Skip to content

fix: main-guard head-repo check, pin python-ci tools, restore org reference, clean profile README#87

Merged
Jaro-c merged 10 commits into
mainfrom
chore/2026-07-audit-fixes
Jul 4, 2026
Merged

fix: main-guard head-repo check, pin python-ci tools, restore org reference, clean profile README#87
Jaro-c merged 10 commits into
mainfrom
chore/2026-07-audit-fixes

Conversation

@Jaro-c

@Jaro-c Jaro-c commented Jul 4, 2026

Copy link
Copy Markdown
Member

Summary

  • main-guard now also requires the PR's head repo to be the base repo — a fork branch merely named develop no longer passes the org-wide gate
  • python-ci pins ruff/pytest by default instead of floating to latest; the pip cache is only enabled when a dependency file exists
  • shell-ci gains optional test-command/apt-packages inputs (first consumer: apt's CI caller)
  • Directory-scoped reusables include working-directory in their concurrency group so two same-ref calls no longer cancel each other
  • .gitignore no longer names AI tooling (that belongs in each machine's global excludes, not a public repo)
  • FUNDING.yml moved to .github/FUNDING.yml, GitHub's documented location
  • Reverted every github.com/Glyndor-net/... reference back to github.com/Glyndor/...
  • Removed advertising-style content from the org profile README (clickable banner, repeated external nav/footer links, third-party badges, product-card screenshot grid) per a GitHub content-policy flag — replaced with a plain description and a factual repo table

Test plan

  • YAML-parsed every touched workflow file
  • Manual review of the diff for each reusable's backward compatibility (all new inputs default to prior behavior)

Jaro-c added 10 commits July 2, 2026 21:34
The project moved to the Glyndor-net GitHub org. Repoint every github.com org
path to Glyndor-net. The glyndor.net domain and the brand name are unchanged.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
The gate only checked the branch name, so a fork branch named develop
satisfied the org-wide required check. The head repository must now be
the base repository.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
ruff and pytest defaulted to latest, so a new upstream release changed
lint/test behaviour for every consumer at once with no per-repo buffer;
they now default to pinned versions bumped via releases. The pip cache
is only enabled when a dependency file exists — setup-python otherwise
fails outright on repos without one.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
Repositories whose CI is a shell test suite (first consumer: apt) can
now run it through the reusable instead of duplicating the logic
in-repo. Both inputs default to empty, so existing callers are
untouched.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
A caller invoking the same reusable twice in one run (two working
directories) landed both calls in one concurrency group and they
cancelled each other. The directory-scoped reusables now include
working-directory in the group key.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
Editor- and tool-specific ignores belong in each machine's global
excludes, not in the repository. FUNDING.yml moves to the .github
folder, the location GitHub documents for the sponsor button.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
The reusable catalogue omitted go-audit, and the release procedure is
maintainer material that does not belong on the landing page; a short
versioning note replaces it.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
Same revert as the other repos — we are staying on the Glyndor org.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
GitHub flagged the org profile for content resembling advertising —
links, promotional keywords, and repeated calls to action. Removes the
clickable hero banner, the marketing tagline, the repeated external
navigation (site link, Support link, footer link), and the screenshot
product-card grid with per-repo badges. Replaced with a plain
description of the org and a factual table of its repositories.

Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
@Jaro-c
Jaro-c merged commit bbe9cf3 into main Jul 4, 2026
@Jaro-c
Jaro-c deleted the chore/2026-07-audit-fixes branch July 4, 2026 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant