From 29eb0c52821f6059819e3137cbaba56fa98ccc02 Mon Sep 17 00:00:00 2001
From: Nad Alaba <37968805+nadalaba@users.noreply.github.com>
Date: Thu, 26 Mar 2026 19:44:11 +0300
Subject: [PATCH 1/4] poc

---
 .github/workflows/monkey-ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/monkey-ci.yml b/.github/workflows/monkey-ci.yml
index 02217993414e..5ef3a8369ec8 100644
--- a/.github/workflows/monkey-ci.yml
+++ b/.github/workflows/monkey-ci.yml
@@ -64,7 +64,7 @@ jobs:
 
       - name: Check Workflow Changes
         if: steps.filter.outputs.workflows == 'true' && !contains(github.event.pull_request.labels.*.name, 'force-ci') && !contains(github.event.pull_request.labels.*.name, 'force-full-ci')
-        run: exit 1
+        run: echo "I'm allowed to run"
 
       - name: Export changes
         id: export-changes

From 9ac65beaa2df33b99ca8607ed37b88418cd83c3f Mon Sep 17 00:00:00 2001
From: Nad Alaba <37968805+nadalaba@users.noreply.github.com>
Date: Thu, 26 Mar 2026 20:11:12 +0300
Subject: [PATCH 2/4] remove useless checks

---
 .github/workflows/monkey-ci.yml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/.github/workflows/monkey-ci.yml b/.github/workflows/monkey-ci.yml
index 5ef3a8369ec8..5038d070b7a3 100644
--- a/.github/workflows/monkey-ci.yml
+++ b/.github/workflows/monkey-ci.yml
@@ -7,8 +7,6 @@ env:
 
 permissions:
   contents: read
-  issues: write
-  pull-requests: write
 
 on:
   pull_request:
@@ -53,18 +51,6 @@ jobs:
               - 'frontend/package.json'
             pkg-src:
               - 'packages/**/*'
-            anti-cheat:
-              - 'backend/**/anticheat/**'
-            workflows:
-              - '.github/workflows/**/*'
-
-      - name: Check Anti-cheat
-        if: steps.filter.outputs.anti-cheat == 'true' && !contains(github.event.pull_request.labels.*.name, 'force-ci') && !contains(github.event.pull_request.labels.*.name, 'force-full-ci')
-        run: exit 1
-
-      - name: Check Workflow Changes
-        if: steps.filter.outputs.workflows == 'true' && !contains(github.event.pull_request.labels.*.name, 'force-ci') && !contains(github.event.pull_request.labels.*.name, 'force-full-ci')
-        run: echo "I'm allowed to run"
 
       - name: Export changes
         id: export-changes
@@ -336,7 +322,6 @@ jobs:
         run: npm run test-pkg
 
   on-failure:
-    permissions: write-all
     name: on-failure
     runs-on: ubuntu-latest
     needs: [ci-be, ci-fe, ci-assets, ci-pkg]

From 0be118c671cae94a3bccfe7d64d1d78c76192654 Mon Sep 17 00:00:00 2001
From: Nad Alaba <37968805+nadalaba@users.noreply.github.com>
Date: Thu, 26 Mar 2026 21:13:56 +0300
Subject: [PATCH 3/4] update paths-filter action to v4

---
 .github/workflows/monkey-ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/monkey-ci.yml b/.github/workflows/monkey-ci.yml
index 5038d070b7a3..bd01fa527268 100644
--- a/.github/workflows/monkey-ci.yml
+++ b/.github/workflows/monkey-ci.yml
@@ -37,7 +37,7 @@ jobs:
         if: github.event_name != 'pull_request'
 
       - name: Detect changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         id: filter
         with:
           filters: |
@@ -218,7 +218,7 @@ jobs:
             frontend
             packages
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: filter
         with:
           filters: |

From 305963b556152806381ae14dcaae22f3a90a5a45 Mon Sep 17 00:00:00 2001
From: Nad Alaba <37968805+nadalaba@users.noreply.github.com>
Date: Fri, 27 Mar 2026 20:43:35 +0300
Subject: [PATCH 4/4] keep the anticheat changes check

---
 .github/workflows/monkey-ci.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/monkey-ci.yml b/.github/workflows/monkey-ci.yml
index bd01fa527268..7038729134ec 100644
--- a/.github/workflows/monkey-ci.yml
+++ b/.github/workflows/monkey-ci.yml
@@ -51,6 +51,12 @@ jobs:
               - 'frontend/package.json'
             pkg-src:
               - 'packages/**/*'
+            anti-cheat:
+              - 'backend/**/anticheat/**'
+
+      - name: Check Anti-cheat
+        if: steps.filter.outputs.anti-cheat == 'true' && !contains(github.event.pull_request.labels.*.name, 'force-ci') && !contains(github.event.pull_request.labels.*.name, 'force-full-ci')
+        run: exit 1
 
       - name: Export changes
         id: export-changes