name: Blocking labels

on:
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
      - labeled
      - unlabeled
    branches:
      - dev
      - master

permissions:
  contents: read

jobs:
  check:
    name: Check for labels which block the Pull Request from being merged
    runs-on: ubuntu-latest
    steps:
      - name: Check out workflow scripts
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
          sparse-checkout: .github/scripts
      - name: Check for blocking labels
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
          script: |
            const { default: checkBlockingLabels } = await import(
              `${process.env.GITHUB_WORKSPACE}/.github/scripts/check-blocking-labels.mjs`
            );
            await checkBlockingLabels({ github, context, core });