diff --git a/.github/workflows/__all-platform-bundle.yml b/.github/workflows/__all-platform-bundle.yml
index 4846d13f1e..d55bedff42 100644
--- a/.github/workflows/__all-platform-bundle.yml
+++ b/.github/workflows/__all-platform-bundle.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: windows-latest
             version: nightly-latest
     name: All-platform bundle
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__analysis-kinds.yml b/.github/workflows/__analysis-kinds.yml
index 5353c10956..c0bcd9ab0e 100644
--- a/.github/workflows/__analysis-kinds.yml
+++ b/.github/workflows/__analysis-kinds.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -59,7 +64,9 @@ jobs:
             version: nightly-latest
             analysis-kinds: risk-assessment
     name: Analysis kinds
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__analyze-ref-input.yml b/.github/workflows/__analyze-ref-input.yml
index 7341a41740..737c8360de 100644
--- a/.github/workflows/__analyze-ref-input.yml
+++ b/.github/workflows/__analyze-ref-input.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: "Analyze: 'ref' and 'sha' from inputs"
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__autobuild-action.yml b/.github/workflows/__autobuild-action.yml
index 730a387f90..a4c172fdf2 100644
--- a/.github/workflows/__autobuild-action.yml
+++ b/.github/workflows/__autobuild-action.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -51,7 +56,9 @@ jobs:
           - os: windows-latest
             version: linked
     name: autobuild-action
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__autobuild-direct-tracing-with-working-dir.yml b/.github/workflows/__autobuild-direct-tracing-with-working-dir.yml
index e0ff968bdc..db9fce9d1a 100644
--- a/.github/workflows/__autobuild-direct-tracing-with-working-dir.yml
+++ b/.github/workflows/__autobuild-direct-tracing-with-working-dir.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -53,7 +58,9 @@ jobs:
           - os: windows-latest
             version: nightly-latest
     name: Autobuild direct tracing (custom working directory)
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__autobuild-working-dir.yml b/.github/workflows/__autobuild-working-dir.yml
index fac4ef9f54..c49b009be9 100644
--- a/.github/workflows/__autobuild-working-dir.yml
+++ b/.github/workflows/__autobuild-working-dir.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Autobuild working directory
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__build-mode-autobuild.yml b/.github/workflows/__build-mode-autobuild.yml
index edc1d505db..7565240463 100644
--- a/.github/workflows/__build-mode-autobuild.yml
+++ b/.github/workflows/__build-mode-autobuild.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -53,7 +58,9 @@ jobs:
           - os: windows-latest
             version: nightly-latest
     name: Build mode autobuild
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__build-mode-manual.yml b/.github/workflows/__build-mode-manual.yml
index bfe92c55ea..5c1030ff84 100644
--- a/.github/workflows/__build-mode-manual.yml
+++ b/.github/workflows/__build-mode-manual.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Build mode manual
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__build-mode-none.yml b/.github/workflows/__build-mode-none.yml
index da7aa76383..ebf56d726c 100644
--- a/.github/workflows/__build-mode-none.yml
+++ b/.github/workflows/__build-mode-none.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Build mode none
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__build-mode-rollback.yml b/.github/workflows/__build-mode-rollback.yml
index fcc77ea36e..e59acc8131 100644
--- a/.github/workflows/__build-mode-rollback.yml
+++ b/.github/workflows/__build-mode-rollback.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Build mode rollback
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__bundle-from-nightly.yml b/.github/workflows/__bundle-from-nightly.yml
index 6c414fb67e..52227b6e7e 100644
--- a/.github/workflows/__bundle-from-nightly.yml
+++ b/.github/workflows/__bundle-from-nightly.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: 'Bundle: From nightly'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__bundle-from-toolcache.yml b/.github/workflows/__bundle-from-toolcache.yml
index a1c1fade09..746eb6d835 100644
--- a/.github/workflows/__bundle-from-toolcache.yml
+++ b/.github/workflows/__bundle-from-toolcache.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: toolcache
     name: 'Bundle: From toolcache'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__bundle-toolcache.yml b/.github/workflows/__bundle-toolcache.yml
index 0055f94705..973dc9f7ab 100644
--- a/.github/workflows/__bundle-toolcache.yml
+++ b/.github/workflows/__bundle-toolcache.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: windows-latest
             version: linked
     name: 'Bundle: Caching checks'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__cleanup-db-cluster-dir.yml b/.github/workflows/__cleanup-db-cluster-dir.yml
index 3153041401..87d2893fdd 100644
--- a/.github/workflows/__cleanup-db-cluster-dir.yml
+++ b/.github/workflows/__cleanup-db-cluster-dir.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Clean up database cluster directory
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__config-export.yml b/.github/workflows/__config-export.yml
index f8d0ecf0c6..d3b5452a80 100644
--- a/.github/workflows/__config-export.yml
+++ b/.github/workflows/__config-export.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Config export
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__config-input.yml b/.github/workflows/__config-input.yml
index c015526c68..c2a8a85f73 100644
--- a/.github/workflows/__config-input.yml
+++ b/.github/workflows/__config-input.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Config input
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__cpp-deptrace-disabled.yml b/.github/workflows/__cpp-deptrace-disabled.yml
index e2434f4256..7c340cd2fd 100644
--- a/.github/workflows/__cpp-deptrace-disabled.yml
+++ b/.github/workflows/__cpp-deptrace-disabled.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'C/C++: disabling autoinstalling dependencies (Linux)'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__cpp-deptrace-enabled-on-macos.yml b/.github/workflows/__cpp-deptrace-enabled-on-macos.yml
index 344ed8d1ea..f7f602eaa2 100644
--- a/.github/workflows/__cpp-deptrace-enabled-on-macos.yml
+++ b/.github/workflows/__cpp-deptrace-enabled-on-macos.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: 'C/C++: autoinstalling dependencies is skipped (macOS)'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__cpp-deptrace-enabled.yml b/.github/workflows/__cpp-deptrace-enabled.yml
index ab1a70584b..87e2d8225a 100644
--- a/.github/workflows/__cpp-deptrace-enabled.yml
+++ b/.github/workflows/__cpp-deptrace-enabled.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'C/C++: autoinstalling dependencies (Linux)'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__diagnostics-export.yml b/.github/workflows/__diagnostics-export.yml
index 930ff0eb4c..10583136ec 100644
--- a/.github/workflows/__diagnostics-export.yml
+++ b/.github/workflows/__diagnostics-export.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Diagnostic export
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__export-file-baseline-information.yml b/.github/workflows/__export-file-baseline-information.yml
index 597c7ce9b6..1eed09f9a2 100644
--- a/.github/workflows/__export-file-baseline-information.yml
+++ b/.github/workflows/__export-file-baseline-information.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: windows-latest
             version: nightly-latest
     name: Export file baseline information
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__extractor-ram-threads.yml b/.github/workflows/__extractor-ram-threads.yml
index 5bd5c8b940..41c4e085d6 100644
--- a/.github/workflows/__extractor-ram-threads.yml
+++ b/.github/workflows/__extractor-ram-threads.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Extractor ram and threads options test
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__global-proxy.yml b/.github/workflows/__global-proxy.yml
index 9244d1fc8f..5604105e47 100644
--- a/.github/workflows/__global-proxy.yml
+++ b/.github/workflows/__global-proxy.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Proxy test
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-custom-queries.yml b/.github/workflows/__go-custom-queries.yml
index 7b4cd1305b..b6d93bfcd9 100644
--- a/.github/workflows/__go-custom-queries.yml
+++ b/.github/workflows/__go-custom-queries.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -59,7 +64,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Go: Custom queries'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-indirect-tracing-workaround-diagnostic.yml b/.github/workflows/__go-indirect-tracing-workaround-diagnostic.yml
index 968caf1e69..d1c4920073 100644
--- a/.github/workflows/__go-indirect-tracing-workaround-diagnostic.yml
+++ b/.github/workflows/__go-indirect-tracing-workaround-diagnostic.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -47,7 +52,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: 'Go: diagnostic when Go is changed after init step'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-indirect-tracing-workaround-no-file-program.yml b/.github/workflows/__go-indirect-tracing-workaround-no-file-program.yml
index 0f13b1e663..f88e8cfeac 100644
--- a/.github/workflows/__go-indirect-tracing-workaround-no-file-program.yml
+++ b/.github/workflows/__go-indirect-tracing-workaround-no-file-program.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -47,7 +52,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: 'Go: diagnostic when `file` is not installed'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-indirect-tracing-workaround.yml b/.github/workflows/__go-indirect-tracing-workaround.yml
index 915835c2ab..c26e07e28b 100644
--- a/.github/workflows/__go-indirect-tracing-workaround.yml
+++ b/.github/workflows/__go-indirect-tracing-workaround.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -47,7 +52,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: 'Go: workaround for indirect tracing'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-tracing-autobuilder.yml b/.github/workflows/__go-tracing-autobuilder.yml
index fb471c5eac..7a957b041d 100644
--- a/.github/workflows/__go-tracing-autobuilder.yml
+++ b/.github/workflows/__go-tracing-autobuilder.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -67,7 +72,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: 'Go: tracing with autobuilder step'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-tracing-custom-build-steps.yml b/.github/workflows/__go-tracing-custom-build-steps.yml
index b3b043def9..6e88acbf63 100644
--- a/.github/workflows/__go-tracing-custom-build-steps.yml
+++ b/.github/workflows/__go-tracing-custom-build-steps.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -67,7 +72,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: 'Go: tracing with custom build steps'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__go-tracing-legacy-workflow.yml b/.github/workflows/__go-tracing-legacy-workflow.yml
index 20bdea6955..6f55d1790e 100644
--- a/.github/workflows/__go-tracing-legacy-workflow.yml
+++ b/.github/workflows/__go-tracing-legacy-workflow.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -67,7 +72,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: 'Go: tracing with legacy workflow'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__init-with-registries.yml b/.github/workflows/__init-with-registries.yml
index 9293dcc196..a1d625511b 100644
--- a/.github/workflows/__init-with-registries.yml
+++ b/.github/workflows/__init-with-registries.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Packaging: Download using registries'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       packages: read
diff --git a/.github/workflows/__javascript-source-root.yml b/.github/workflows/__javascript-source-root.yml
index 1dcbd38a85..29b11fc511 100644
--- a/.github/workflows/__javascript-source-root.yml
+++ b/.github/workflows/__javascript-source-root.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Custom source root
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__job-run-uuid-sarif.yml b/.github/workflows/__job-run-uuid-sarif.yml
index b24ab39005..5be122d74f 100644
--- a/.github/workflows/__job-run-uuid-sarif.yml
+++ b/.github/workflows/__job-run-uuid-sarif.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Job run UUID added to SARIF
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__language-aliases.yml b/.github/workflows/__language-aliases.yml
index 731d975ce3..9752f0340a 100644
--- a/.github/workflows/__language-aliases.yml
+++ b/.github/workflows/__language-aliases.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Language aliases
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__linux-arm64.yml b/.github/workflows/__linux-arm64.yml
index de045d8954..2e62befa77 100644
--- a/.github/workflows/__linux-arm64.yml
+++ b/.github/workflows/__linux-arm64.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-24.04-arm
             version: nightly-latest
     name: Linux Arm64
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__local-bundle.yml b/.github/workflows/__local-bundle.yml
index 8e448080f3..3eedaecdd0 100644
--- a/.github/workflows/__local-bundle.yml
+++ b/.github/workflows/__local-bundle.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Local CodeQL bundle
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__multi-language-autodetect.yml b/.github/workflows/__multi-language-autodetect.yml
index a388e57342..b4f45804d7 100644
--- a/.github/workflows/__multi-language-autodetect.yml
+++ b/.github/workflows/__multi-language-autodetect.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -91,7 +96,9 @@ jobs:
           - os: macos-latest-xlarge
             version: nightly-latest
     name: Multi-language repository
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__overlay-init-fallback.yml b/.github/workflows/__overlay-init-fallback.yml
index b6c99efcef..f5d847e695 100644
--- a/.github/workflows/__overlay-init-fallback.yml
+++ b/.github/workflows/__overlay-init-fallback.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -39,7 +44,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Overlay database init fallback
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__packaging-codescanning-config-inputs-js.yml b/.github/workflows/__packaging-codescanning-config-inputs-js.yml
index 27139c8314..4471ac59c1 100644
--- a/.github/workflows/__packaging-codescanning-config-inputs-js.yml
+++ b/.github/workflows/__packaging-codescanning-config-inputs-js.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Packaging: Config and input passed to the CLI'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__packaging-config-inputs-js.yml b/.github/workflows/__packaging-config-inputs-js.yml
index 9844c43488..d06d73b8f8 100644
--- a/.github/workflows/__packaging-config-inputs-js.yml
+++ b/.github/workflows/__packaging-config-inputs-js.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Packaging: Config and input'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__packaging-config-js.yml b/.github/workflows/__packaging-config-js.yml
index 916e892765..213061937d 100644
--- a/.github/workflows/__packaging-config-js.yml
+++ b/.github/workflows/__packaging-config-js.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Packaging: Config file'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__packaging-inputs-js.yml b/.github/workflows/__packaging-inputs-js.yml
index 01ddb5dc31..7495bbf0e3 100644
--- a/.github/workflows/__packaging-inputs-js.yml
+++ b/.github/workflows/__packaging-inputs-js.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: 'Packaging: Action input'
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__per-language-bundle-validation.yml b/.github/workflows/__per-language-bundle-validation.yml
index ea900a9e09..1ddfb61b9a 100644
--- a/.github/workflows/__per-language-bundle-validation.yml
+++ b/.github/workflows/__per-language-bundle-validation.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -72,7 +77,9 @@ jobs:
             version: nightly-latest
             build-mode: autobuild
     name: Per-language bundles
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__remote-config.yml b/.github/workflows/__remote-config.yml
index e1c3785f6a..926f1267cc 100644
--- a/.github/workflows/__remote-config.yml
+++ b/.github/workflows/__remote-config.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -59,7 +64,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Remote config file
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__resolve-environment-action.yml b/.github/workflows/__resolve-environment-action.yml
index 11a31fdabc..22493be9b0 100644
--- a/.github/workflows/__resolve-environment-action.yml
+++ b/.github/workflows/__resolve-environment-action.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Resolve environment
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__rubocop-multi-language.yml b/.github/workflows/__rubocop-multi-language.yml
index 7bda6ce9fd..8b752b413d 100644
--- a/.github/workflows/__rubocop-multi-language.yml
+++ b/.github/workflows/__rubocop-multi-language.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: RuboCop multi-language
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__ruby.yml b/.github/workflows/__ruby.yml
index 98f8ec6a2a..6fc336d161 100644
--- a/.github/workflows/__ruby.yml
+++ b/.github/workflows/__ruby.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -47,7 +52,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: Ruby analysis
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__rust.yml b/.github/workflows/__rust.yml
index f26b4eb2eb..a2eb6d5d6d 100644
--- a/.github/workflows/__rust.yml
+++ b/.github/workflows/__rust.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -45,7 +50,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Rust analysis
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__split-workflow.yml b/.github/workflows/__split-workflow.yml
index 512058a598..bacccd01ee 100644
--- a/.github/workflows/__split-workflow.yml
+++ b/.github/workflows/__split-workflow.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -67,7 +72,9 @@ jobs:
           - os: macos-latest
             version: nightly-latest
     name: Split workflow
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__start-proxy.yml b/.github/workflows/__start-proxy.yml
index edc6aa1cc5..753f4821ac 100644
--- a/.github/workflows/__start-proxy.yml
+++ b/.github/workflows/__start-proxy.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: windows-latest
             version: linked
     name: Start proxy
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__submit-sarif-failure.yml b/.github/workflows/__submit-sarif-failure.yml
index 099e93001f..1f640baca6 100644
--- a/.github/workflows/__submit-sarif-failure.yml
+++ b/.github/workflows/__submit-sarif-failure.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -41,7 +46,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Submit SARIF after failure
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: write
diff --git a/.github/workflows/__swift-autobuild.yml b/.github/workflows/__swift-autobuild.yml
index 52c189f3a8..515c293ec4 100644
--- a/.github/workflows/__swift-autobuild.yml
+++ b/.github/workflows/__swift-autobuild.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -37,7 +42,9 @@ jobs:
           - os: macos-latest-xlarge
             version: nightly-latest
     name: Swift analysis using autobuild
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__swift-custom-build.yml b/.github/workflows/__swift-custom-build.yml
index 000b681eb4..80c061b58f 100644
--- a/.github/workflows/__swift-custom-build.yml
+++ b/.github/workflows/__swift-custom-build.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -61,7 +66,9 @@ jobs:
           - os: macos-latest-xlarge
             version: nightly-latest
     name: Swift analysis using a custom build command
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__unset-environment.yml b/.github/workflows/__unset-environment.yml
index 8a8796d9a7..59aceb7322 100644
--- a/.github/workflows/__unset-environment.yml
+++ b/.github/workflows/__unset-environment.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -59,7 +64,9 @@ jobs:
           - os: ubuntu-latest
             version: nightly-latest
     name: Test unsetting environment variables
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__upload-ref-sha-input.yml b/.github/workflows/__upload-ref-sha-input.yml
index 76e8f4e3c0..be4f14876e 100644
--- a/.github/workflows/__upload-ref-sha-input.yml
+++ b/.github/workflows/__upload-ref-sha-input.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-latest
             version: default
     name: "Upload-sarif: 'ref' and 'sha' from inputs"
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__upload-sarif.yml b/.github/workflows/__upload-sarif.yml
index 77fa0264e5..e35093d833 100644
--- a/.github/workflows/__upload-sarif.yml
+++ b/.github/workflows/__upload-sarif.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -64,7 +69,9 @@ jobs:
             version: default
             analysis-kinds: code-scanning,code-quality
     name: Test different uses of `upload-sarif`
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/__with-checkout-path.yml b/.github/workflows/__with-checkout-path.yml
index 59a8edc9d1..ea09881205 100644
--- a/.github/workflows/__with-checkout-path.yml
+++ b/.github/workflows/__with-checkout-path.yml
@@ -12,7 +12,12 @@ on:
     branches:
       - main
       - releases/v*
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
   merge_group:
     types:
       - checks_requested
@@ -57,7 +62,9 @@ jobs:
           - os: ubuntu-latest
             version: linked
     name: Use a custom `checkout_path`
-    if: github.triggering_actor != 'dependabot[bot]'
+    if: |-
+      (github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||
+      github.event.label.name == 'Rebuild: Unchanged'
     permissions:
       contents: read
       security-events: read
diff --git a/.github/workflows/rebuild.yml b/.github/workflows/rebuild.yml
index 1c174ac7a3..bd96998f10 100644
--- a/.github/workflows/rebuild.yml
+++ b/.github/workflows/rebuild.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: 24
-          cache: 'npm'
+          cache: "npm"
 
       - name: Remove label
         if: github.event_name == 'pull_request'
@@ -140,3 +140,14 @@ jobs:
           echo "Pushed a commit to rebuild the Action." \
             "Please approve running the PR checks." |
             gh pr comment --body-file - --repo github/codeql-action "$PR_NUMBER"
+
+      - name: "Add 'Rebuild: Unchanged' label"
+        if: >-
+          github.event_name == 'pull_request' &&
+          steps.push.outputs.changes != 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          gh pr edit --repo github/codeql-action "$PR_NUMBER" \
+            --add-label "Rebuild: Unchanged"
diff --git a/pr-checks/sync.ts b/pr-checks/sync.ts
index d6382786c3..707e295262 100755
--- a/pr-checks/sync.ts
+++ b/pr-checks/sync.ts
@@ -508,6 +508,17 @@ function getSetupSteps(checkSpecification: JobSpecification): {
   return { inputs: unionAll(inputs), steps };
 }
 
+/**
+ * Condition used to prevent jobs from running for Dependabot PRs
+ * to avoid unnecessary runs if the "Rebuild" workflow ends up
+ * changing the JavaScript bundles.
+ *
+ * Also allows jobs to run if a PR was labelled with "Rebuild: Unchanged".
+ */
+const jobRunCheck = new yaml.Scalar(
+  "(github.event.action != 'labeled' && github.triggering_actor != 'dependabot[bot]') ||\ngithub.event.label.name == 'Rebuild: Unchanged'",
+);
+
 /**
  * Generates an Actions job from the `checkSpecification`.
  *
@@ -578,7 +589,7 @@ function generateJob(
       },
     },
     name: checkSpecification.name,
-    if: "github.triggering_actor != 'dependabot[bot]'",
+    if: jobRunCheck,
     permissions: {
       contents: "read",
       "security-events": "read",
@@ -628,7 +639,7 @@ function generateValidationJob(
 
   const validationJob: Record<string, any> = {
     name: jobSpecification.name,
-    if: "github.triggering_actor != 'dependabot[bot]'",
+    if: jobRunCheck,
     needs: [checkName],
     permissions: {
       contents: "read",
@@ -771,7 +782,9 @@ function main(): void {
         push: {
           branches: ["main", "releases/v*"],
         },
-        pull_request: {},
+        pull_request: {
+          types: ["opened", "synchronize", "reopened", "labeled"],
+        },
         merge_group: {
           types: ["checks_requested"],
         },