Skip to content

Re-pin dependabot-sync past the re-verification retry - #470

Merged
jeremy merged 1 commit into
mainfrom
ci/repin-06fd9cf3
Jul 27, 2026
Merged

Re-pin dependabot-sync past the re-verification retry#470
jeremy merged 1 commit into
mainfrom
ci/repin-06fd9cf3

Conversation

@jeremy

@jeremy jeremy commented Jul 27, 2026

Copy link
Copy Markdown
Member

basecamp/.github#13 adds a bounded poll for the PR API to catch up with the lease push (round-2 failure was a stale headRefOid read). This merge's own push is exercise round 3: expect the run to adopt repair PR #466, pass all invariants, arm auto-merge, approve held runs, and the repair merge to yield the terminal no-op.


Summary by cubic

Re-pinned the dependabot sync reusable workflow to the updated version in basecamp/.github that adds a bounded PR API poll. This prevents stale head reads during re-verification retries and improves reliability of Dependabot comment sync.

Written for commit a87182f. Summary will update on new commits.

Review in cubic

basecamp/.github#13: bounded poll for the PR API to catch up with the
lease push before the fail-closed head check judges. This merge's push
is exercise round 3.
Copilot AI review requested due to automatic review settings July 27, 2026 22:01
@github-actions

Copy link
Copy Markdown
Contributor

Sensitive Change Detection (shadow mode)

This PR modifies control-plane files:

  • .github/workflows/dependabot-sync-actions-comments.yml

Shadow mode — this check is informational only. When activated, changes to these paths will require approval from a maintainer.

@github-actions github-actions Bot added the github-actions Pull requests that update GitHub Actions label Jul 27, 2026
@github-actions github-actions Bot added the bug Something isn't working label Jul 27, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the pinned SHA for the reusable dependabot-sync-actions-comments workflow to a newer revision of basecamp/.github, intended to incorporate the bounded PR-API poll fix referenced in basecamp/.github#13 (avoiding stale headRefOid reads during re-verification retries).

Changes:

  • Re-pin the reusable workflow invocation to basecamp/.github at 06fd9cf3d96439d0c5a8ca6ccc2ed2dd23552d9e.

Tip

If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Re-trigger cubic

@jeremy
jeremy merged commit 9b4ac98 into main Jul 27, 2026
47 of 48 checks passed
@jeremy
jeremy deleted the ci/repin-06fd9cf3 branch July 27, 2026 22:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working github-actions Pull requests that update GitHub Actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants