Repository navigation
DO NOT MERGE: live probe for standards#1350 (close-lock moved-tag fallback) #452
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
e13053e
eb78c47
20ea3e2
286cd56
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| # ONE-OFF, scratch branch only, deleted after use. Regenerates this branch's | ||
| # actions.lock with the estate repair order (regen_lock in | ||
| # standards/scripts/regen-dependabot-locks.sh) from hyperpolymath/standards#1350, | ||
| # reports close-lock's moved-tag decisions and the --check verdict, and prints | ||
| # the lock. It has no `uses:` steps, so it needs no lock entry to start. It | ||
| # writes nothing back. | ||
| name: one-off actions.lock regeneration (moved tags) | ||
| on: | ||
| push: | ||
| branches: [claude/compassionate-fermat-9x7vpe] | ||
| permissions: | ||
| contents: read | ||
| jobs: | ||
| regen: | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 20 | ||
| env: | ||
| GH_TOKEN: ${{ github.token }} | ||
| STANDARDS_BRANCH: claude/compassionate-fermat-9x7vpe-callee-lock | ||
| steps: | ||
| - name: Regenerate actions.lock and check closure | ||
| run: | | ||
| set -uo pipefail | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
If a prerequisite such as either clone, the branch checkout, Useful? React with 👍 / 👎. |
||
| git clone --quiet https://github.com/${{ github.repository }}.git e | ||
| git -C e checkout --quiet ${{ github.sha }} | ||
| git -C e log --oneline -1 | ||
| git clone --quiet --depth 1 --branch "$STANDARDS_BRANCH" https://github.com/metadatastician/standards.git std | ||
| git -C std log --oneline -1 | ||
| sudo apt-get install -y -qq gawk >/dev/null | ||
| gh extension install github/gh-actions-lock --pin v0.2.0 | ||
| gh actions-lock --version | ||
| export GH_BIN=gh REGEN_TOOLS="$PWD/std/scripts" | ||
| cp e/.github/workflows/actions.lock prior.lock | ||
| source std/scripts/regen-dependabot-locks.sh | ||
| outcome="$(regen_lock "$PWD/e" 2> regen.log || true)" | ||
| cat regen.log | ||
| echo "OUTCOME=$outcome" | ||
| echo "== close-lock moved-tag decisions" | ||
| grep -E '^ (~|SKIP|\+) ' regen.log || echo "(none)" | ||
| echo "== close-lock --check" | ||
| bash std/scripts/close-lock.sh --check e/.github/workflows; echo "CHECK_RC=$?" | ||
|
hyperpolymath marked this conversation as resolved.
|
||
| echo "== dtolnay records" | ||
| grep -A4 "^ 'dtolnay/rust-toolchain@\(e2a55d2\|02cb101\)" e/.github/workflows/actions.lock || echo "(no dtolnay records)" | ||
| git -C e status --porcelain | ||
| echo "LOCK-SHA256 $(sha256sum < e/.github/workflows/actions.lock | cut -d' ' -f1)" | ||
| echo "LOCK-BEGIN" | ||
| base64 -w 76 e/.github/workflows/actions.lock | ||
| echo "LOCK-END" | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| # ONE-OFF, scratch branch only, deleted after use. Probe for | ||
| # hyperpolymath/standards#1350, separated from the standards repository move: | ||
| # panic-attack@b689a74 scan-and-report pins dtolnay/rust-toolchain@02cb101, | ||
| # which no current tag names. No secrets, so the cross-repo dispatch skips. | ||
| name: one-off moved-tag probe (panic-attack) | ||
| on: | ||
| push: | ||
| branches: [claude/compassionate-fermat-9x7vpe] | ||
| permissions: | ||
| contents: read | ||
| jobs: | ||
| scan: | ||
| uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@b689a74d2762a1c19839ae3fbd59b7fe5ef920ea # main 2026-10-01 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
| # ONE-OFF, scratch branch only, deleted after use. Probe for | ||
| # hyperpolymath/standards#1350 and the standards repository move: calls | ||
| # mirror-reusable@75bd5994 (pins dtolnay/rust-toolchain@e2a55d2, no current | ||
| # tag) under the repository's new name, metadatastician/standards. No | ||
| # secrets, so every mirror push skips. | ||
| name: one-off moved-tag probe (standards, new path) | ||
| on: | ||
| push: | ||
| branches: [claude/compassionate-fermat-9x7vpe] | ||
| permissions: | ||
| actions: read | ||
| contents: read | ||
| jobs: | ||
| mirror: | ||
| uses: metadatastician/standards/.github/workflows/mirror-reusable.yml@75bd5994470661a099df562d6d5ad2fe744dbd66 # main 2026-08-04 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
When this standalone commit is pushed, these entries already close the lock over both probe workflows and their moved-tag dependencies. Consequently the advertised control can never produce the expected zero-job startup failure, and the probes immediately exercise the regenerated state; this removes the negative control needed to show that any subsequent startup is caused by the fallback rather than unrelated behavior. Keep the initial commit on the parent lock and add these generated records only in the follow-up commit.
Useful? React with 👍 / 👎.