From 953d87d63b80ccc80417f443d584047209c136a8 Mon Sep 17 00:00:00 2001
From: "John D. Swanson" <swannysec@users.noreply.github.com>
Date: Wed, 18 Mar 2026 19:32:38 -0400
Subject: [PATCH] Use Search API for hotfix monitor to avoid job cancellation
 (#51880)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Summary

- The Pulls API with `state=closed` paginates through all closed PRs in
the repo. On a repo as active as Zed, this exceeds the 5-minute job
limit ([failed
run](https://github.com/zed-industries/zed/actions/runs/23271617583)).
- Switch to the Search API which supports `merged:>DATE` natively, so
GitHub filters server-side and returns only matching hotfix PRs.
- Tested against the Zed repo — query completes in seconds.

Release Notes:

- N/A
---
 .github/workflows/hotfix-review-monitor.yml | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/hotfix-review-monitor.yml b/.github/workflows/hotfix-review-monitor.yml
index e672a8506c1a103524f097dc36fc8ceee4ccba00..760cd9806c9928d784de1b69ed97c86148ae6fc1 100644
--- a/.github/workflows/hotfix-review-monitor.yml
+++ b/.github/workflows/hotfix-review-monitor.yml
@@ -40,16 +40,16 @@ jobs:
           # Overlap on weekdays is harmless — reviewed PRs are filtered out below.
           SINCE=$(date -u -v-80H +%Y-%m-%dT%H:%M:%SZ 2>/dev/null \
             || date -u -d '80 hours ago' +%Y-%m-%dT%H:%M:%SZ)
+          SINCE_DATE=$(echo "$SINCE" | cut -dT -f1)
 
-          # Get merged PRs with hotfix label from the lookback window
+          # Use the Search API to find hotfix PRs merged in the lookback window.
+          # The Pulls API with state=closed paginates through all closed PRs in
+          # the repo, which times out on large repos. The Search API supports
+          # merged:>DATE natively so GitHub does the filtering server-side.
           gh api --paginate \
-            "repos/${REPO}/pulls?state=closed&sort=updated&direction=desc&per_page=50" \
-            --jq "[
-              .[] |
-              select(.merged_at != null) |
-              select(.merged_at > \"$SINCE\") |
-              select(.labels | map(.name) | index(\"hotfix\"))
-            ]" > /tmp/hotfix_prs.json
+            "search/issues?q=repo:${REPO}+is:pr+is:merged+label:hotfix+merged:>${SINCE_DATE}&per_page=100" \
+            --jq '[.items[] | {number, title, merged_at: .pull_request.merged_at}]' \
+            > /tmp/hotfix_prs.json
 
           # Check each hotfix PR for a post-merge approving review
           jq -r '.[].number' /tmp/hotfix_prs.json | while read -r PR_NUMBER; do
@@ -58,8 +58,7 @@ jobs:
               --jq "[.[] | select(.state == \"APPROVED\")] | length")
 
             if [ "$APPROVALS" -eq 0 ]; then
-              jq ".[] | select(.number == ${PR_NUMBER}) | {number, title, merged_at}" \
-                /tmp/hotfix_prs.json
+              jq ".[] | select(.number == ${PR_NUMBER})" /tmp/hotfix_prs.json
             fi
           done | jq -s '.' > /tmp/unreviewed.json