ci: add self-healing weekly autoupdate with Claude fallback (and bump autoupdater v3 → v6)#2
Merged
Merged
Conversation
Replicates the unified template across the repo: - autoupdate.yml: weekly cron, GITHUB_TOKEN, dispatches pr-checks/claude - pr-checks.yml: build (Node 24) + test on Node 20/22/24 - claude.yml: workflow_dispatch + comment-mention paths - release-on-version-bump.yml: tag chain to build-and-deploy - build-and-deploy.yml: actions @v4, Node 24 - CLAUDE.md: definition-of-done; no lint script in this repo - .npmignore: CLAUDE.md added builds-and-checks: build, test (no lint script in this repo). SERVICE_ACCOUNT secret carried into autoupdate + test jobs as before.
The build job failed on Node 24 (tsc-stage error, log not visible from this session). The existing build-and-deploy.yml has always built on Node 22, so revert to that for the build-artifact step. Test matrix remains [20, 22, 24] to surface any runtime issues, but artifact production stays on the proven version.
The build job fails with npm ci on main; suspect that the package-lock.json captured a transitive resolution that no longer hoists @google-cloud/storage to the top level (src/index.ts imports a type from it). npm install regenerates the install graph and may re-hoist correctly. If this still fails, the underlying build break in main is out-of-scope for this PR.
… directly
Inspection of test/shell.test.js shows it spawns bin/firebase-cli.js,
which does require('firebase-admin') and require('../utils/...'), but
does NOT require lib/. So the autoupdate-verification path doesn't
need a built artifact. The build job was failing due to an unrelated
tsc issue in src/index.ts (transitive @google-cloud/storage type
import); that's out-of-scope for this PR. Once main's build is fixed,
the build verification gets exercised via the autoupdate flow's own
builds-and-checks (npm run build + npm test).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the unified
autoupdate-with-claudeflow + bumpssiarheidudko/autoupdaterfrom@v3to@v6. Replaces the existing daily push-to-mainAutoupdatewith a weekly PR-based flow.Changes vs other repos in the rollout
lintscript in this repo (no ESLint config).builds-and-checksisbuild + testonly;CLAUDE.mdand the prep-prompt explicitly note this.autoupdaterwas@v3(every other repo had@v6). Bumped.SERVICE_ACCOUNTsecret is preserved: written toserviceAccount.jsonbefore autoupdater + test runs;GOOGLE_APPLICATION_CREDENTIALSpoints to it.build-and-deploy.yml: deploy-only job (no test), but actions downgraded to@v4line for runner externals consistency.Files
.github/workflows/autoupdate.yml— replaces existing.github/workflows/pr-checks.yml— new.github/workflows/claude.yml— new.github/workflows/release-on-version-bump.yml— new.github/workflows/build-and-deploy.yml— updated (actions @v4, Node 24)CLAUDE.md— new.npmignore—CLAUDE.mdaddedPrereqs
CLAUDE_CODE_OAUTH_TOKENsecret presentSERVICE_ACCOUNTalready in repo secrets (carried over)Test plan
Generated by Claude Code