chore(deps): update stranske/workflows digest to a0bf67e - #678
chore(deps): update stranske/workflows digest to a0bf67e#678renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
📝 WalkthroughWalkthroughTwo fallback workflow steps in ChangesAction SHA bump
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related issues
Possibly related PRs
Suggested labels
Suggested reviewers
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Workflow state fingerprint for Keepalive Loop Reporter. Do not edit. |
|
Workflow state fingerprint for Agents Gate Followups. Do not edit. |
Workflow source neededPR #678 needs either a linked GitHub issue or one valid non-issue Workflow Source before PR metadata automation can manage it safely. Please do one of:
Once a valid source is present, this warning will not be reposted. |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/agents-guard.yml:
- Line 114: The pinned setup-api-client SHA update was made in a
consumer-managed agents workflow, which should not be edited locally. Revert the
change in agents-guard.yml (and the other affected agents-*.yml copy) and apply
the SHA bump in the upstream shared source in stranske/Workflows, then resync
these workflows from there so the pinned action version stays authoritative in
the shared copy.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: 3da55625-42b6-4c66-8a52-173cdeb94871
📒 Files selected for processing (1)
.github/workflows/agents-guard.yml
🔗 Linked repositories identified
CodeRabbit considers these linked repositories for cross-repo context during reviews:
stranske/Workflows(auto-detected) → reviewed against open PR#2546renovate/stranske-workflows-digestinstead of the default branchstranske/Template(auto-detected) → reviewed against open PR#881renovate/stranske-workflows-digestinstead of the default branch
📜 Review details
⏰ Context from checks skipped due to timeout. (1)
- GitHub Check: Resolve Context
⚠️ CI failures not shown inline (4)
GitHub Actions: Agents Verifier / check: chore(deps): update stranske/workflows digest to a0bf67e
Conclusion: failure
##[group]Run set -euo pipefail
�[36;1mset -euo pipefail�[0m
�[36;1m�[0m
�[36;1m# Use dedicated scripts dir, create if needed�[0m
�[36;1mINSTALL_DIR=""�[0m
�[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
�[36;1m INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
�[36;1mfi�[0m
�[36;1mmkdir -p "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
�[36;1mcd "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
�[36;1m�[0m
�[36;1mcleanup_vendor_aliases() ***�[0m
�[36;1m if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m local cleanup_dir="$INSTALL_DIR"�[0m
�[36;1m if [ -z "$cleanup_dir" ]; then�[0m
�[36;1m echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
�[36;1m echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
�[36;1m if [ -z "$vendored_alias" ]; then�[0m
�[36;1m continue�[0m
�[36;1m fi�[0m
�[36;1m rm -rf -- "$vendored_alias" || true�[0m
�[36;1m local parent_dir�[0m
�[36;1m parent_dir=$(dirname "$vendored_alias")�[0m
�[36;1m # Remove empty parent directories that may have been created for scoped packages�[0m
�[36;1m while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
�[36;1m rmdir -- "$parent_dir" 2>/dev/null || break�[0m
�[36;1m parent_dir=$(dirname "$parent_dir")�[0m
�[36;1m done�[0m
�[36;1m done�[0m
�[36;1m�[0m
�[36;1m popd >/dev/null 2>&1 || true�[0m
�[36;1m***�[0m
�[36;1m�[0m
�[36;1mtrap cleanup_vendor_aliases EXIT�[0m
�[36;1m�[0m
�[36;1mcreate_vendor_aliases() ***�[0m
�[36;1m if [ ! -f "package.json" ];...
GitHub Actions: Agents Verifier / 2_check.txt: chore(deps): update stranske/workflows digest to a0bf67e
Conclusion: failure
##[group]Run set -euo pipefail
�[36;1mset -euo pipefail�[0m
�[36;1m�[0m
�[36;1m# Use dedicated scripts dir, create if needed�[0m
�[36;1mINSTALL_DIR=""�[0m
�[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
�[36;1m INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
�[36;1mfi�[0m
�[36;1mmkdir -p "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
�[36;1mcd "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
�[36;1m�[0m
�[36;1mcleanup_vendor_aliases() ***�[0m
�[36;1m if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m local cleanup_dir="$INSTALL_DIR"�[0m
�[36;1m if [ -z "$cleanup_dir" ]; then�[0m
�[36;1m echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
�[36;1m echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
�[36;1m if [ -z "$vendored_alias" ]; then�[0m
�[36;1m continue�[0m
�[36;1m fi�[0m
�[36;1m rm -rf -- "$vendored_alias" || true�[0m
�[36;1m local parent_dir�[0m
�[36;1m parent_dir=$(dirname "$vendored_alias")�[0m
�[36;1m # Remove empty parent directories that may have been created for scoped packages�[0m
�[36;1m while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
�[36;1m rmdir -- "$parent_dir" 2>/dev/null || break�[0m
�[36;1m parent_dir=$(dirname "$parent_dir")�[0m
�[36;1m done�[0m
�[36;1m done�[0m
�[36;1m�[0m
�[36;1m popd >/dev/null 2>&1 || true�[0m
�[36;1m***�[0m
�[36;1m�[0m
�[36;1mtrap cleanup_vendor_aliases EXIT�[0m
�[36;1m�[0m
�[36;1mcreate_vendor_aliases() ***�[0m
�[36;1m if [ ! -f "package.json" ];...
GitHub Actions: Claude Code Review (Opt-in) / Resolve review target: chore(deps): update stranske/workflows digest to a0bf67e
Conclusion: failure
##[group]Run set -euo pipefail
�[36;1mset -euo pipefail�[0m
�[36;1m�[0m
�[36;1m# Use dedicated scripts dir, create if needed�[0m
�[36;1mINSTALL_DIR=""�[0m
�[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
�[36;1m INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
�[36;1mfi�[0m
�[36;1mmkdir -p "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
�[36;1mcd "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
�[36;1m�[0m
�[36;1mcleanup_vendor_aliases() ***�[0m
�[36;1m if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m local cleanup_dir="$INSTALL_DIR"�[0m
�[36;1m if [ -z "$cleanup_dir" ]; then�[0m
�[36;1m echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
�[36;1m echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
�[36;1m if [ -z "$vendored_alias" ]; then�[0m
�[36;1m continue�[0m
�[36;1m fi�[0m
�[36;1m rm -rf -- "$vendored_alias" || true�[0m
�[36;1m local parent_dir�[0m
�[36;1m parent_dir=$(dirname "$vendored_alias")�[0m
�[36;1m # Remove empty parent directories that may have been created for scoped packages�[0m
�[36;1m while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
�[36;1m rmdir -- "$parent_dir" 2>/dev/null || break�[0m
�[36;1m parent_dir=$(dirname "$parent_dir")�[0m
�[36;1m done�[0m
�[36;1m done�[0m
�[36;1m�[0m
�[36;1m popd >/dev/null 2>&1 || true�[0m
�[36;1m***�[0m
�[36;1m�[0m
�[36;1mtrap cleanup_vendor_aliases EXIT�[0m
�[36;1m�[0m
�[36;1mcreate_vendor_aliases() ***�[0m
�[36;1m if [ ! -f "package.json" ];...
GitHub Actions: Claude Code Review (Opt-in) / 5_Resolve review target.txt: chore(deps): update stranske/workflows digest to a0bf67e
Conclusion: failure
##[group]Run set -euo pipefail
�[36;1mset -euo pipefail�[0m
�[36;1m�[0m
�[36;1m# Use dedicated scripts dir, create if needed�[0m
�[36;1mINSTALL_DIR=""�[0m
�[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
�[36;1m INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
�[36;1mfi�[0m
�[36;1mmkdir -p "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
�[36;1mcd "$INSTALL_DIR"�[0m
�[36;1m�[0m
�[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
�[36;1m�[0m
�[36;1mcleanup_vendor_aliases() ***�[0m
�[36;1m if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m local cleanup_dir="$INSTALL_DIR"�[0m
�[36;1m if [ -z "$cleanup_dir" ]; then�[0m
�[36;1m echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
�[36;1m echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
�[36;1m return 0�[0m
�[36;1m fi�[0m
�[36;1m�[0m
�[36;1m for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
�[36;1m if [ -z "$vendored_alias" ]; then�[0m
�[36;1m continue�[0m
�[36;1m fi�[0m
�[36;1m rm -rf -- "$vendored_alias" || true�[0m
�[36;1m local parent_dir�[0m
�[36;1m parent_dir=$(dirname "$vendored_alias")�[0m
�[36;1m # Remove empty parent directories that may have been created for scoped packages�[0m
�[36;1m while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
�[36;1m rmdir -- "$parent_dir" 2>/dev/null || break�[0m
�[36;1m parent_dir=$(dirname "$parent_dir")�[0m
�[36;1m done�[0m
�[36;1m done�[0m
�[36;1m�[0m
�[36;1m popd >/dev/null 2>&1 || true�[0m
�[36;1m***�[0m
�[36;1m�[0m
�[36;1mtrap cleanup_vendor_aliases EXIT�[0m
�[36;1m�[0m
�[36;1mcreate_vendor_aliases() ***�[0m
�[36;1m if [ ! -f "package.json" ];...
🧰 Additional context used
📓 Path-based instructions (6)
{pyproject.toml,.github/workflows/**/*.{yml,yaml}}
📄 CodeRabbit inference engine (.github/copilot-instructions.md)
Ensure coverage threshold settings in
pyproject.toml[tool.coverage.report] fail_undermatch thecoverage-minsettings in workflow files to prevent threshold conflicts
Files:
.github/workflows/agents-guard.yml
.github/workflows/**/*.{yml,yaml}
📄 CodeRabbit inference engine (.github/copilot-instructions.md)
For
startup_failureGitHub Actions workflow errors, verify YAML syntax validity, avoidpermissions:block onworkflow_callreusable workflows, and check for circular workflow references
Files:
.github/workflows/agents-guard.yml
.github/workflows/*.yml
📄 CodeRabbit inference engine (CLAUDE.md)
Use
@mainreference for reusable workflows fromstranske/Workflowsunless intentionally pinning to an exact commit SHA for a controlled reason
Files:
.github/workflows/agents-guard.yml
.github/workflows/agents-*.yml
📄 CodeRabbit inference engine (CLAUDE.md)
agents-*.ymlworkflow files should be fixed instranske/Workflows, not locally in the consumer repo
Files:
.github/workflows/agents-guard.yml
**/.github/workflows/*.yml
📄 CodeRabbit inference engine (AGENTS.md)
**/.github/workflows/*.yml: Most workflow logic for this repository should live instranske/Workflows, not in the consumer repo. Only carry repo-specific configuration unless explicitly documented otherwise.
Reference reusable workflows with@mainunless intentionally pinning to an exact commit SHA for a controlled reason.
Files:
.github/workflows/agents-guard.yml
**/.github/workflows/agents-*.yml
📄 CodeRabbit inference engine (AGENTS.md)
agents-*.ymlworkflow files should be fixed instranske/Workflows, not locally in the consumer repo.
Files:
.github/workflows/agents-guard.yml
🔀 Multi-repo context
Linked repositories findings
stranske/Workflows (refs/pull/2546/head)
.github/workflows/agents-guard.ymlis the shared consumer workflow that usesstranske/Workflows/.github/actions/setup-api-clientin both fallback paths; the matching test coverage is intests/workflows/test_agents_guard.pyandtests/workflows/test_setup_api_client_contract.py.- No changed API/inputs were found around
setup-api-client; the search only showed the same action path and related contract tests/docs.
stranske/Template (refs/pull/881/head)
.github/workflows/agents-guard.yml:114and:183already referencestranske/Workflows/.github/actions/setup-api-client@a0bf67ebf03ca6767607b6da335fd21a88ebf787on this branch.- This means the updated digest is already present on the Template PR branch, so the consumer workflow there is aligned with the new pin.
| steps.eligibility.outputs.should-run == 'true' && | ||
| steps.api_client_base.outputs.available != 'true' | ||
| uses: "stranske/Workflows/.github/actions/setup-api-client@a525e6e3e2431d302073de65723c6e022f4b02fa" # v1 | ||
| uses: "stranske/Workflows/.github/actions/setup-api-client@a0bf67ebf03ca6767607b6da335fd21a88ebf787" # v1 |
There was a problem hiding this comment.
📐 Maintainability & Code Quality | 🟠 Major | 🏗️ Heavy lift
Move this pin update upstream instead of editing the consumer copy.
This file is one of the upstream-managed agents-*.yml workflows, so changing the fallback action SHA here creates drift from the shared source of truth and can be overwritten on the next sync. Make the SHA bump in stranske/Workflows and resync this file from there. As per coding guidelines, "agents-*.yml workflow files should be fixed in stranske/Workflows, not locally in the consumer repo`."
Also applies to: 183-183
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/agents-guard.yml at line 114, The pinned setup-api-client
SHA update was made in a consumer-managed agents workflow, which should not be
edited locally. Revert the change in agents-guard.yml (and the other affected
agents-*.yml copy) and apply the SHA bump in the upstream shared source in
stranske/Workflows, then resync these workflows from there so the pinned action
version stays authoritative in the shared copy.
Sources: Coding guidelines, Linked repositories
efd8c56 to
d277835
Compare
d277835 to
beed4ec
Compare
|
Closing as superseded by merged Workflows source updates and Maint 68 sync propagation for stranske/workflows digest changes. |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
1 participant
This PR contains the following updates:
a525e6e→a0bf67eConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.