From b30f068ce387193771de62ffc7c4277367c2f1c5 Mon Sep 17 00:00:00 2001 From: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Date: Fri, 31 Jul 2026 14:26:05 +0000 Subject: [PATCH] =?UTF-8?q?feat:=20implement=20issue=20#401=20=E2=80=94=20?= =?UTF-8?q?Compliance:=20non-stub-pr-review-mention.yml?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/pr-review-mention.yml | 2 +- scripts/tests/pr-review-mention-workflow.bats | 10 +++++++--- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/pr-review-mention.yml b/.github/workflows/pr-review-mention.yml index d0df00a..ce69a49 100644 --- a/.github/workflows/pr-review-mention.yml +++ b/.github/workflows/pr-review-mention.yml @@ -47,7 +47,7 @@ jobs: pr-review-mention: permissions: pull-requests: write - uses: petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@pr-review-mention/stable # NOSONAR(githubactions:S7637) first-party channel ref + uses: petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@pr-review-mention/v2-stable # NOSONAR(githubactions:S7637) first-party channel ref secrets: GH_PAT_WORKFLOWS: ${{ secrets.GH_PAT_DON_PETRY || secrets.GH_PAT_WORKFLOWS }} DON_PETRY_BOT_GH_PAT: ${{ secrets.DON_PETRY_BOT_GH_PAT }} diff --git a/scripts/tests/pr-review-mention-workflow.bats b/scripts/tests/pr-review-mention-workflow.bats index 7f5fc16..7b8aa2b 100644 --- a/scripts/tests/pr-review-mention-workflow.bats +++ b/scripts/tests/pr-review-mention-workflow.bats @@ -94,15 +94,19 @@ print('ok') [[ "$output" == "ok" ]] } -@test "pr-review-mention still delegates to the org reusable at the stable channel" { +@test "pr-review-mention still delegates to the org reusable at the v2-stable channel" { + # Must pin the major-scoped channel @pr-review-mention/v2-stable, not the bare + # tier @pr-review-mention/stable. The org standard (ci-standards.md → + # centralization tiers) treats a bare tier pin as drift; the canonical stub + # delegates to ...@pr-review-mention/v-stable (#401). run python3 -c " import sys, yaml wf = yaml.safe_load(open(sys.argv[1])) or {} jobs = wf.get('jobs') or {} job = jobs.get('pr-review-mention') or {} uses = job.get('uses', '') -expected = 'petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@pr-review-mention/stable' -assert uses == expected, f'job must call the org reusable at the stable channel, got: {uses!r}' +expected = 'petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@pr-review-mention/v2-stable' +assert uses == expected, f'job must call the org reusable at the v2-stable channel, got: {uses!r}' print('ok') " "$WORKFLOW" [ "$status" -eq 0 ]