Skip to content

ci: remove GitHub workflows (Solar build/deploy is manual)#26

Merged
ClodoCapeo merged 4 commits into
mainfrom
keeper/ci-vps-jit
Jun 20, 2026
Merged

ci: remove GitHub workflows (Solar build/deploy is manual)#26
ClodoCapeo merged 4 commits into
mainfrom
keeper/ci-vps-jit

Conversation

@ClodoCapeo

@ClodoCapeo ClodoCapeo commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

Solar est public -> le pool self-hosted refuse les repos publics (sécu). Décision porteur : pas de CI GitHub pour Solar, build/release manuel. Ce PR retire ci.yml + release.yml.

ClodoCapeo and others added 4 commits June 20, 2026 13:57
GitHub Actions org billing frozen -> self-hosted ephemeral pool on vps-ovh.
ci.yml on pull_request only (Solar has no VPS deploy), all jobs
[self-hosted, vps-ovh] + fork-guard, native trufflehog. Playwright keeps
--with-deps (runner is root, apt installs Chromium libs). release.yml
(tag-triggered bundle tarball) also moves to the pool.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Solar is a PUBLIC repo; the org-scoped self-hosted runner pool refuses
public repos (security: a fork PR would execute on the VPS). Per porteur
decision, Solar has NO GitHub CI — its bundle build/release is handled
manually, exceptionally, when a deploy is wanted.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@ClodoCapeo ClodoCapeo changed the title ci: route Solar to shared VPS runner pool ci: remove GitHub workflows (Solar build/deploy is manual) Jun 20, 2026
@ClodoCapeo
ClodoCapeo merged commit 7fd68de into main Jun 20, 2026
@ClodoCapeo
ClodoCapeo deleted the keeper/ci-vps-jit branch June 20, 2026 12:14
ClodoCapeo added a commit that referenced this pull request Jun 24, 2026
Re-create the release workflow removed in #26, which left the dist/
artefacts (consumed by Orion static-serve and Prism vendoring) without a
versioned source of truth — v0.2.10/v0.2.11 were hot-pushed to the VPS
manually, so a fresh box could not be rebuilt.

A semver tag push now builds dist/ and publishes solar-<tag>.tgz as a
Release asset. Rewired onto the self-hosted vps-ovh pool (org Actions
billing is frozen): no setup-node npm cache (runners are ephemeral),
and Playwright Chromium installed without --with-deps (JIT runner is
non-root/nosuid). The asset name and `tar -C dist .` layout are kept
byte-for-byte to stay compatible with Orion deploy.yml's anonymous curl.

Refs #26

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant