ci: align workflow push/pull_request triggers with shared structure

[Shreyas-Microsoft]

Purpose

• Aligns the on: block (push + pull_request) of all CI/CD workflows on demo to the shared shape used by the Multi-Agent Custom Automation Engine Solution Accelerator docker-build-and-push.yml reference:

  on:
    push:
      branches:
        - main
        - dev
        - demo
        - hotfix
      paths:
        - ...
    pull_request:
      types:
        - opened
        - ready_for_review
        - reopened
        - synchronize
      branches:
        - main
        - dev
        - demo
        - hotfix
      paths:
        - ...

• Fixes the underlying issue that several workflows were not triggering on push / PR to demo (or hotfix) because their branches: lists were limited to [main, dev] or [dev], and several pull_request triggers were missing the explicit types: block (so e.g. ready_for_review did not start them).

• Each workflows existing paths: filter is preserved verbatim (only the branches list, types list, and missing event were added) so the set of files that triggers each workflow is unchanged — only the set of branches it triggers on is widened.

Workflows updated

Workflow	Before	After
ci.yml (Validate Deployment)	push [main, dev, demo], PR [dev], no PR types	push [main, dev, demo, hotfix], PR [main, dev, demo, hotfix] + types
deploy-v2.yml (Deploy-Test-Cleanup v2)	push [main, dev, demo], PR [dev], no PR types	push [main, dev, demo, hotfix], PR [main, dev, demo, hotfix] + types
test.yml (Tests + Coverage)	push & PR [main, dev]	push & PR [main, dev, demo, hotfix]
pylint.yml (PyLint)	push only, no branches: filter at all	push [main, dev, demo, hotfix] + mirror PR block with types/branches/paths
validate-bicep-params.yml	PR [main, dev], no types	PR [main, dev, demo, hotfix] + types (schedule + workflow_dispatch untouched)

Workflows intentionally left untouched

• docker-build-and-push.yml — already conforms to the reference structure (branches [main, dev, demo, hotfix], PR types, paths filter).
• pr-title-checker.yml — uses pull_request_target deliberately (so it works on fork PRs); not a push/pull_request workflow.
• broken-links-checker.yml — intentionally runs on any PR that touches **/*.md with no branch filter (so doc-only PRs from any branch get checked); steps are gated on pull_request / workflow_dispatch and adding a push trigger would just produce noisy no-op runs.
• azd-template-validation.yml, azure-dev.yml, Create-Release..yml, deploy-orchestrator.yml, job-*.yml, stale-bot.yml — have no push: / pull_request: triggers at all (they are scheduled, manually-dispatched, or reusable callable workflows).

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• All five edited workflow files (ci.yml, deploy-v2.yml, test.yml, pylint.yml, validate-bicep-params.yml) are still valid YAML and load cleanly (sanity-checked locally with yaml.safe_load).
• The branches list on both push: and pull_request: in each edited workflow is exactly [main, dev, demo, hotfix].
• Every pull_request: block has types: [opened, ready_for_review, reopened, synchronize].
• Existing paths: filters are unchanged in each workflow (only widened by trigger surface, not by file set).
• After merging, pushing a commit (or opening / re-opening / marking-ready a PR) to demo actually starts the expected workflow runs — this is the main behavioural payoff of the PR.

Other Information

• This PR is targeted at demo (not main) per the request, so the new triggers can be observed in pipeline runs without affecting main first.
• If everything looks correct here, the same change should be ported to main afterwards so the trigger contracts stay consistent across branches.

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	3097	208	93%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
588	0 💤	0 ❌	0 🔥	21.599s ⏱️

[github-actions]

Processor Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	5727	720	87%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
812	0 💤	0 ❌	0 🔥	18.144s ⏱️

[Copilot]

Pull request overview

Aligns CI/CD workflow trigger contracts on the demo branch to a shared structure so workflows reliably run for push and pull_request events across main/dev/demo/hotfix, including explicit PR event types (e.g., ready_for_review).

Changes:

• Expanded push.branches filters to include demo and hotfix where missing.
• Standardized pull_request triggers to include explicit types: [opened, ready_for_review, reopened, synchronize] and a consistent base-branch allowlist.
• Preserved existing paths filters while widening the triggering surface to the intended branches.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/ci.yml	Adds hotfix for push and standardizes PR trigger (types + branches) to include main/dev/demo/hotfix.
.github/workflows/deploy-v2.yml	Adds hotfix for push and standardizes PR trigger (types + branches) to include main/dev/demo/hotfix.
.github/workflows/test.yml	Expands push/PR branch filters to include demo and hotfix (PR types already present).
.github/workflows/pylint.yml	Adds explicit push branch filter and adds PR trigger with matching types, branches, and paths.
.github/workflows/validate-bicep-params.yml	Expands PR branch filters to include demo and hotfix and adds explicit PR types.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.