Skip to content

chore(ci): converge ci-workflows pins on 0.1.23 - #29

Closed
rldyourmnd wants to merge 1 commit into
mainfrom
chore/ci-workflows-0.1.23
Closed

rldyourmnd wants to merge 1 commit into
mainfrom
chore/ci-workflows-0.1.23

Conversation

@rldyourmnd

Copy link
Copy Markdown
Contributor

Converges this repository's NDDev-OpenNetwork/ci-workflows pins on the published 0.1.23 tag (96215b32fbc751716b5c0b758a7a7ca202246574).

Why

An estate-wide audit found the fleet spread across eight distinct ci-workflows pins, from 0.1.11 (2026-08-26, 88 commits behind main) to 0.1.21. Several pins were untagged development commits. 0.1.23 is the first published tag carrying both current standards changes:

  • the tool-cache composite action vendored into ci-workflows/actions/tool-cache/, removing a dependency on the archived NDDev-Archive/github-actions-garm;
  • the retired GARM label classes (nddev-linux-standard, nddev-linux-untrusted, nddev-linux-integration) replaced by the live single nddev-linux label, with ADR-0004 carrying the dated cutover.

Safety

Input contracts were diffed for every reusable this repository calls across the whole 0.1.16..0.1.23 range: no input was removed and none became required. This is a pin move with no caller change.

The retired nddev-linux-* vocabulary was checked against every workflow in all 68 active repositories before the release: zero occurrences. Live runners advertise exactly self-hosted,Linux,X64,nddev-linux — 24 of them, 6 organization-scope and 18 repository-scope, all online.

Every pin uses the # 0.1.23 release-comment form that check_pinned_actions.py requires.

🤖 Generated with Claude Code

Previous pins in this repository: ci-feedback-events.yml 9adc78a8; codeql.yml 9eb9e070; release.yml 9eb9e070.

A fleet audit found eight distinct ci-workflows pins in use across the
estate, from 0.1.11 (88 commits behind main) to 0.1.21. 0.1.23 is the
first tag carrying the vendored tool-cache action and the retired GARM
label vocabulary, so it is the single current target.

Input contracts were diffed across every reusable this repository calls
for the whole 0.1.16..0.1.23 range: no input was removed and none became
required, so this is a pin move with no caller change.

Signed-off-by: rldyourmnd <danil@nddev.it.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@rldyourmnd

Copy link
Copy Markdown
Contributor Author

Closing unmerged: 0.1.23 cannot be a convergence target.

ci-feedback.yml and private-security-bundle-free.yml reference their own vendored composite actions with ./actions/..., which in a called workflow resolves against the caller's workspace rather than ci-workflows. Every cross-repository caller fails at job setup. Two live failures confirmed it: setup-systems run 35541466805 and github-device-sync run 35541640707.

Fixed at source in NDDev-OpenNetwork/ci-workflows#122. This repository will be pointed at the release carrying that fix instead.

@rldyourmnd rldyourmnd closed this Sep 20, 2026
@rldyourmnd
rldyourmnd deleted the chore/ci-workflows-0.1.23 branch September 20, 2026 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant