chore: sync workflow templates - #5819
Conversation
|
Bugbot is not enabled for your account, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
|
Important Review skippedAuto reviews are limited based on label configuration. 🚫 Excluded labels (none allowed) (7)
Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0242ae8c7d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
64ac217 to
c7d4e47
Compare
|
@coderabbitai review |
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c7d4e47adf
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
c7d4e47 to
25a4232
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 25a4232612
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Automated sync from stranske/Workflows Template hash: 6e44aca703f4 Changes synced from sync-manifest.yml
25a4232 to
fdfe2c6
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: fdfe2c6ce3
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| try { | ||
| if (!isBootstrapAddition(baseSha, headSha, relativeContractPath)) { | ||
| return null; | ||
| } | ||
| const source = readBootstrapContract(headSha, relativeContractPath); |
There was a problem hiding this comment.
Fetch the bootstrap head before reading its contract
For the first stable-delivery rollout, the base lacks this contract, but the pr-00-gate.yml detect job uses the default shallow actions/checkout and fetchBaseRef fetches only the base branch/base SHA. Consequently the exact pull_request.head.sha is not normally present locally, so both isBootstrapAddition(baseSha, headSha, ...) and readBootstrapContract(headSha, ...) fail and the classifier reports the contract as unavailable. Fresh evidence beyond the earlier bootstrap review is the actual checkout/fetch path: no command fetches the head SHA before this branch executes. Fetch the exact head SHA before checking the add-only diff.
Useful? React with 👍 / 👎.
| const migrateSummaryWriter = Boolean( | ||
| commentId && | ||
| trustedSummaryAuthor && | ||
| (existingSummaryAuthor !== trustedSummaryAuthor || existingSummaryAuthorType !== 'bot'), | ||
| ); |
There was a problem hiding this comment.
Reject untrusted state instead of re-signing it
When the latest comment containing a keepalive state marker was posted by an arbitrary PR commenter, loadKeepaliveState still returns its state; this branch merely notices that its author differs from the selected App and then creates a new App-owned summary containing the inherited previousState. That launders attacker-controlled attention data into a comment trusted by keepalive_challenge_due.js, allowing a later sweep on an agent:needs-attention PR to treat the forged challenge as automation state. Only migrate state from the known legacy writer, and discard state loaded from any other author.
Useful? React with 👍 / 👎.
|
Closing this generated delivery as no longer current. |
Sync Summary
Files Updated
Files Skipped
Review Checklist
Source: stranske/Workflows
Source SHA:
7974faff890b5fd12a08f37385bbcd0ffb995f8fTemplate hash:
6e44aca703f4Consumer-sync plan ID:
sha256:6e44aca703f4149dcc61e7f34fabc7b31d2f5c5e7dac44b4c9f9fec458fcc4b2Sync phase:
promoteSync branch:
sync/workflows-deliveryConsumer repo:
stranske/Trend_Model_ProjectManifest:
.github/sync-manifest.ymlautofix: false