Skip to content

fix(ungoliant): bump curl-timeout default from 300s to 900s - #571

Merged
bedatty merged 3 commits into
developfrom
fix/ungoliant-release-diff-timeout
Jul 14, 2026
Merged

bedatty merged 3 commits into
developfrom
fix/ungoliant-release-diff-timeout

Conversation

@bedatty

@bedatty bedatty commented Jul 14, 2026

Copy link
Copy Markdown
Contributor
Lerian

GitHub Actions Shared Workflows


Description

Affects: src/validate/ungoliant-release-diff (composite action used by go-release.yml's ungoliant_release_diff job).

Bumps the curl-timeout input's default from 300s to 900s. midaz's release-diff timed out at exactly 300s (run) — its diff is large/complex enough that inference + schema validation on the controller side exceeds the previous default.

This must move in lockstep with two companion changes in lerian-internal-gitops (ungoliant-controller's NEMOCLAW_TIMEOUT_SECONDS env var and its ingress proxy-read-timeout/proxy-send-timeout annotations, both bumped to 900/960s) — a client-side timeout shorter than the controller's own budget fails the CI job even when the controller would have eventually succeeded.

No caller repo sets curl-timeout explicitly (confirmed via go-release.yml, which doesn't pass this input through), so every consumer picks up the new default automatically once this releases and the @v1 tag moves.

Type of Change

  • fix: Bug fix in a workflow (incorrect behavior, broken step, wrong condition)

Breaking Changes

None — only a default value change; any caller can still override it explicitly.

Testing

  • YAML syntax validated locally (python3 -c "import yaml; yaml.safe_load(...)")
  • Not triggered on a caller repo in this PR — the failure this fixes is already reproduced in production (linked run above); recommend re-running midaz's release-diff after this merges and releases
  • Verified all existing inputs still work with default values (only the default value itself changed, no logic touched)
  • Confirmed no secrets or tokens are printed in logs (no logging changes)
  • Checked that unrelated workflows are not affected (change is scoped to one composite action's single input default + its README)

Caller repo / workflow run: https://github.com/LerianStudio/midaz/actions/runs/29279206313 (the failure this fixes)

Related Issues

Closes #

midaz's release-diff timed out at exactly 300s
(github.com/LerianStudio/midaz/actions/runs/29279206313) — its diff is
large/complex enough that inference + schema validation exceeds the
previous default. Bumped alongside ungoliant-controller's
NEMOCLAW_TIMEOUT_SECONDS and its ingress proxy timeouts (both moved to
900/960s in lerian-internal-gitops), which this value must stay in
lockstep with — a client-side timeout shorter than the controller's own
budget fails the CI job even when the controller would have eventually
succeeded.
@bedatty
bedatty requested a review from a team as a code owner July 14, 2026 01:58
@lerian-studio

Copy link
Copy Markdown
Contributor

⚠️ Invalid Source Branch

Pull requests to main can only come from:

  • develop
  • hotfix/*

Your source branch: fix/ungoliant-release-diff-timeout

Please change the base branch or create a PR from an allowed branch.

@coderabbitai

coderabbitai Bot commented Jul 14, 2026 •

Copy link
Copy Markdown

Review Change Stack

Walkthrough

The Ungoliant release-diff action increases the curl-timeout default from 300 to 900 seconds, updates its description, and documents the new default in the README.

Changes

Ungoliant webhook timeout

Layer / File(s) Summary
Timeout input contract and documentation
src/validate/ungoliant-release-diff/action.yml, src/validate/ungoliant-release-diff/README.md
The default curl-timeout increases from 300 to 900 seconds, with updated action metadata and README documentation.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title is concise and accurately states the main change: increasing the curl-timeout default for ungoliant.
Description check ✅ Passed The description follows the template closely, covering scope, change type, breaking changes, testing, and related issues.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/ungoliant-release-diff-timeout

Comment @coderabbitai help to get the list of available commands.

@lerian-studio

lerian-studio commented Jul 14, 2026 •

Copy link
Copy Markdown
Contributor

🔍 PR Validation Summary

✅ PR Mergeable — no blocking failures

Check Status Blocking
Source Branch ✅ success yes
PR Title ✅ success yes
PR Description ✅ success yes
PR Size ✅ success no
Auto Labels ✅ success no
PR Metadata ✅ success no

🔍 View workflow run

@lerian-studio

lerian-studio commented Jul 14, 2026 •

Copy link
Copy Markdown
Contributor

🔍 Lint Analysis

Check Files Scanned Status
YAML Lint 1 file(s) ✅ success
Action Lint no changes ⏭️ skipped
Pinned Actions 1 file(s) ✅ success
Markdown Link Check 1 file(s) ✅ success
Spelling Check 2 file(s) ✅ success
Shell Check 1 file(s) ✅ success
README Check 1 file(s) ✅ success
Composite Schema 1 file(s) ✅ success
Deployment Matrix no changes ⏭️ skipped

🔍 View full scan logs

@bedatty
bedatty changed the base branch from main to develop July 14, 2026 01:59
@lerian-studio lerian-studio added size/XS PR changes < 50 lines documentation Improvements or additions to documentation validate Changes to PR validation composite actions (src/validate/) composite Changes to any composite action manifest (src/**/*.yml) labels Jul 14, 2026
@lerian-studio

lerian-studio commented Jul 14, 2026 •

Copy link
Copy Markdown
Contributor

🛡️ CodeQL Analysis Results

Languages analyzed: actions

✅ No security issues found.


🔍 View full scan logs | 🛡️ Security tab

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

CodeRabbit couldn't request changes on this pull request because it doesn't have sufficient GitHub permissions.

Please grant CodeRabbit Pull requests: Read and write permission and re-run the review.

👉 Steps to fix this

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/validate/ungoliant-release-diff/action.yml`:
- Around line 50-53: The curl-timeout default in the action metadata changes the
caller-visible contract from 300 to 900 seconds. Either restore the default to
300, or update both release workflow callers to pass an explicit timeout so the
new 900-second behavior is intentional and documented at each call site.

In `@src/validate/ungoliant-release-diff/README.md`:
- Line 37: Update the README documentation for the curl-timeout input to state
that its value must remain synchronized with the controller and ingress proxy
timeouts, while preserving the documented 900-second default and keeping usage
and behavior notes consistent.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 58cc7bb4-d28a-4cb1-a407-9534f4ef90a1

📥 Commits

Reviewing files that changed from the base of the PR and between 65168e2 and a4298e1.

📒 Files selected for processing (2)
  • src/validate/ungoliant-release-diff/README.md
  • src/validate/ungoliant-release-diff/action.yml

Comment thread src/validate/ungoliant-release-diff/action.yml
Comment thread src/validate/ungoliant-release-diff/README.md Outdated
action.yml's own input description already states this must stay
aligned with ungoliant-controller's NEMOCLAW_TIMEOUT_SECONDS and its
ingress proxy timeouts, but the README table only showed the bare
number — a README-only reader could plausibly bump curl-timeout alone
without knowing the other two must move with it.

Addresses CodeRabbit review comment on PR #571.
@bedatty
bedatty changed the base branch from develop to main July 14, 2026 02:10
@bedatty
bedatty changed the base branch from main to develop July 14, 2026 02:13
@bedatty
bedatty merged commit 8219f81 into develop Jul 14, 2026
2 checks passed
@github-actions
github-actions Bot deleted the fix/ungoliant-release-diff-timeout branch July 14, 2026 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

composite Changes to any composite action manifest (src/**/*.yml) documentation Improvements or additions to documentation size/XS PR changes < 50 lines validate Changes to PR validation composite actions (src/validate/)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants