Repository navigation
ci: move the workflow-lint curl line to canon d5125e09 and update the ci.yml pin (LB-558) - #157
Merged
Merged
Conversation
… ci.yml pin (LB-558) The org canon ci-labels.md moved 9930bdd7 -> d5125e09; the only change is one line of the workflow-lint job: the actionlint download curl line. The checker 5e369bb3 refuses the old `--max-time 120` line at once (no legacy window), so every checker proof on main failed R9. - .github/workflows/ci.yml: the curl line (231) is now byte-equal to canon d5125e09 line 530: `--retry 3 --retry-all-errors --speed-limit 1024 --speed-time 60` instead of `--max-time 120`. - tests/fixtures/ci_canon/canon-workflow-lint-job.yml: replaced by the canon d5125e09 lint job (one changed line, 33); sha256 beeec2c3da80e589633b9ac13fd40824d6abba5cbce8725c5fcb0cea441dfe85. - tests/fixtures/ci_canon/SOURCE.txt: names ci-labels.d5125e09 and the new lint fixture sha. - scripts/release_chain/evidence.py: REVIEWED_CI_WORKFLOW_SHA256 is the sha256 of the new ci.yml raw bytes (de94f322b372305ccb4e5550e248c9727137f263f17dc3d6c4649a5d09ef64c5), as the pin requires in the same change (VP-145, #156). Only the constant's value changes. No test changes: test_reviewed_ci_workflow_pin_matches_the_file and the lint-job fixture comparison follow the new pair. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this changes
Org canon
ci-labels.mdmoved 9930bdd7 -> d5125e09 (LB-558, bulletins #1280/#1281). The only difference is one line of theworkflow-lintjob: the actionlint downloadcurlline (canon line 530). Checker5e369bb3(was4f0c3632) refuses the old line at once, with no legacy window, so any checker proof of this repo failed R9 until the repo carried the new line..github/workflows/ci.ymlline 231:--max-time 120is replaced by--retry 3 --retry-all-errors --speed-limit 1024 --speed-time 60; byte-equal to canon d5125e09 line 530.tests/fixtures/ci_canon/canon-workflow-lint-job.yml: replaced by the canon d5125e09 lint job; exactly one changed line (33); sha256beeec2c3da80e589633b9ac13fd40824d6abba5cbce8725c5fcb0cea441dfe85.tests/fixtures/ci_canon/SOURCE.txt: namesci-labels.d5125e09.md, its sha256 and the new lint fixture sha.scripts/release_chain/evidence.pyline 19:REVIEWED_CI_WORKFLOW_SHA256is nowde94f322b372305ccb4e5550e248c9727137f263f17dc3d6c4649a5d09ef64c5, the sha256 of the newci.ymlraw bytes. Since ci: release/ready takes job completion from needs, the jobs API supplies names only (VP-145) #156,release/readyfails closed whenci.ymlchanges without its pin, so the pin moves in the same change. Only the constant's value changes; the guard andcreate_evidenceare untouched.Exactly four files, 7 insertions and 7 deletions. No test file changes:
tests/test_release_adapter.py:527(test_reviewed_ci_workflow_pin_matches_the_file) compares the real file with the constant, andtests/test_pr_tier_workflows.py:1222compares the lint job with the fixture; both follow the new pair.Authored by a Codex gpt-6.1-sol lane; read by a separate fresh Codex gpt-6.1-sol session with the repo's ruff configuration (line length 100, py311, E/F/I/UP/B/SIM/RUF): ACCEPT, no P0/P1/P2 (curl line 147 characters, same sha256
1120cf62...in canon,ci.ymland fixture;ci.ymlraw sha256 equals the pin, 64 of 64 characters;evidence.py:19is 96 characters and no selected rule can fire; zero hits formax-time 120,aa8b7ec6,9930bdd7and the old pin in the tree; nocontinue-on-errorinci.yml).Tests
Nothing was run on the author's machine. This pull request's own CI is the first run of the changed workflow, the pin test and the fixture comparison;
release/readyon the push run after the merge is the proof of the pin. No box proof of checker5e369bb3(LAKE-TOP 02:22: one canon line, the pin test plus PR CI cover it; the reader agreed).🤖 Generated with Claude Code