chore: sync workflow templates - #350
Conversation
Automated sync from stranske/Workflows Template hash: 536a715df8b0 Changes synced from sync-manifest.yml
|
Workflow state fingerprint for Keepalive Loop Reporter. Do not edit. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (8)
🔗 Linked repositories identifiedCodeRabbit considers these linked repositories for cross-repo context during reviews:
📜 Recent review details🧰 Additional context used📓 Path-based instructions (7){AGENTS.md,CLAUDE.md}📄 CodeRabbit inference engine (AGENTS.md)
Files:
{CLAUDE.md,AGENTS.md}📄 CodeRabbit inference engine (CLAUDE.md)
Files:
{pyproject.toml,.github/workflows/*.{yml,yaml}}📄 CodeRabbit inference engine (.github/copilot-instructions.md)
Files:
.github/workflows/*.{yml,yaml}📄 CodeRabbit inference engine (.github/copilot-instructions.md)
Files:
{.github/workflows/agents-*.yml,.github/workflows/autofix.yml,.github/codex/**/*.md,.github/scripts/synced/**}📄 CodeRabbit inference engine (AGENTS.md)
Files:
.github/workflows/**/*.{yml,yaml}📄 CodeRabbit inference engine (CLAUDE.md)
Files:
**/*.py📄 CodeRabbit inference engine (.github/copilot-instructions.md)
Files:
🧠 Learnings (1)📓 Common learnings🪛 ast-grep (0.43.0)scripts/check_deliberate_break.py[info] 329-329: use jsonify instead of json.dumps for JSON output (use-jsonify) [info] 341-341: use jsonify instead of json.dumps for JSON output (use-jsonify) [error] 143-150: Use of unsanitized data to create processes (os-system-unsanitized-data) [error] 143-150: Command coming from incoming request (subprocess-from-request) [error] 159-166: Command coming from incoming request (subprocess-from-request) [error] 190-196: Command coming from incoming request (subprocess-from-request) 🔀 Multi-repo context stranske/WorkflowsBased on my exploration of the Linked repositories findingsstranske/Workflows [source repository]Key Integration Points:
Breaking Changes Analysis:
Consistency Checks: 🔇 Additional comments (23)
📝 WalkthroughWalkthroughAdds ChangesDeliberate-Break Gate and Runtime AC Enforcement
Pinned SHA bump and agent guidance docs
Sequence Diagram(s)sequenceDiagram
rect rgba(173, 216, 230, 0.5)
Note over Workflow: agents-73 / agents-81 promote job
participant Workflow
participant MergeGuard as runtime_ac_merge_guard.js
participant GitHubAPI as GitHub REST API
end
Workflow->>MergeGuard: assertRuntimeAcMergeAllowed(github, core, owner, repo, prNumber, source)
MergeGuard->>GitHubAPI: GET /repos/{owner}/{repo}/pulls/{prNumber} (fetch labels)
GitHubAPI-->>MergeGuard: PR label list
alt No required AC labels present
MergeGuard-->>Workflow: { allowed: true, labels: [] }
Workflow->>GitHubAPI: pulls.merge (squash)
else Required AC labels detected
MergeGuard-->>Workflow: throws runtime_ac_merge_blocked error
Note over Workflow: merge skipped, job marked failed
end
sequenceDiagram
rect rgba(255, 200, 150, 0.5)
Note over CI: check_deliberate_break.py
participant CI as GitHub Actions step
participant Script as check_deliberate_break.py
participant Git as git (diff / archive)
participant Pytest as pytest runner
end
CI->>Script: --base SHA --pr-body-file body.txt
Script->>Script: parse_deliberate_break_spec(PR body)
alt No marker found
Script-->>CI: verdict=SKIPPED, exit 0
else Spec parsed
Script->>Git: diff base...HEAD test_file (tamper check)
Git-->>Script: removed assertion lines
Script->>Pytest: run command at HEAD
Pytest-->>Script: returncode + output
alt HEAD run fails
Script-->>CI: verdict=FAIL_BROKEN, exit 1
else HEAD run passes
Script->>Git: git archive base → tmpdir
Script->>Pytest: run command against base snapshot
Pytest-->>Script: returncode + output
alt Base also passes
Script-->>CI: verdict=FAIL_HOLLOW, exit 1
else Base fails
Script-->>CI: verdict=PASS, exit 0
end
end
end
Estimated code review effort🎯 4 (Complex) | ⏱️ ~60 minutes Possibly related issues
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
|
Workflow state fingerprint for Agents Gate Followups. Do not edit. |
Sync Summary
Files Updated
Files Skipped
Review Checklist
Source: stranske/Workflows
Source SHA:
deacb8ee2852a7c22fe229645468776f35921628Template hash:
536a715df8b0Sync branch:
sync/workflows-536a715df8b0Consumer repo:
stranske/ReadyManifest:
.github/sync-manifest.ymlSummary by CodeRabbit
New Features
Documentation
Chores