Skip to content

chore: Adding stale workflow#520

Merged
keelerm84 merged 2 commits intomainfrom
mk/sdk-2163/stale-workflows
Apr 14, 2026
Merged

chore: Adding stale workflow#520
keelerm84 merged 2 commits intomainfrom
mk/sdk-2163/stale-workflows

Conversation

@devin-ai-integration
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration bot commented Apr 10, 2026

Note

Low Risk
Low risk GitHub Actions change; it only adds a scheduled workflow that can auto-close stale issues/PRs, with limited issues/pull-requests write permissions.

Overview
Adds a new GitHub Actions workflow, stale.yml, that can be run manually or on a daily cron to close stale issues and pull requests.

The job delegates to launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@main and grants issues and pull-requests write permissions to perform the closures.

Reviewed by Cursor Bugbot for commit c16d606. Bugbot is set up for automated code reviews on this repo. Configure here.

@devin-ai-integration devin-ai-integration bot marked this pull request as ready for review April 10, 2026 20:30
@devin-ai-integration devin-ai-integration bot requested a review from a team as a code owner April 10, 2026 20:30
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit b7b3c5b. Configure here.


jobs:
sdk-close-stale:
uses: launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@main
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reusable workflow pinned to branch, not commit SHA

Medium Severity

The reusable workflow reference launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@main is pinned to a mutable branch instead of a commit SHA. Every other reference to launchdarkly/gh-actions in this repository is pinned to a specific commit hash (e.g., @2715574e..., @f1760cc5...). Pinning to @main means any change to that branch — including a compromise — would automatically execute in this repo's workflow with write permissions on issues and pull requests.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit b7b3c5b. Configure here.

kinyoklion added a commit that referenced this pull request Apr 14, 2026
## Summary

Updates the OpenSSL version installed via Chocolatey on Windows CI
runners from 3.6.1 to 3.6.2.

OpenSSL 3.6.1 has been removed from Chocolatey's community repository,
causing all 9 Windows CI jobs to fail with a 404 when attempting to
download `Win64OpenSSL-3_6_1.exe`. The latest available version is
3.6.2.

## Review & Testing Checklist for Human

- [x] Verify that all Windows CI jobs pass with the updated version
- [x] Confirm 3.6.2 is the desired target version (vs pinning to a
different release)

### Notes

This unblocks PR #520 and any other PRs currently blocked by Windows CI
failures.

Link to Devin session:
https://app.devin.ai/sessions/d009d787eaa84d67813ec46d4cd3c382
Requested by: @kinyoklion

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: CI-only change that updates a pinned dependency version on
Windows runners; potential impact is limited to Windows build/test
behavior if 3.6.2 differs from 3.6.1.
> 
> **Overview**
> Updates the Windows CI OpenSSL install step in
`.github/actions/install-openssl/action.yml` to pin Chocolatey OpenSSL
from `3.6.1` to `3.6.2`, unblocking Windows jobs that fail due to the
removed `3.6.1` package.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
ab815f5. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@keelerm84 keelerm84 merged commit 8503e7a into main Apr 14, 2026
45 checks passed
@keelerm84 keelerm84 deleted the mk/sdk-2163/stale-workflows branch April 14, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants