warn

build(deps): Bump astral-sh/setup-uv from 8.1.0 to 8.2.0 #331

	# SPDX-FileCopyrightText: 2025 TII (SSRC) and the Ghaf contributors
	#
	# SPDX-License-Identifier: Apache-2.0

	name: warn
	on:
	pull_request:
	branches:
	- main

	permissions:
	contents: read

	jobs:
	warn-on-workflow-changes:
	# Send a warning and fail this job if any of the listed workflow files are changed.
	# Other workflows continue as normal but the failure will grab author's attention.
	runs-on: ubuntu-latest
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
	with:
	egress-policy: audit
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	fetch-depth: 0
	persist-credentials: false
	- name: Check if workflow is modified
	id: workflow-changed
	uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
	with:
	files: \|
	.github/workflows/authorize.yml
	.github/workflows/check.yml
	- name: Send warning
	shell: bash
	run: \|
	if [ "${ANY_WORKFLOWS_CHANGED}" == "true" ]; then
	echo "::error::"\
	"This change edits a workflow file that triggers on 'pull_request_target'. "\
	"Raising this error to notify that the workflow change will only take "\
	"impact after merge. "\
	"Therefore, you need to manually test the change (perhaps in a forked repo) "\
	"before merging to make sure the change does not break anything." \
	"Workflow run results, as reported in the github PR actions for this change, "\
	"will be misleading."
	exit 1
	fi
	env:
	ANY_WORKFLOWS_CHANGED: ${{ steps.workflow-changed.outputs.any_changed }}

Provide feedback