ci: backport sync-agent-instructions.yml and dependabot.yml to main - #627
Open
tvna wants to merge 1 commit into
Open
ci: backport sync-agent-instructions.yml and dependabot.yml to main#627tvna wants to merge 1 commit into
tvna wants to merge 1 commit into
Conversation
Bring main's copies to parity with develop's current content ahead of the GitHub default-branch switch to main. sync-agent-instructions.yml finishes #518, which retargeted the sync-claude-md/sync-apm-skills jobs at develop (explicit ref: develop checkout, base: develop) and added a sync-rulesets job, but only ever landed on develop's copy. GitHub Actions resolves schedule/default-ref workflow_dispatch triggers from the default branch's copy of the workflow file, so main's stale pre-#518 copy (base: main, no explicit ref) would otherwise run once main becomes the default branch. dependabot.yml drops the stale pre-bun-migration npm ecosystem entry (package-lock.json no longer exists, #353) and switches the Python ecosystem from pip to uv, matching develop. GitHub reads dependabot config from the default branch, so this would otherwise regress the moment main becomes default. release.yml needs no change: main's copy already has the fixed daily cadence, --no-ci, and develop-derived commit prep from #521-#527. Refs #626, #518
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
Owner
Author
|
The Vercel deployment check is failing, but it's pre-existing and unrelated to this PR: this PR only touches Generated by Claude Code |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
main's copy of.github/workflows/sync-agent-instructions.ymlto parity withdevelop's (finishes CI: target sync-agent-instructions.yml PRs at develop instead of main #518: adds the missingsync-rulesetsjob, explicitref: developcheckout,base: developon the other two jobs).main's copy of.github/dependabot.ymlto parity withdevelop's (drops the stale pre-bun-migrationnpmecosystem entry, switches Python frompiptouv, matching Migrate JavaScript package management from npm to bun #353).release.yml—main's copy is already correct (daily cadence,--no-ci, develop-derived commit prep from ci(release): derive version bump from develop merge titles #521-fix(release): unblock version-bump CI (ruleset bypass docs + --no-ci) #527).Why
Root-cause analysis of a release-process bug found this repo's actual GitHub default branch is
develop, and GitHub Actions resolvesscheduletriggers (and default-refworkflow_dispatchruns) from the workflow YAML on the default branch.develop's stalerelease.ymlhas been running its weekly schedule and silently no-op'ing (green success, nothing published) since the release-fix chain (#521/#523/#525/#526/#527) landed onmainonly.The owner has decided to switch GitHub's default branch from
developtomain. Before that flip,sync-agent-instructions.ymlanddependabot.ymlneed to be at parity onmain, or the flip silently regresses them the same way it was silently breakingrelease.yml:sync-agent-instructions.yml's schedule/dispatch would start runningmain's pre-CI: target sync-agent-instructions.yml PRs at develop instead of main #518 copy (2 jobs, no explicit ref, PRs targetingbase: maininstead ofdevelop).dependabot.ymlis read from the default branch by GitHub directly;main's stale copy would start managing a nonexistentnpmecosystem.This PR closes that gap so the default-branch switch (tracked as a follow-up owner action — no API/MCP tool exists to change it programmatically) is safe.
Verification
actionlint .github/workflows/sync-agent-instructions.yml— exit 0, no findings..github/dependabot.yml— parsed with PyYAML, confirmed all 3 ecosystems (github-actions,uv,devcontainers) andtarget-branch: develop.develop's current copies.tests/workflow/test_release_management.py, the only.github-content test on either branch), so none needed updating.Non-goals
apply-rulesets.yml,scripts/rulesets_apply.py,.github/rulesets/) —push/workflow_dispatch-triggered, not default-branch-coupled, fine staying ondeveloponly.Closes #626
Refs #518
Generated by Claude Code