Skip to content

chore: harden sync workflow — pin OS, add timeout, npm ci#15

Merged
nbrieussel merged 2 commits intomainfrom
chore/workflow-hardening-and-upgrade
Apr 14, 2026
Merged

chore: harden sync workflow — pin OS, add timeout, npm ci#15
nbrieussel merged 2 commits intomainfrom
chore/workflow-hardening-and-upgrade

Conversation

@nbrieussel
Copy link
Copy Markdown

@nbrieussel nbrieussel commented Apr 14, 2026

Closes #4

Changes

  • ubuntu-latestubuntu-24.04 (reproducible runner image)
  • timeout-minutes: 30 (prevent runaway jobs)
  • npm installnpm ci (locked deps, deterministic)
  • CLAUDE.md: document that 2.1.19 is NOT safe (null.info crash confirmed)

Notes

Dry-run checklist

  • Triggered: gh workflow run safe-settings-sync.yml --repo IntegratedDynamic/admin --ref chore/workflow-hardening-and-upgrade -f nop=true
  • Output reviewed — no unexpected diffs
  • Known safe-settings bugs not triggered

@nbrieussel nbrieussel force-pushed the chore/workflow-hardening-and-upgrade branch from eed755d to db272fd Compare April 14, 2026 11:41
Nicolas Brieussel and others added 2 commits April 14, 2026 13:55
- ubuntu-latest → ubuntu-24.04 (reproducible runner image)
- timeout-minutes: 30 (prevent runaway jobs)
- npm install → npm ci (locked deps, faster, deterministic)

Closes #4.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Tested in PR #15 dry-run gate. createProbot() still initializes with a
null logger despite PR #949. Stay on 2.1.17 until a release boots cleanly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@nbrieussel nbrieussel force-pushed the chore/workflow-hardening-and-upgrade branch from 2a8d119 to 8820c31 Compare April 14, 2026 11:55
@nbrieussel nbrieussel changed the title chore: upgrade safe-settings to 2.1.19, harden workflow chore: harden sync workflow — pin OS, add timeout, npm ci Apr 14, 2026
@nbrieussel nbrieussel merged commit 240a9d9 into main Apr 14, 2026
1 check passed
@nbrieussel nbrieussel deleted the chore/workflow-hardening-and-upgrade branch April 14, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[P2] Harden sync workflow (npm ci, ubuntu pin, timeout)

1 participant