RFR: 2214: Require CSR again if all of the CSRs are withdrawn in a Backport CSR PR

[Zhao Song]

On Tue, 26 Mar 2024 18:18:51 GMT, Zhao Song <zsong at openjdk.org> wrote:

> When testing [SKARA-2198](https://bugs.openjdk.org/browse/SKARA-2198), I found that there is a bug.
> 
> When determining if the bot should add the csr label to a backport CSR pr, if the bot found the pr is already associated with any CSR(regardless if it's withdrawn or not), then the bot would not add the csr label.
> 
> This is a bug. A user could create a CSR for this pr and withdraw it, then the user could bypass the CSR request.
> 
> The bot should ignore withdrawn CSRs in this case.

Thanks for the review!

-------------

PR Comment: https://git.openjdk.org/skara/pull/1625#issuecomment-2021456836