Skip to content

Modernize CI actions and validate Ubuntu 26 - #43

Merged
aaron-seq merged 4 commits into
mainfrom
codex/issue-32-ci-modernization
Oct 24, 2026
Merged

aaron-seq merged 4 commits into
mainfrom
codex/issue-32-ci-modernization

Conversation

@aaron-seq

@aaron-seq aaron-seq commented Oct 24, 2026 •

Copy link
Copy Markdown
Owner

CI still used Node-20-era action releases while ubuntu-latest was moving between Ubuntu versions. This change pins verified checkout 7.0.1, setup-node 7.1.0, upload-artifact 7.0.2 and Codecov 7.1.1 commits, selects Ubuntu 26.04 explicitly, disables retained checkout credentials, and makes cache scope explicit.

Closes #32 when integrated into main. Milestone 2 · private dashboard.

Prerequisite PR #42 merged into main at f0c71db. This PR now targets main. Application code, Node 20/22/24 matrix, triggers, read-only permissions, audit/coverage gates, artifact allowlist/retention and optional Codecov failure policy are preserved. CI is rerun against main before merge. UI draft #39 remains separate.

Local validation performed in this session on Windows / Node 22.18.0:

  • Lint, typecheck, coverage: 311 tests passed; branch coverage 84.44%.
  • Actual unpacked-extension browser suite: 20 passed, provider responses intercepted.
  • Workflow formatting/diff checks passed; npm audit reported no vulnerabilities.
  • Fresh read-only agent reviewed trust boundaries/final workflow diff and ran seven ancestry-guard cases. Parent inspected its evidence and independently ran the full suite. This is not independent human approval.

Action provenance, contracts, risk and acceptance map · checkpoint. Final hosted run, actual Codecov upload outcome and downloaded ZIP evidence will be recorded on #32 at the exact head; local Windows results do not establish Ubuntu compatibility.

Action majors and runner libraries are the principal compatibility risk. Rollback is a feature-branch revert of the workflow change. No new secret, OIDC/write permission, repository setting, runtime dependency, release or deployment. Fork/tokenless Codecov and failure-report upload paths require separate evidence.

@aaron-seq
aaron-seq changed the base branch from codex/issue-38-settings-failures to main October 24, 2026 09:12
@aaron-seq
aaron-seq marked this pull request as ready for review October 24, 2026 09:13
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-24T09:14:58.725490Z e46a4bb Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@aaron-seq
aaron-seq merged commit 6e82885 into main Oct 24, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Modernize CI actions and validate the Ubuntu hosted-runner transition

1 participant