Skip to content

ci: repin ci-workflows to v0.39.3 - #743

Merged
kyle-sexton merged 2 commits into
mainfrom
ci/repin-ci-workflows-v0.39.3
Oct 9, 2026
Merged

kyle-sexton merged 2 commits into
mainfrom
ci/repin-ci-workflows-v0.39.3

Conversation

@kyle-sexton

Copy link
Copy Markdown
Member

No related issue: fleet repin to ci-workflows v0.39.3 in the GitHub Actions conventions migration.

Summary

Moves this repository's repo-owned ci-workflows pins in .github/workflows/ from v0.39.0 (6ba73b9) to v0.39.3 (ab83b01273026ab5c23c6f3b40e946d97a863fa2).

Fix

  • Pin SHA and # v0.39.3 comment on 29 lines across five workflows (maintenance-sync-standards, pr-automerge-dependabot, pr-require-checks, pr-review, pr-review-security). No input or secret names change: every reusable workflow blob is byte-identical between v0.39.0 and v0.39.3.
  • Component sources under components/ are untouched; managed callers move through maintenance-repin-ci-workflows (chore(claude-lanes): re-pin callers to ci-workflows v0.39.1 #735 is its open PR, currently at v0.39.1, and also touches the three sync-family callers here).

Verification

Related

🤖 Generated with Claude Code

https://claude.ai/code/session_01T7GukBojtE99rLCPY7Cw3R

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T7GukBojtE99rLCPY7Cw3R
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-09T02:07:43.507592Z 2f4b4f7 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2f4b4f76fa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/maintenance-sync-standards.yml
@kyle-sexton
kyle-sexton merged commit 9d08402 into main Oct 9, 2026
20 of 22 checks passed
@kyle-sexton
kyle-sexton deleted the ci/repin-ci-workflows-v0.39.3 branch October 9, 2026 03:28
kyle-sexton added a commit that referenced this pull request Oct 17, 2026
Refs: melodic-software/ci-workflows#750

## Summary

Repins the Claude review lane callers from ci-workflows v0.42.1
(`4cfd14e`) to v0.42.2 (`a623e29085a3be885718cf9c0c0eca85bb53dd97`).
v0.42.2 includes ci-workflows#752, which sets
`CLAUDE_CODE_DISABLE_BACKGROUND_TASKS=1` in the `pr-review` and
`pr-review-security` reusables so review runs stop ending incomplete.

## Fix

- Pin SHA and `# v0.42.2` comment on the six `pr-review` /
`pr-review-security` callers: `.github/workflows/` (2) and the
`claude-lanes` and `claude-lanes-hosted` components (4).
- `components/runner-policy/policy.json`: two new contracts for the
v0.42.2 SHA, each a verbatim copy of its v0.42.1 entry. Between the tags
the two reusables change only the `anthropics/claude-code-action` pin
(v1.0.245 to v1.0.250) and the new env var on that step; no input,
secret, permission or `runs-on` routing changes.
- `runner-policy/README.md` review note and a `runner-policy.test.mjs`
verbatim-copy test for v0.42.2.
- Other ci-workflows pins (`maintenance-sync-standards`,
`check-managed-files`) stay at v0.42.1.

## Verification

- `npm run test:runner-policy` (303/303), `npm run lint:runner-policy`,
actionlint on the six callers, biome on `policy.json` and the test,
markdownlint on the README, and the lefthook pre-commit (editorconfig,
typos, markdownlint, gitleaks, biome): all pass.
- The v0.42.2 tag commit equals ci-workflows `main`.

## Related

- melodic-software/ci-workflows#750
- melodic-software/ci-workflows#752
- #743 (repin precedent)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant