From: Michał Kępień <michal@isc.org>
Date: Thu, 21 Mar 2024 14:45:25 +0000 (+0100)
Subject: Warn if security fixes are not marked for testing
X-Git-Tag: v9.18.26~3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9425ccb2b614a79ca712798bee61718c2b933621;p=thirdparty%2Fbind9.git

Warn if security fixes are not marked for testing

(cherry picked from commit 5e02a007ca016128eabdafdb7b8607ad518694c1)
---

diff --git a/dangerfile.py b/dangerfile.py
index 3adb813c684..8c0bc9f9e1f 100644
--- a/dangerfile.py
+++ b/dangerfile.py
@@ -452,6 +452,25 @@ if switches_added:
             "job to exercise the new `./configure` switches."
         )
 
+###############################################################################
+# PRE-RELEASE TESTING
+###############################################################################
+#
+# WARN if the merge request is marked with the "Security" label, but not with
+# the label used for marking merge requests for pre-release testing (if the
+# latter is defined by the relevant environment variable).
+
+pre_release_testing_label = os.getenv("PRE_RELEASE_TESTING_LABEL")
+if (
+    pre_release_testing_label
+    and "Security" in mr_labels
+    and pre_release_testing_label not in mr_labels
+):
+    warn(
+        "This merge request is marked with the *Security* label, but it is not "
+        f"marked for pre-release testing (*{pre_release_testing_label}*)."
+    )
+
 ###############################################################################
 # USER-VISIBLE LOG LEVELS
 ###############################################################################