Fix Strix CI lock for Python 3.13#210
Conversation
OpenCode Review Overview
Pull request overviewOpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose. FindingsNo blocking findings. Summary
Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates. Change Flow DAGflowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: opencode-review.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: opencode-review.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["Changed file: requirements-strix-ci-hashes.txt"]
S2 --> I2["repository behavior"]
I2 --> R2["Review risk: Changed file: requirements-strix-ci-hashes.txt"]
R2 --> V2["required checks"]
Evidence --> S3["CI script (2 files)"]
S3 --> I3["review and security gate shell path"]
I3 --> R3["Review risk: CI script (2 files)"]
R3 --> V3["bash -n plus Strix self-test"]
|
|
Central Strix required workflow is currently failing before scan execution because main pins Operational blocker: the same broken central Strix workflow is required on this repo, so this PR cannot make its own required checks pass until the lockfile fix reaches Impact: |
![opencode-agent[bot]](https://avatars.githubusercontent.com/in/1549082?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull request overview
OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.
Findings
No blocking findings.
Summary
- Result: APPROVE
- Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
- Deterministic evidence: current-head changed-file evidence (.github/workflows/opencode-review.yml, requirements-strix-ci-hashes.txt, scripts/ci/collect_failed_check_evidence.sh, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
- Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=failed.
- Head SHA:
e3e2cdd1851e3ba7d49ef4f4dcbc59fdb31d7102 - Workflow run: 28437823491
- Workflow attempt: 1
Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.
Change Flow DAG
flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: opencode-review.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: opencode-review.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["Changed file: requirements-strix-ci-hashes.txt"]
S2 --> I2["repository behavior"]
I2 --> R2["Review risk: Changed file: requirements-strix-ci-hashes.txt"]
R2 --> V2["required checks"]
Evidence --> S3["CI script (2 files)"]
S3 --> I3["review and security gate shell path"]
I3 --> R3["Review risk: CI script (2 files)"]
R3 --> V3["bash -n plus Strix self-test"]
There was a problem hiding this comment.
Pull request overview
OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.
Findings
No blocking findings.
Summary
- Result: APPROVE
- Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
- Deterministic evidence: current-head changed-file evidence (.github/workflows/opencode-review.yml, requirements-strix-ci-hashes.txt, scripts/ci/collect_failed_check_evidence.sh, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
- Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=failed.
- Head SHA:
e3e2cdd1851e3ba7d49ef4f4dcbc59fdb31d7102 - Workflow run: 28439168861
- Workflow attempt: 1
Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.
Change Flow DAG
flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: opencode-review.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: opencode-review.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["Changed file: requirements-strix-ci-hashes.txt"]
S2 --> I2["repository behavior"]
I2 --> R2["Review risk: Changed file: requirements-strix-ci-hashes.txt"]
R2 --> V2["required checks"]
Evidence --> S3["CI script (2 files)"]
S3 --> I3["review and security gate shell path"]
I3 --> R3["Review risk: CI script (2 files)"]
R3 --> V3["bash -n plus Strix self-test"]
1 participant
Fixes the central Strix required workflow dependency lock for the Python 3.13 runner.
The current lock was generated for Python 3.14 and pins protobuf 7.35.1, which conflicts on the actual Python 3.13 Strix runner with google-api-core/googleapis-common-protos constraints (protobuf <7.0.0). This caused xtrmLLMBatchPython PR #76 Strix to fail before scan evidence could run.
Validation:
equirements-strix-ci-hashes.txt with uv pip compile --generate-hashes --python-version 3.13 --python-platform x86_64-manylinux_2_28.