Gerrit config: Make CQ a requirement for submission
A "NOPRESUBMIT=<reason>" footer can be used to bypass the requirement.
Manually tested via Gerrit REST API:
(Recent change that was submitted via CQ passes:)
gob-curl -X POST -H "Content-Type: application/json" -d '{"name":"CQ-Verified", "submittability_expression":"label:Presubmit-BoringSSL-Verified=MAX OR label:Commit-Queue=MAX"}' https://boringssl-review.git.corp.google.com/changes/boringssl~main~I831df6ae82bbc5d96baf976faa465cc76a6a6964/check.submit_requirement
(Recent change that was mistakenly directly submitted fails:)
gob-curl -X POST -H "Content-Type: application/json" -d '{"name":"CQ-Verified", "submittability_expression":"la
bel:Presubmit-BoringSSL-Verified=MAX OR label:Commit-Queue=MAX"}' https://boringssl-review.git.corp.google.com/changes/boringssl~main~Id536c67b781fcf0490f7e3a7c54b95746a6a6964/check.submit_requirement
In the event this is actually broken, refs/meta/config is excluded
from the requirement as an additional safety precaution. (And it does
not support CQ presubmits.)
Change-Id: I10e5d33efd6f21a3c98065069bcf3ff615c6774d
Reviewed-on: https://boringssl-review.googlesource.com/c/All-Projects/+/93027
Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/project.config b/project.config
index 6cb7336..c73bdc2 100644
--- a/project.config
+++ b/project.config
@@ -122,7 +122,6 @@
value = 0 No score
value = +1 Compiles, passes basic unit tests
copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE
- description = Informational only
[access "refs/heads/chromium-stable"]
push = +force group mdb/boringssl-committers
[access "refs/heads/master-with-bazel"]
@@ -170,3 +169,9 @@
submittableIf = -has:unresolved
overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
canOverrideInChildProjects = false
+[submit-requirement "CQ-Verified"]
+ description = The change was/will be verified by CQ. Overrideable with footer \"NOPRESUBMIT=<reason>\" in change message.
+ applicableIf = -branch:refs/meta/config
+ submittableIf = label:Presubmit-BoringSSL-Verified=MAX OR label:Commit-Queue=MAX
+ overrideIf = hasfooter:\"NOPRESUBMIT\"
+ canOverrideInChildProjects = false
