-      - "v*-rc*"
+      - "v*"
 
 concurrency:
   group: ${{ github.repository }}-${{ github.ref }}-${{ github.workflow }}