on_pr_updates.yml

# Fail PR check if do-not-merge label is present
name: PR requirements

# PROCESS
#
# 1. Verify whether 'do-not-merge' label is present
# 2. Fail PR to prevent merging until resolved
# 3. Pass PR if do-not-merge label is removed by a maintainer

# USAGE
#
# Always triggered on PR labeling changes.

# NOTES
#
# PR requirements are enforced synchronously here.

on:
  pull_request:
    types:
      - opened
      - labeled
      - unlabeled

permissions: {}  # no permission required

jobs:
  check-requirements:
    runs-on: ubuntu-latest
    steps:
      - name: Block if it doesn't minimum requirements
        if: contains(github.event.pull_request.labels.*.name, 'do-not-merge')
        run: |
          echo "PR has 'do-not-merge' label. Please resolve the issues mentioned in the PR comments."
          exit 1