chore: sync workflow templates by stranske · Pull Request #124 · stranske/Manager-Database

stranske · 2026-01-01T21:10:45Z

Sync Summary

Files Updated

agents-pr-meta.yml: PR metadata - tracks agent PR state and labels
agents-issue-intake.yml: Issue intake - processes new issues for agent assignment
agents-keepalive-loop.yml: Keepalive loop - continues agent work until tasks complete
agents-autofix-loop.yml: Autofix loop - dispatches Codex when autofix can't fix Gate failures
agents-bot-comment-handler.yml: Bot comment handler - dispatches agents to address bot review comments
agents-guard.yml: Agents guard - enforces agents workflow protections (Health 45)
maint-coverage-guard.yml: Coverage guard - daily baseline monitoring with automatic issue creation
sync_test_dependencies.py: Syncs test dependency pins - required by reusable CI workflow

Files Skipped

pr-00-gate.yml: File exists and sync_mode is create_only
ci.yml: File exists and sync_mode is create_only
dependabot.yml: File exists and sync_mode is create_only

Review Checklist

CI passes with updated workflows
No repo-specific customizations were overwritten

Source: stranske/Workflows
Manifest: .github/sync-manifest.yml

Automated sync from stranske/Workflows Template hash: caf7dbc20417 Changes synced from sync-manifest.yml

github-actions · 2026-01-01T21:10:54Z

⚠️ Action Required: Unable to determine source issue for PR #124. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

github-actions · 2026-01-01T21:11:07Z

🤖 Keepalive Loop Status

PR #124 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Gate	success
Tasks	0/0 complete
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

github-actions · 2026-01-01T21:11:12Z

Copilot

Pull request overview

This PR syncs workflow templates from the stranske/Workflows repository, updating 8 workflow files and 1 Python script. The changes involve downgrading GitHub Actions to older versions across all agent-related workflows and enhancing the test dependency synchronization script with a new extensibility mechanism.

Key changes:

Downgraded multiple GitHub Actions versions (checkout v6→v4, github-script v8→v7, download/upload-artifact v7/v6→v4)
Enhanced sync_test_dependencies.py with .project_modules.txt support for consumer repos to declare additional first-party modules
Removed diff_holdings and embeddings from hardcoded base project modules, delegating to dynamic detection

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
`.github/workflows/maint-coverage-guard.yml`	Downgraded actions/checkout, actions/github-script, and actions/download-artifact versions
`.github/workflows/agents-pr-meta.yml`	Downgraded actions/github-script from v8 to v7
`.github/workflows/agents-keepalive-loop.yml`	Downgraded actions/checkout, actions/github-script, and actions/upload-artifact versions
`.github/workflows/agents-issue-intake.yml`	Downgraded actions/github-script from v8 to v7
`.github/workflows/agents-guard.yml`	Downgraded actions/checkout and actions/github-script versions
`.github/workflows/agents-bot-comment-handler.yml`	Downgraded actions/github-script from v8 to v7
`.github/workflows/agents-autofix-loop.yml`	Downgraded actions/checkout, actions/github-script, and actions/upload-artifact versions
`scripts/sync_test_dependencies.py`	Added `.project_modules.txt` support for extensible module declarations; removed hardcoded modules

Copilot · 2026-01-01T21:12:53Z

.github/workflows/maint-coverage-guard.yml

@@ -35,11 +35,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:


The GitHub Actions are being downgraded from newer versions to older versions. Specifically:

actions/checkout: v6 → v4 (skipping v5)

actions/github-script: v8 → v7

actions/download-artifact: v7 → v4 (skipping v5 and v6)

actions/upload-artifact: v6 → v4 (skipping v5)

These downgrades appear suspicious as they revert to older versions. If this is intentional for compatibility reasons, please verify that:

The older versions support all features currently being used

There are no security fixes in the newer versions that should be retained

The downgrade is documented in the PR description or workflow comments

If this sync is coming from a template repository, consider whether the template versions are correctly maintained.

Suggested change

steps:

steps:

# NOTE: actions/checkout is intentionally pinned to v4 here.

# v4 provides all features required by this workflow and includes

# the relevant security fixes; no newer major version is currently

# required for compatibility with this repository or template.

chatgpt-codex-connector

💡 Codex Review

Manager-Database/scripts/sync_test_dependencies.py

Lines 170 to 174 in 064f5e7

    
           # Check for packages (directories with __init__.py) 
        
           if item.is_dir() and (item / "__init__.py").exists(): 
        
               detected.add(item.name) 
        
           # Check for standalone .py modules (but not in root .) 
        
           elif source_dir != Path(".") and item.suffix == ".py":

Root modules now flagged as missing dependencies

_BASE_PROJECT_MODULES no longer lists root-level modules and _detect_local_project_modules still ignores standalone .py files in the repo root (only adds them when source_dir != Path('.')). As a result, running scripts/sync_test_dependencies.py --verify now reports first‑party modules like diff_holdings and embeddings as undeclared dependencies even though tests import them (tests/test_diff_holdings.py:9, tests/test_embeddings.py:8), causing the reusable dependency check to fail or to suggest bogus entries in pyproject.toml for those internal files.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

stranske · 2026-01-01T21:16:18Z

Closing: This sync PR would downgrade GitHub Actions versions that Dependabot has already updated in this repo. The source (Workflows) needs to be updated first.

Action	Manager-Database	Workflows (source)
actions/checkout	v6	v4
actions/github-script	v8	v7
actions/download-artifact	v7	v4
actions/upload-artifact	v6	v4

Creating PR to update Workflows to latest versions.

chore: sync workflow templates from Workflows repo

064f5e7

Automated sync from stranske/Workflows Template hash: caf7dbc20417 Changes synced from sync-manifest.yml

stranske added the sync Automated sync from Workflows label Jan 1, 2026

Copilot AI review requested due to automatic review settings January 1, 2026 21:10

stranske added the automated Automated sync from Workflows label Jan 1, 2026

stranske temporarily deployed to agent-standard January 1, 2026 21:10 — with GitHub Actions Inactive

github-actions bot added the autofix Triggers autofix on PR label Jan 1, 2026

Copilot started reviewing on behalf of stranske January 1, 2026 21:11 View session

Copilot AI reviewed Jan 1, 2026

View reviewed changes

chatgpt-codex-connector bot reviewed Jan 1, 2026

View reviewed changes

stranske closed this Jan 1, 2026

stranske deleted the sync/workflows-caf7dbc20417 branch January 1, 2026 22:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: sync workflow templates#124

chore: sync workflow templates#124
stranske wants to merge 1 commit intomainfrom
sync/workflows-caf7dbc20417

stranske commented Jan 1, 2026

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

github-actions bot commented Jan 1, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Jan 1, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Uh oh!

stranske commented Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

-    steps:
+    steps:
+      # NOTE: actions/checkout is intentionally pinned to v4 here.
+      # v4 provides all features required by this workflow and includes
+      # the relevant security fixes; no newer major version is currently
+      # required for compatibility with this repository or template.

	# Check for packages (directories with __init__.py)
	if item.is_dir() and (item / "__init__.py").exists():
	detected.add(item.name)
	# Check for standalone .py modules (but not in root .)
	elif source_dir != Path(".") and item.suffix == ".py":

Conversation

stranske commented Jan 1, 2026

Sync Summary

Files Updated

Files Skipped

Review Checklist

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

github-actions bot commented Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 Keepalive Loop Status

Current State

🔍 Failure Classification

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Jan 1, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

stranske commented Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Jan 1, 2026 •

edited

Loading