From 57524480ddca6bf9af6beb32ef9e9e6839853bc4 Mon Sep 17 00:00:00 2001
From: Kyle Altendorf <sda@fstab.net>
Date: Thu, 30 Jan 2025 11:08:24 -0500
Subject: [PATCH] check in both places

---
 .../workflows/check_wheel_availability.yaml   |  3 +++
 .../workflows/reflow-check-allow-dev-deps.yml | 24 +++++++++++++++++++
 .github/workflows/test-install-scripts.yml    |  3 +++
 3 files changed, 30 insertions(+)

diff --git a/.github/workflows/check_wheel_availability.yaml b/.github/workflows/check_wheel_availability.yaml
index c1f31817ff3d..a847d47b0f97 100644
--- a/.github/workflows/check_wheel_availability.yaml
+++ b/.github/workflows/check_wheel_availability.yaml
@@ -17,6 +17,9 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  check-allow-dev-deps:
+    uses: ./.github/workflows/reflow-check-allow-dev-deps.yml
+
   check_dependency_artifacts:
     name: ${{ matrix.os.name }} ${{ matrix.arch.name }} ${{ matrix.python-version }}
     if: ${{ !contains( github.event.pull_request.labels.*.name, 'allow-dev-deps') }}
diff --git a/.github/workflows/reflow-check-allow-dev-deps.yml b/.github/workflows/reflow-check-allow-dev-deps.yml
index e69de29bb2d1..6921462cb0dd 100644
--- a/.github/workflows/reflow-check-allow-dev-deps.yml
+++ b/.github/workflows/reflow-check-allow-dev-deps.yml
@@ -0,0 +1,24 @@
+name: 🚨 Check allow-dev-deps label
+
+on:
+  workflow_call:
+    inputs:
+      concurrency-name:
+        required: true
+        type: string
+
+concurrency:
+  # SHA is added to the end if on `main` to let all main workflows run
+  group: ${{ github.ref }}-${{ github.workflow }}-${{ inputs.concurrency-name }}-${{ github.event_name }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/') || startsWith(github.ref, 'refs/heads/long_lived/')) && github.sha || '' }}
+  cancel-in-progress: true
+
+jobs:
+  check-labels:
+    runs-on: ubuntu-latest
+    steps:
+      - name: check banned labels
+        uses: mheap/github-action-required-labels@v5
+        with:
+          mode: exactly
+          count: 0
+          labels: "allow-dev-deps"
diff --git a/.github/workflows/test-install-scripts.yml b/.github/workflows/test-install-scripts.yml
index a2cce610a490..73c79ecee440 100644
--- a/.github/workflows/test-install-scripts.yml
+++ b/.github/workflows/test-install-scripts.yml
@@ -21,6 +21,9 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  check-allow-dev-deps:
+    uses: ./.github/workflows/reflow-check-allow-dev-deps.yml
+
   test_scripts:
     name: Native ${{ matrix.os.emoji }} ${{ matrix.arch.emoji }} ${{ matrix.development.name }} - ${{ matrix.editable.name }}
     if: ${{ !contains( github.event.pull_request.labels.*.name, 'allow-dev-deps') }}