ci: pr_metadata_check: convert DNM logic to python

name: Do Not Merge

name: PR Metadata Check

on:

  pull_request:

    types: [synchronize, opened, reopened, labeled, unlabeled]

    types:

      - synchronize

      - opened

      - reopened

      - labeled

      - unlabeled

      - edited

permissions:

  contents: read

jobs:

  do-not-merge:

    if: ${{ contains(github.event.*.labels.*.name, 'DNM') ||

            contains(github.event.*.labels.*.name, 'TSC') ||

            contains(github.event.*.labels.*.name, 'Architecture Review') ||

            contains(github.event.*.labels.*.name, 'dev-review') }}

    name: Prevent Merging

    runs-on: ubuntu-22.04

    runs-on: ubuntu-24.04

    steps:

      - name: Checkout

        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Set up Python

        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0

        with:

          python-version: 3.12

          cache: pip

          cache-dependency-path: scripts/requirements-actions.txt

      - name: Install Python dependencies

        run: |

          pip install -r scripts/requirements-actions.txt --require-hashes

      - name: Run the check script

        env:

          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

        run: |

          ./scripts/ci/do_not_merge.py -p "${{ github.event.pull_request.number }}"

  empty_pr_description:

    if: ${{ github.event.pull_request.body == '' }}

    name: PR Description

    runs-on: ubuntu-24.04

    steps:

      - name: Check for label

      - name: Check for PR description

        run: |

          echo "Pull request is labeled as 'DNM', 'TSC', 'Architecture Review' or 'dev-review'."

          echo "This workflow fails so that the pull request cannot be merged."

          echo "Pull request description cannot be empty."

          exit 1

#!/usr/bin/env python3

# Copyright 2025 Google LLC

# SPDX-License-Identifier: Apache-2.0

import argparse

import os

import sys

import github

DNM_LABELS = ["DNM", "DNM (manifest)", "TSC", "Architecture Review", "dev-review"]

def parse_args(argv):

    parser = argparse.ArgumentParser(

        description=__doc__,

        formatter_class=argparse.RawDescriptionHelpFormatter,

        allow_abbrev=False,

    )

    parser.add_argument("-p", "--pull-request", required=True, type=int, help="The PR number")

    return parser.parse_args(argv)

def main(argv):

    args = parse_args(argv)

    token = os.environ.get('GITHUB_TOKEN', None)

    gh = github.Github(token)

    repo = gh.get_repo("zephyrproject-rtos/zephyr")

    pr = repo.get_pull(args.pull_request)

    for label in pr.get_labels():

        if label.name in DNM_LABELS:

            print(f"Pull request is labeled as \"{label.name}\".")

            print("This workflow fails so that the pull request cannot be merged.")

            sys.exit(1)

if __name__ == "__main__":

    sys.exit(main(sys.argv[1:]))