Add the latest videos to the README presentations section (#8523)

* Add the latest videos to the README presentations section

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

* support merge queues in files changed check

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

* zizmor ignore

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

* zizmor ignore on run line

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

* run PR checks as well so that the required PR check summary is run

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

* give github action lint permission to upload

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

---------

Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>

.github/workflows/pull-request.yaml

@@ -1,6 +1,6 @@
 name: PR Check
 
-on: [pull_request]
+on: [ pull_request, merge_group ]
 
 # When a new revision is pushed to a PR, cancel all in-progress CI runs for that
 # PR. See https://docs.github.com/en/actions/using-jobs/using-concurrency
@@ -10,6 +10,7 @@ concurrency:
 
 permissions:
   contents: read
+  security-events: write
 
 jobs:
   # Check what types of changes this PR contains
@@ -26,6 +27,7 @@ jobs:
     - name: Check out repository code
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
+        fetch-depth: 0
         persist-credentials: false
 
     - name: Download OPA
@@ -35,7 +37,7 @@ jobs:
 
     - name: Check for file changes
       id: changes
-      run: |
+      run: | # zizmor: ignore[template-injection] These SHAs are generated by GitHub, not user-controlled.
         set -e
 
         # Default to running all checks
@@ -45,7 +47,11 @@ jobs:
         echo "rego=true" >> $GITHUB_OUTPUT
         echo "yaml=true" >> $GITHUB_OUTPUT
 
-        if ! curl -s -o changed_files.json -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
+        # Get changed files: use git diff for merge_group, PR API for pull_request
+        if [ -n "${{ github.event.merge_group.base_sha }}" ]; then
+          git diff --name-only "${{ github.event.merge_group.base_sha }}" "${{ github.event.merge_group.head_sha }}" \
+            | jq -R '{filename: .}' | jq -s '.' > changed_files.json
+        elif ! curl -s -o changed_files.json -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
           "https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/files"; then
           echo "Error: Failed to fetch changed files from GitHub API"
           echo "Defaulting to running all checks (go=true, wasm=true, docs=true, rego=true, yaml=true)"