From 6bccd3a1aa536dc2a99bb09da90345837f995925 Mon Sep 17 00:00:00 2001
From: Peter <peter86225@gmail.com>
Date: Sat, 4 Jul 2026 09:50:24 +0800
Subject: [PATCH] ci(workflows): restrict release workflows to upstream repo

release-please and sync-docs run unconditionally on forks and fail there (fork GITHUB_TOKEN can't open PRs, CROSS_REPO_TOKEN doesn't exist). Guard release-please, sync-docs, and rc-release on github.repository == 'Canner/WrenAI'.
---
 .github/workflows/rc-release.yml     | 1 +
 .github/workflows/release-please.yml | 1 +
 .github/workflows/sync-docs.yml      | 1 +
 3 files changed, 3 insertions(+)

diff --git a/.github/workflows/rc-release.yml b/.github/workflows/rc-release.yml
index b4b33e3d97..81b5e6a2c1 100644
--- a/.github/workflows/rc-release.yml
+++ b/.github/workflows/rc-release.yml
@@ -26,6 +26,7 @@ concurrency:
 
 jobs:
   create-rc:
+    if: ${{ github.repository == 'Canner/WrenAI' }}
     runs-on: ubuntu-latest
     permissions:
       contents: write
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index b067384f6f..b48daf4a2b 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   release-please:
+    if: ${{ github.repository == 'Canner/WrenAI' }}
     runs-on: ubuntu-latest
     outputs:
       wren-core-py--release_created: ${{ steps.release.outputs['core/wren-core-py--release_created'] }}
diff --git a/.github/workflows/sync-docs.yml b/.github/workflows/sync-docs.yml
index 8dd65ae145..f2eea117e7 100644
--- a/.github/workflows/sync-docs.yml
+++ b/.github/workflows/sync-docs.yml
@@ -16,6 +16,7 @@ permissions:
 
 jobs:
   sync-docs:
+    if: ${{ github.repository == 'Canner/WrenAI' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout WrenAI