Switch to status API instead of checks

Author: camdecoster

.github/workflows/upload-dev-build.yml

@@ -22,7 +22,7 @@ jobs:
   upload:
     runs-on: ubuntu-latest
     permissions:
-      checks: write
+      statuses: write
     # Only run on manual dispatch,
     # OR if the parent run succeeded and was triggered by a PR.
     # Fork PRs run through so we can post a "skipped" commit status to the PR
@@ -207,11 +207,10 @@ jobs:
           echo "The above links should start working a minute or two after this job completes." >> $GITHUB_STEP_SUMMARY
 
       - name: Report dev-build outcome to PR head
-        # Reach this step for any run that resolved a PR head SHA — both
-        # workflow_run (auto-triggered by Publish Dist) and workflow_dispatch
-        # (a maintainer manually dispatching a build). The step then either
-        # creates a "dev build" check-run on the PR head, or PATCHes the
-        # existing one so the row updates in place instead of stacking.
+        # Post a commit status on the PR head SHA so a row appears in the PR
+        # merge-box widget. Statuses are keyed by (sha, context) with
+        # last-write-wins semantics, so a maintainer-triggered dispatch that
+        # follows an earlier "Skipped" status updates the same row in place.
         if: |
           always() && (
             (github.event_name == 'workflow_run' && github.event.workflow_run.head_sha != '') ||
@@ -221,60 +220,31 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           REPO: ${{ github.repository }}
           SHA: ${{ github.event.workflow_run.head_sha || steps.get-metadata.outputs.SHA }}
-          HEAD_REPO: ${{ github.event.workflow_run.head_repository.full_name }}
           IS_FORK: ${{ steps.fork-check.outputs.is_fork }}
           PR_NUM: ${{ steps.get-metadata.outputs.PR_NUM }}
           UPLOAD_OUTCOME: ${{ steps.commit-and-push.outcome }}
           RUN_ID: ${{ github.run_id }}
         run: |
           RUN_URL="https://github.com/${REPO}/actions/runs/${RUN_ID}"
+          CONTRIBUTING_URL="https://github.com/${REPO}/blob/master/CONTRIBUTING.md#live-links-to-dev-builds"
 
           if [ "${IS_FORK}" == "true" ]; then
-            TITLE="Skipped: PR is from a fork"
-            CONCLUSION="neutral"
-            SUMMARY=$(cat <<EOF
-          Dev builds are not automatically published for PRs from forks (\`${HEAD_REPO}\`) as a security policy.
-
-          If you need a dev build for this PR, please **contact a maintainer** and ask them to trigger the *Upload dev build from PR* workflow manually via the Actions tab, providing this PR's number as input.
-          EOF
-          )
-            DETAILS_URL="${RUN_URL}"
+            STATE="success"
+            DESCRIPTION="Skipped — PR is from a fork. Ask a maintainer to trigger a build."
+            TARGET_URL="${CONTRIBUTING_URL}"
           elif [ "${UPLOAD_OUTCOME}" == "success" ]; then
-            TITLE="Dev build available"
-            CONCLUSION="success"
-            URL="https://plotly.github.io/plotly.js-dev-builds/${UPLOAD_DIR_NAME}/pr-${PR_NUM}/latest/plotly.min.js"
-            SUMMARY="Latest dev build for PR #${PR_NUM}: [${URL}](${URL})"
-            DETAILS_URL="${URL}"
+            STATE="success"
+            DESCRIPTION="Latest dev builds for PR #${PR_NUM}"
+            TARGET_URL="https://plotly.github.io/plotly.js-dev-builds/${UPLOAD_DIR_NAME}/pr-${PR_NUM}/latest"
           else
-            TITLE="Dev build upload failed"
-            CONCLUSION="failure"
-            SUMMARY="Upload workflow failed. See [the run](${RUN_URL}) for details."
-            DETAILS_URL="${RUN_URL}"
+            STATE="failure"
+            DESCRIPTION="Upload failed — see workflow run for details."
+            TARGET_URL="${RUN_URL}"
           fi
 
-          PAYLOAD=$(jq -n \
-            --arg conclusion "${CONCLUSION}" \
-            --arg title "${TITLE}" \
-            --arg summary "${SUMMARY}" \
-            --arg details_url "${DETAILS_URL}" \
-            '{
-              status: "completed",
-              conclusion: $conclusion,
-              details_url: $details_url,
-              output: {title: $title, summary: $summary}
-            }')
-
-          # Look for an existing "dev build" check-run on this SHA so we can
-          # PATCH it in place — e.g. so an initial "Skipped: fork" row updates
-          # to "Dev build available" when a maintainer later dispatches a build.
-          # If multiple exist (shouldn't happen under normal use), PATCH the most
-          # recent one identified by the highest check-run id.
-          EXISTING_ID=$(gh api "repos/${REPO}/commits/${SHA}/check-runs" \
-            --jq '[.check_runs[] | select(.name == "dev build")] | sort_by(.id) | last | .id // empty')
-
-          if [ -n "${EXISTING_ID}" ]; then
-            echo "${PAYLOAD}" | gh api --method PATCH --input - "repos/${REPO}/check-runs/${EXISTING_ID}"
-          else
-            echo "${PAYLOAD}" | jq --arg sha "${SHA}" '. + {name: "dev build", head_sha: $sha}' \
-              | gh api --method POST --input - "repos/${REPO}/check-runs"
-          fi
+          jq -n \
+            --arg state "${STATE}" \
+            --arg description "${DESCRIPTION}" \
+            --arg target_url "${TARGET_URL}" \
+            '{state: $state, target_url: $target_url, description: $description, context: "dev build"}' \
+            | gh api --method POST --input - "repos/${REPO}/statuses/${SHA}"