ci: add merge_group trigger to required-check workflows

[williaby]

Summary

• Add merge_group: to workflows emitting required status checks so they fire in the merge queue
• Patch REUSE.toml to cover files added by the compliance rollout that were missing from annotations

GitHub merge queues fire a merge_group event, not pull_request. Without the trigger,
required checks never report and the queue stalls indefinitely waiting for them.

Test plan

• Confirm all required checks pass on this PR
• Add to merge queue and confirm it processes without stalling

Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Team

Run ID: 9f88d379-4f07-4e83-a872-b7c6f38b6f69

📥 Commits

Reviewing files that changed from the base of the PR and between f5a8bb7 and ffdb763.

📒 Files selected for processing (1)

• .github/workflows/sonarcloud.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/merge-queue-triggers

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

🟢 Approval recommended

The change is minimal, consistent with existing workflow patterns in the repo, and directly addresses merge-queue required-check execution.

Pull request overview

This PR updates the repository’s SonarCloud GitHub Actions workflow so it also runs for GitHub merge queue executions (which emit merge_group events), ensuring required checks are reported when changes are processed via the merge queue.

Changes:

• Add a merge_group trigger to the SonarCloud workflow so it runs in merge queue contexts.

File summaries

File	Description
.github/workflows/sonarcloud.yml	Adds merge_group to the workflow triggers so SonarCloud runs for merge queue runs.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.