ci: unblock changesets release PRs

[ericallam]

Summary

Two CI workflows were blocking the v4.5.0-rc.0 release PR (#3563) and would block every future changeset release PR.

1. changesets-pr.yml — self-report All PR Checks

The changesets bot pushes commits authored by GITHUB_TOKEN. By GitHub design, GITHUB_TOKEN-authored pushes can't trigger downstream workflows (loop-prevention). That means pr_checks.yml never fires on release-PR commits, leaving the required All PR Checks status permanently Expected — Waiting for status to be reported. The PR can't merge.

The fix: after changesets/action creates the PR, post a success check with the exact All PR Checks context onto the PR's head SHA. GitHub's required-check evaluation is satisfied by any check with the right context name — the source doesn't have to be pr_checks.yml.

Why this is safe: the release PR only mechanically bumps package.json, pnpm-lock.yaml, and CHANGELOG.md from changesets that were already on main (and already ran full CI when they merged). If a human ever pushes a commit to changeset-release/main, pr_checks.yml fires on that push (real user, not GITHUB_TOKEN) and posts its own All PR Checks status — last write wins for the same context on the same SHA, so the human-push result overrides the auto-success.

2. vouch-check-pr.yml — exempt github-actions[bot]

The require-draft job auto-closes any non-draft PR whose author is not a MEMBER/OWNER/COLLABORATOR, with an explicit allowlist for devin-ai-integration[bot] and dependabot[bot]. The changesets bot publishes as github-actions[bot] with author_association: CONTRIBUTOR, so every release PR was getting auto-closed on open with a "please re-open as draft" comment. Add github-actions[bot] to the exemption list.

Test plan

• After merge, the next changeset bot push to changeset-release/main should post All PR Checks: success on the release PR's head SHA, and the PR should not get auto-closed by Vouch - Check PR.
• Confirm pr_checks.yml still fires + gates normal (human-authored) PRs to main.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 87967e4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: e58bda06-d06e-47a6-b995-bda34b8fdb47

📥 Commits

Reviewing files that changed from the base of the PR and between 49e6c07 and 87967e4.

📒 Files selected for processing (1)

• .github/workflows/changesets-pr.yml

📜 Recent review details

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: audit
• GitHub Check: Analyze (python)
• GitHub Check: Analyze (javascript-typescript)

🔇 Additional comments (1)

.github/workflows/changesets-pr.yml (1)

99-99: LGTM!

---

Walkthrough

This PR modifies two GitHub Actions workflows. The changesets-pr.yml workflow grants the release-pr job checks: write permission and adds a step that, when the Changesets release PR is still open, finds the open changeset-release/main PR, reads its headRefOid, and posts a completed successful check-run named “All PR Checks” for that head SHA via the GitHub Checks API. The vouch-check-pr.yml workflow updates the require-draft job condition to also skip PRs authored by github-actions[bot] in addition to dependabot[bot].

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the main objective: unblocking changesets release PRs by fixing two CI workflow issues.
Description check	✅ Passed	The description is comprehensive, covering issue details, solutions, reasoning, and a test plan, though the template checklist items are unchecked.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/changeset-release-pr-ci

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[devin-ai-integration]

Devin Review found 2 potential issues.

View 1 additional finding in Devin Review.