ci: bump cozyvalues-gen to v1.6.0#2784
Conversation
v1.6.0 adds the date-time string-format alias and the @example annotation. Both are additive, opt-in directives: charts that do not use them regenerate byte-identical schema, README and Go type output, so the pre-commit check stays green without touching any committed artifact. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
📝 WalkthroughWalkthroughThe pre-commit GitHub Actions workflow is updated to install ChangesBuild Tool Update
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Suggested labels
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Note Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported. |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/pre-commit.yml (1)
50-50: Confirm cozyvalues-gen v1.6.0 release is available; no security advisories noted
v1.6.0exists athttps://github.com/cozystack/cozyvalues-gen/releases/tag/v1.6.0, and thecozyvalues-gen-linux-amd64.tar.gzdownload works.- The
v1.6.0release notes only list changelog items and do not mention security advisories, CVEs, breaking changes, or deprecations.- The workflow still downloads/extracts the tarball without checksum validation; the release includes
cozyvalues-gen-checksums.txt(SHA256 hashes), which could be used to verify the downloaded artifact beforetarextraction.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/pre-commit.yml at line 50, The workflow step that currently streams the tarball directly into tar (the line using "curl -sSL https://github.com/cozystack/cozyvalues-gen/releases/download/v1.6.0/cozyvalues-gen-linux-amd64.tar.gz | tar -xzvf- -C /usr/local/bin/ cozyvalues-gen") must be updated to perform checksum verification: download both the tarball and the companion cozyvalues-gen-checksums.txt, verify the tarball's SHA256 against the checksums file (e.g., using sha256sum --check or equivalent), fail the job if verification fails, and only then extract the verified tarball to /usr/local/bin/; update the step name and error messages accordingly so failures are clear.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In @.github/workflows/pre-commit.yml:
- Line 50: The workflow step that currently streams the tarball directly into
tar (the line using "curl -sSL
https://github.com/cozystack/cozyvalues-gen/releases/download/v1.6.0/cozyvalues-gen-linux-amd64.tar.gz
| tar -xzvf- -C /usr/local/bin/ cozyvalues-gen") must be updated to perform
checksum verification: download both the tarball and the companion
cozyvalues-gen-checksums.txt, verify the tarball's SHA256 against the checksums
file (e.g., using sha256sum --check or equivalent), fail the job if verification
fails, and only then extract the verified tarball to /usr/local/bin/; update the
step name and error messages accordingly so failures are clear.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 6c599afe-6c4a-4b7e-b770-b491ea4e65aa
📒 Files selected for processing (1)
.github/workflows/pre-commit.yml
What this PR does
Bumps the
cozyvalues-genversion installed in the pre-commit CI workflow from v1.5.0 to v1.6.0.v1.6.0 adds two additive, opt-in annotation features: the
date-timestring-format alias (mirroring the existingdatealias) and the@exampleannotation, which accumulates JSON-encoded values into anexamplesarray on the matching schema property.Both are opt-in, so charts that do not use the new directives regenerate byte-identical
values.schema.json,README.mdand Go type output. Verified locally by regenerating all 31 packages (apps/*,extra/*,library/cozy-lib) with both v1.5.0 and v1.6.0 — every produced artifact is identical, so the pre-commit regeneration check stays green without touching any committed file.Release note
Summary by CodeRabbit