ci(merge-queue): run essential checks on merge groups (#638)

Signed-off-by: svcnemo-autobot <svcnemo-autobot@nvidia.com>

Author: svcnemo-autobot

.github/workflows/codeql.yml

@@ -12,6 +12,8 @@
 name: "CodeQL"
 
 on:
+  merge_group:
+    types: [checks_requested]
   push:
     branches: [ "main", "[rv][0-9]*", "pull-request/**"]
   schedule:

.github/workflows/copyright-check.yml

@@ -15,6 +15,8 @@
 name: Copyright check
 
 on:
+  merge_group:
+    types: [checks_requested]
   push:
     branches: ["pull-request/**"]
   workflow_dispatch:

.github/workflows/detect-secrets.yml

@@ -14,6 +14,8 @@
 name: Secrets detector
 
 on:
+  merge_group:
+    types: [checks_requested]
   push:
     branches: ["pull-request/**"]
 

.github/workflows/install.yml

@@ -1,6 +1,8 @@
 name: Run install
 
 on:
+  merge_group:
+    types: [checks_requested]
   workflow_dispatch:
   workflow_call:
   push:

.github/workflows/release.yml

@@ -14,6 +14,8 @@
 name: "Build, validate, and release NeMo Run"
 
 on:
+  merge_group:
+    types: [checks_requested]
   push:
     branches:
       - "main"

.github/workflows/ruff-format.yml

@@ -1,6 +1,8 @@
 name: Ruff format
 
 on:
+  merge_group:
+    types: [checks_requested]
   workflow_dispatch:
   workflow_call:
   push:

.github/workflows/ruff-lint.yml

@@ -1,6 +1,8 @@
 name: Ruff lint
 
 on:
+  merge_group:
+    types: [checks_requested]
   workflow_dispatch:
   workflow_call:
   push:

.github/workflows/spelling.yml

@@ -1,6 +1,8 @@
 name: Spelling
 
 on:
+  merge_group:
+    types: [checks_requested]
   workflow_dispatch:
   push:
     branches: [main, "pull-request/**"]

.github/workflows/test.yml

@@ -1,6 +1,8 @@
 name: Run tests
 
 on:
+  merge_group:
+    types: [checks_requested]
   workflow_dispatch:
   workflow_call:
   push:

CONTRIBUTING.md

@@ -99,9 +99,18 @@ does not define a trustee override.
 The NVIDIA copy-pr-bot GitHub App must be installed and enabled for this repository.
 
 Tests, installation, lint, formatting, spelling, copyright, secret detection,
-CodeQL, and release validation run on the mirror push. Release publishing still
-requires manual dispatch. Maintainers should verify checks on the mirror commit
-before merging.
+CodeQL, and release validation run on the mirror push and on
+`merge_group` events with type `checks_requested`. Merge-queue runs check the
+queue's temporary merge commit using the same jobs and check names as push CI;
+the unit tests, example notebooks/scripts, and full installation matrix are
+included. Release publishing still requires manual dispatch.
+
+After these workflows are available on the target branch, a repository admin
+must enable **Require merge queue** in that branch's protection rule or ruleset.
+Keep the essential CI checks required so the queue waits for their results on
+the merge-group commit. Workflow changes alone do not enable the repository
+setting. Maintainers should verify checks on the mirror commit before enqueueing
+and on the merge-group commit before merging.
 
 ## Sign Your Work