Skip to content

ci: enroll version-bump-gate (catch required bumps at PR time) - #478

Merged
LukasWodka merged 3 commits into
developfrom
ci/enroll-version-bump-gate
Aug 10, 2026
Merged

ci: enroll version-bump-gate (catch required bumps at PR time)#478
LukasWodka merged 3 commits into
developfrom
ci/enroll-version-bump-gate

Conversation

@LukasWodka

@LukasWodka LukasWodka commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Summary

Enrolls the version-bump-gate (built in backend#1563 but never wired into any repo) so a develop PR that touches published files while the version is already released fails on the author's own diff — instead of surfacing days later as a refused prod hop (which just cost us cli + tracebloc-py-package on 2026-08-10).

The reusable is a rule-for-rule copy of the release train's version_preflight, so it can never disagree with the gate it front-runs.

  • soft-fail: false — a real gate (red on violation). Override a false positive with the skip-version-gate label (audited).
  • Scoped to pull_request → develop (staging/main promotion mirrors are handled by the train itself).

Part of a fleet enrollment across all 5 version-published repos (data-ingestors, tracebloc-py-package, cli, design-system, client).


Note

Low Risk
CI-only addition with read-only repo permissions; no runtime or application code changes.

Overview
Adds a develop pull-request workflow that calls the shared version-bump-gate reusable workflow so authors get a failing check when their diff touches published paths (cmd/*, internal/*, go.mod, go.sum, VERSION) but VERSION still points at an already-released version.

The job runs on open/sync/reopen/ready-for-review and on label changes so the documented skip-version-gate override can re-run the gate. soft-fail: false makes violations block the PR rather than warn only.

Reviewed by Cursor Bugbot for commit 89d11d3. Bugbot is set up for automated code reviews on this repo. Configure here.

Comment thread .github/workflows/version-bump-gate-caller.yml Outdated
aptracebloc
aptracebloc previously approved these changes Aug 10, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 89d11d3. Configure here.

Comment thread .github/workflows/version-bump-gate-caller.yml
@LukasWodka

Copy link
Copy Markdown
Contributor Author

Resolved the publish-path Bugbot thread: this caller copies publish-paths verbatim from release-train/repos.yml (parity — the gate must match the train's own version_preflight exactly; diverging would let the gate disagree with the train). The matcher is shell-case where * crosses /, so nested files are already covered. Any genuine publish-surface gap is a repos.yml/train question, tracked in https://github.com/tracebloc/backend/issues/1679.

@shujaatTracebloc shujaatTracebloc left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-approving after the earlier approval was dismissed by a later push. Re-verified at current head: single-file caller for tracebloc/.github/version-bump-gate.yml@main, correctly parameterized for this repo (version-file VERSION, publish cmd/* internal/* go.mod go.sum VERSION), permissions: contents: read, soft-fail: false, and the labeled/unlabeled trigger so the skip-version-gate override actually re-runs the gate. CI all-green, Bugbot clean, no unresolved threads. LGTM.

@LukasWodka
LukasWodka merged commit 6465562 into develop Aug 10, 2026
26 checks passed
@LukasWodka
LukasWodka deleted the ci/enroll-version-bump-gate branch August 10, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants