Skip to content

chore: sync workflow templates - #395

Merged
stranske merged 1 commit into
mainfrom
sync/workflows-cddea6f9d964
Jun 27, 2026
Merged

chore: sync workflow templates#395
stranske merged 1 commit into
mainfrom
sync/workflows-cddea6f9d964

Conversation

@stranske

@stranske stranske commented Jun 26, 2026

Copy link
Copy Markdown
Owner

Sync Summary

Files Updated

  • agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
  • maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch
  • requirements-llm.txt: Pinned LLM dependencies - exact-sync guarded for agent workflows
  • artifact-cache/ (1 files): Restores, discovers, and caches workflow artifacts by daily, weekly, or run window

Files Skipped

  • pr-00-gate.yml: File exists and sync_mode is create_only
  • ci.yml: File exists and sync_mode is create_only
  • renovate.json: File exists and sync_mode is create_only
  • cross-repo-smoke.yml: File exists and sync_mode is create_only
  • llm_slots.json: None

Review Checklist

  • CI passes with updated workflows
  • No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: e8936e39e81572b9da4ccd6cd4fd9e92622f10e6
Template hash: cddea6f9d964
Sync branch: sync/workflows-cddea6f9d964
Consumer repo: stranske/Ready
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

  • Chores
    • Updated several pinned workflow/action references to newer commit versions.
    • Adjusted a workflow dependency version used by LLM-related tooling.
    • No changes to cache behavior, job logic, or user-facing app features.

Automated sync from stranske/Workflows
Template hash: cddea6f9d964

Changes synced from sync-manifest.yml
@stranske stranske added sync Automated sync from Workflows automated Automated sync from Workflows labels Jun 26, 2026
@stranske
stranske temporarily deployed to agent-standard June 26, 2026 23:29 — with GitHub Actions Inactive
@stranske
stranske temporarily deployed to agent-standard June 26, 2026 23:29 — with GitHub Actions Inactive
@coderabbitai

coderabbitai Bot commented Jun 26, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 2749d531-4875-4c86-becb-bfd15b50df27

📥 Commits

Reviewing files that changed from the base of the PR and between 614a9d0 and d967823.

📒 Files selected for processing (4)
  • .github/actions/artifact-cache/action.yml
  • .github/workflows/agents-auto-pilot.yml
  • .github/workflows/maint-76-claude-code-review.yml
  • tools/requirements-llm.txt
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

📜 Recent review details
⏰ Context from checks skipped due to timeout. (2)
  • GitHub Check: Fetch PR context / Fetch PR Context
  • GitHub Check: check
⚠️ CI failures not shown inline (3)

GitHub Actions: Agents Verifier / 2_check.txt: chore: sync workflow templates

Conclusion: failure

View job details

##[group]Run set -euo pipefail
 �[36;1mset -euo pipefail�[0m
 �[36;1m�[0m
 �[36;1m# Use dedicated scripts dir, create if needed�[0m
 �[36;1mINSTALL_DIR=""�[0m
 �[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
 �[36;1m  INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
 �[36;1mfi�[0m
 �[36;1mmkdir -p "$INSTALL_DIR"�[0m
 �[36;1m�[0m
 �[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
 �[36;1mcd "$INSTALL_DIR"�[0m
 �[36;1m�[0m
 �[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
 �[36;1m�[0m
 �[36;1mcleanup_vendor_aliases() ***�[0m
 �[36;1m  if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  local cleanup_dir="$INSTALL_DIR"�[0m
 �[36;1m  if [ -z "$cleanup_dir" ]; then�[0m
 �[36;1m    echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
 �[36;1m    echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
 �[36;1m    if [ -z "$vendored_alias" ]; then�[0m
 �[36;1m      continue�[0m
 �[36;1m    fi�[0m
 �[36;1m    rm -rf -- "$vendored_alias" || true�[0m
 �[36;1m    local parent_dir�[0m
 �[36;1m    parent_dir=$(dirname "$vendored_alias")�[0m
 �[36;1m    # Remove empty parent directories that may have been created for scoped packages�[0m
 �[36;1m    while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
 �[36;1m      rmdir -- "$parent_dir" 2>/dev/null || break�[0m
 �[36;1m      parent_dir=$(dirname "$parent_dir")�[0m
 �[36;1m    done�[0m
 �[36;1m  done�[0m
 �[36;1m�[0m
 �[36;1m  popd >/dev/null 2>&1 || true�[0m
 �[36;1m***�[0m
 �[36;1m�[0m
 �[36;1mtrap cleanup_vendor_aliases EXIT�[0m
 �[36;1m�[0m
 �[36;1mcreate_vendor_aliases() ***�[0m
 �[36;1m  if [ ! -f "package.json" ];...

GitHub Actions: Agents Verifier / check: chore: sync workflow templates

Conclusion: failure

View job details

##[group]Run set -euo pipefail
 �[36;1mset -euo pipefail�[0m
 �[36;1m�[0m
 �[36;1m# Use dedicated scripts dir, create if needed�[0m
 �[36;1mINSTALL_DIR=""�[0m
 �[36;1mif [ -z "$INSTALL_DIR" ]; then�[0m
 �[36;1m  INSTALL_DIR="$***GITHUB_WORKSPACE***/.github/scripts"�[0m
 �[36;1mfi�[0m
 �[36;1mmkdir -p "$INSTALL_DIR"�[0m
 �[36;1m�[0m
 �[36;1mecho "📦 Installing `@octokit` dependencies in $INSTALL_DIR..."�[0m
 �[36;1mcd "$INSTALL_DIR"�[0m
 �[36;1m�[0m
 �[36;1mdeclare -a VENDORED_ALIAS_DIRS=()�[0m
 �[36;1m�[0m
 �[36;1mcleanup_vendor_aliases() ***�[0m
 �[36;1m  if [ "$***`#VENDORED_ALIAS_DIRS`[@]***" -eq 0 ]; then�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  local cleanup_dir="$INSTALL_DIR"�[0m
 �[36;1m  if [ -z "$cleanup_dir" ]; then�[0m
 �[36;1m    echo "::warning::Install dir is empty, skipping vendored alias cleanup"�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  if ! pushd "$cleanup_dir" >/dev/null 2>&1; then�[0m
 �[36;1m    echo "::warning::Failed to enter install dir \"$cleanup_dir\"; skipping vendored alias cleanup"�[0m
 �[36;1m    return 0�[0m
 �[36;1m  fi�[0m
 �[36;1m�[0m
 �[36;1m  for vendored_alias in "$***VENDORED_ALIAS_DIRS[@]***"; do�[0m
 �[36;1m    if [ -z "$vendored_alias" ]; then�[0m
 �[36;1m      continue�[0m
 �[36;1m    fi�[0m
 �[36;1m    rm -rf -- "$vendored_alias" || true�[0m
 �[36;1m    local parent_dir�[0m
 �[36;1m    parent_dir=$(dirname "$vendored_alias")�[0m
 �[36;1m    # Remove empty parent directories that may have been created for scoped packages�[0m
 �[36;1m    while [ "$parent_dir" != "." ] && [ "$parent_dir" != "/" ]; do�[0m
 �[36;1m      rmdir -- "$parent_dir" 2>/dev/null || break�[0m
 �[36;1m      parent_dir=$(dirname "$parent_dir")�[0m
 �[36;1m    done�[0m
 �[36;1m  done�[0m
 �[36;1m�[0m
 �[36;1m  popd >/dev/null 2>&1 || true�[0m
 �[36;1m***�[0m
 �[36;1m�[0m
 �[36;1mtrap cleanup_vendor_aliases EXIT�[0m
 �[36;1m�[0m
 �[36;1mcreate_vendor_aliases() ***�[0m
 �[36;1m  if [ ! -f "package.json" ];...

Commit Status: Gate / gate: Gate / gate

Conclusion: failure

Path classification was cancelled
🧰 Additional context used
📓 Path-based instructions (4)
{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

{pyproject.toml,.github/workflows/*.{yml,yaml}}: For Python projects with coverage thresholds, ensure both pyproject.toml ([tool.coverage.report] fail_under) and workflow files have matching coverage-min settings, or the lower one will determine the actual threshold
The Manager-Database repository has a coverage threshold of 75%

Files:

  • .github/workflows/agents-auto-pilot.yml
  • .github/workflows/maint-76-claude-code-review.yml
.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For GitHub Actions workflow startup_failure errors, check for invalid YAML syntax, invalid permissions: block in workflow_call reusable workflows, invalid permission scopes, or circular workflow references

Files:

  • .github/workflows/agents-auto-pilot.yml
  • .github/workflows/maint-76-claude-code-review.yml
.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows in consumer repos with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

  • .github/workflows/agents-auto-pilot.yml
  • .github/workflows/maint-76-claude-code-review.yml
.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

  • .github/workflows/agents-auto-pilot.yml
  • .github/workflows/maint-76-claude-code-review.yml
🔀 Multi-repo context

Linked repositories findings

stranske/Workflows

Inspected the default checkout.

  • .github/actions/artifact-cache/action.yml:62 — already uses actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 (# v6).
  • .github/workflows/agents-auto-pilot.yml:225 — already uses the same actions/cache pin.
  • .github/workflows/maint-76-claude-code-review.yml:192 — already uses anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 (# v1).
  • tools/requirements-llm.txt:13 — already pins langchain-anthropic==1.4.7.
  • tests/workflows/test_workflow_llm_installs.py:27 — test fixture hardcodes actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9, so the cache pin is part of a checked contract.
  • scripts/sync_action_versions.sh:44,58 and .github/workflows/maint-sync-action-versions.yml:77,118,161,203 — repo automation already treats actions/cache as a sync-managed versioned dependency.

stranske/Template

Inspected refs/pull/878/head (open PR #878 branch, not default branch).

  • .github/actions/artifact-cache/action.yml:62 — the branch already contains actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 (# v6).
  • .github/workflows/agents-auto-pilot.yml:225 — same pinned cache ref is present on the PR branch.
  • .github/workflows/maint-76-claude-code-review.yml:192 — same pinned anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 is present on the PR branch.
  • tools/requirements-llm.txt:13 — the branch already pins langchain-anthropic==1.4.7.
🔇 Additional comments (4)
.github/actions/artifact-cache/action.yml (1)

62-62: LGTM!

.github/workflows/agents-auto-pilot.yml (1)

225-225: LGTM!

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

tools/requirements-llm.txt (1)

13-13: LGTM!


📝 Walkthrough

Walkthrough

The PR updates pinned dependency references in GitHub Actions and LLM tooling files. It repins actions/cache in two cache steps, repins anthropics/claude-code-action in a review workflow, and changes langchain-anthropic in tools/requirements-llm.txt.

Changes

Dependency pin refreshes

Layer / File(s) Summary
Cache action pins
.github/actions/artifact-cache/action.yml, .github/workflows/agents-auto-pilot.yml
actions/cache commit SHAs were updated in the composite artifact cache action and the pip cache workflow step.
Claude review action pin
.github/workflows/maint-76-claude-code-review.yml
anthropics/claude-code-action was repinned in the claude-review job.
LLM requirement pin
tools/requirements-llm.txt
langchain-anthropic was changed from 1.4.8 to 1.4.7.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~4 minutes

Possibly related PRs

  • stranske/Ready#378: Updates the same actions/cache pin references in .github/actions/artifact-cache/action.yml and .github/workflows/agents-auto-pilot.yml.
  • stranske/Ready#365: Overlaps the claude-code-action repin in .github/workflows/maint-76-claude-code-review.yml and the langchain-anthropic pin change in tools/requirements-llm.txt.
  • stranske/Ready#391: Also changes the pinned anthropics/claude-code-action commit SHA in the claude-review workflow step.

Suggested labels

dependencies

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly reflects the workflow-template sync and matches the main change set.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch sync/workflows-cddea6f9d964

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

@github-actions

github-actions Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Workflow state fingerprint for Agents Gate Followups. Do not edit.

@stranske
stranske merged commit 6dee055 into main Jun 27, 2026
67 of 73 checks passed
@stranske
stranske deleted the sync/workflows-cddea6f9d964 branch June 27, 2026 00:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated sync from Workflows sync Automated sync from Workflows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant