[No QA] Enable App CI for production PRs

.github/workflows/bunTests.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - 'server/**'
       - 'src/**'

.github/workflows/checkContributorPlusChecklistHeading.yml

@@ -3,7 +3,6 @@ name: Check Contributor+ checklist heading
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - 'contributingGuides/CONTRIBUTOR_PLUS_CHECKLIST.md'
       - 'scripts/checkContributorPlusChecklistHeading.sh'

.github/workflows/checkSVGCompression.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.svg']
 
 permissions:

.github/workflows/checkValidateCodeTerminology.yml

@@ -3,7 +3,7 @@ name: Check validateCode terminology
 on:
   pull_request:
     types: [opened, synchronize]
-    branches: [main, staging]
+    branches: [main, staging, production]
     paths: ['**.ts', '**.tsx', '**.md']
 
 jobs:

.github/workflows/cloudflareWorkerTests.yml

@@ -3,7 +3,6 @@ name: Cloudflare Worker tests
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - 'web/cloudflare-worker/**'
       # The tests check its inline scripts against the CSP hashes.

.github/workflows/cspell.yml

@@ -3,7 +3,7 @@ name: Spell check
 on:
   pull_request:
     types: [opened, synchronize]
-    branches: [main, staging]
+    branches: [main, staging, production]
 
 jobs:
   spellcheck:

.github/workflows/knip.yml

@@ -3,7 +3,6 @@ name: Knip check
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - '**.js'
       - '**.jsx'
@@ -27,7 +26,7 @@ jobs:
     if: github.actor != 'os-botify[bot]'
     runs-on: blacksmith-2vcpu-ubuntu-2404
     env:
-      # The PR's target branch, so a PR into staging is not compared with main.
+      # Use the PR's target branch so staging and production PRs are not compared with main.
       BASE_REF: ${{ github.base_ref || 'main' }}
     steps:
       - name: Checkout PR

.github/workflows/lint.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       [
         '**.js',

.github/workflows/nativeDependencies.yml

@@ -4,7 +4,6 @@ on:
   workflow_dispatch:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - '.github/workflows/nativeDependencies.yml'
       - 'ios/Podfile'

.github/workflows/oxfmt.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.js', '**.ts', '**.tsx', '**.json', '**.mjs', '**.cjs', '**.yml', '**.yaml', '.oxfmtrc.json', 'config/.editorconfig', '.watchmanconfig', '.imgbotconfig']
 
 concurrency:

.github/workflows/react-compiler-compliance.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.ts', '**.tsx']
 
 concurrency:

.github/workflows/reassurePerformanceTests.yml

@@ -3,7 +3,6 @@ name: Reassure Performance Tests
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     # Ordered: the last matching pattern wins.
     paths:
       - '**'

.github/workflows/shellCheck.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.sh']
 
 jobs:

.github/workflows/test.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.js', '**.ts', '**.tsx', 'package.json', 'package-lock.json']
 
 concurrency:

.github/workflows/testSyncVersions.yml

@@ -6,7 +6,6 @@ name: Test syncVersions script
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['.github/scripts/syncVersions.sh', 'tests/tooling/SyncVersions.test.ts', '.github/workflows/testSyncVersions.yml']
 
 concurrency:

.github/workflows/typecheck.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['**.js', '**.ts', '**.tsx', 'package.json', 'package-lock.json', '**/tsconfig*.json']
 
 concurrency:
@@ -16,7 +15,7 @@ jobs:
     if: ${{ (github.actor != 'OSBotify' || github.event_name == 'workflow_call') && (github.event_name != 'pull_request' || github.actor != 'os-botify[bot]') }}
     runs-on: blacksmith-4vcpu-ubuntu-2404
     env:
-      # The PR's target branch, so a PR into staging is not compared with main.
+      # Use the PR's target branch so staging and production PRs are not compared with main.
       # Reusable calls have no base ref, so they retain the existing main behavior.
       BASE_REF: ${{ github.base_ref || 'main' }}
     steps:

.github/workflows/unused-styles.yml

@@ -4,7 +4,6 @@ on:
   workflow_call:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['src/**', '.github/workflows/unused-styles.yml', 'scripts/findUnusedStyles.ts']
 
 concurrency:

.github/workflows/validateGithubActions.yml

@@ -3,7 +3,6 @@ name: Validate Github Actions
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths: ['.github/**', 'scripts/**', 'package.json', 'package-lock.json', '**/tsconfig*.json']
 
 jobs:

.github/workflows/validatePatches.yml

@@ -3,15 +3,15 @@ name: Validate Patches
 on:
   pull_request:
     types: [opened, synchronize]
-    branches: [main, staging]
+    branches: [main, staging, production]
     paths: ['patches/**']
 
 jobs:
   validate-patches:
     if: github.actor != 'os-botify[bot]'
     runs-on: blacksmith-4vcpu-ubuntu-2404
     env:
-      # The PR's target branch, so a PR into staging is not compared with main.
+      # Use the PR's target branch so staging and production PRs are not compared with main.
       BASE_REF: ${{ github.base_ref || 'main' }}
     steps:
       - name: Checkout

.github/workflows/verifyHybridApp.yml

@@ -3,7 +3,6 @@ name: Verify HybridApp build
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - '**.kt'
       - '**.java'

.github/workflows/verifyParserFiles.yml

@@ -3,7 +3,6 @@ name: Check consistency of search parser files
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - 'src/libs/SearchParser/**'
 

.github/workflows/verifyPodfile.yml

@@ -3,7 +3,6 @@ name: Verify iOS native configuration
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - ios/**
       - 'package.json'

.github/workflows/verifyPodfilePrebuilt.yml

@@ -6,7 +6,6 @@ name: Verify Podfile.lock uses prebuilt react-native
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
     paths:
       - 'ios/Podfile.lock'
       - '.github/scripts/verifyPodfilePrebuilt.sh'

.github/workflows/verifySignedCommits.yml

@@ -3,7 +3,6 @@ name: Verify signed commits
 on:
   pull_request:
     types: [opened, synchronize]
-    branches-ignore: [production]
 
 jobs:
   verifySignedCommits: