From 2117a554c920bafd08d34d86bfb28459a9be24d9 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Sat, 24 Oct 2026 03:05:11 -0400 Subject: [PATCH] feat(runner-policy): register the ci-workflows v0.65.5 pr-review-cli contract v0.65.5 (ci-workflows#878) changes only the hold step's cost-decision carry-over: a decision carries only from an unedited hold marker. Inputs, secrets and runner are unchanged, so the v0.65.4 contract copies forward. Co-Authored-By: Claude Sonnet 5.5 --- components/runner-policy/policy.json | 21 +++++++++++++++++++ .../runner-policy/runner-policy.test.mjs | 11 ++++++++++ 2 files changed, 32 insertions(+) diff --git a/components/runner-policy/policy.json b/components/runner-policy/policy.json index d1f4064e..f62a92b9 100644 --- a/components/runner-policy/policy.json +++ b/components/runner-policy/policy.json @@ -1011,6 +1011,27 @@ "CLAUDE_CODE_OAUTH_TOKEN": "${{ secrets.REVIEWS_CLAUDE_CODE_OAUTH_TOKEN }}" } }, + "melodic-software/ci-workflows/.github/workflows/pr-review-cli.yml@f1096608192c54cfb3dc252e36670e6f86700b9b": { + "routing": "hosted-only", + "fixedRunsOn": ["ubuntu-24.04"], + "allowedInputs": [ + "lane", + "publish", + "role", + "model-args", + "allowed-bot-sender-ids", + "allowed-author-ids", + "docs-only-paths", + "incremental-review", + "cli-version", + "hold-label", + "hold-paths" + ], + "allowedSecrets": { + "CLAUDE_API_KEY": "${{ secrets.REVIEWS_CLAUDE_API_KEY }}", + "CLAUDE_CODE_OAUTH_TOKEN": "${{ secrets.REVIEWS_CLAUDE_CODE_OAUTH_TOKEN }}" + } + }, "melodic-software/ci-workflows/.github/workflows/intake-label-needs-triage.yml@ab83b01273026ab5c23c6f3b40e946d97a863fa2": { "routing": "runner-input", "runnerInput": "runner", diff --git a/components/runner-policy/runner-policy.test.mjs b/components/runner-policy/runner-policy.test.mjs index 71401d58..ea134f80 100644 --- a/components/runner-policy/runner-policy.test.mjs +++ b/components/runner-policy/runner-policy.test.mjs @@ -10009,6 +10009,17 @@ test("the pr-review-cli contract at the v0.65.4 tag copies its v0.65.3 entry for assert.equal(Object.keys(contracts).filter((k) => k.endsWith(`@${sha}`)).length, 1); }); +// v0.65.5 changes only the hold step's cost-decision carry-over +// (ci-workflows#878): a decision carries only from an unedited hold marker. +// Inputs, secrets and runner are unchanged, so the contract copies forward. +test("the pr-review-cli contract at the v0.65.5 tag copies its v0.65.4 entry forward verbatim", () => { + const contracts = BASE_POLICY.approvedReusableWorkflowContracts; + const key = (sha) => `melodic-software/ci-workflows/.github/workflows/pr-review-cli.yml@${sha}`; + const sha = "f1096608192c54cfb3dc252e36670e6f86700b9b"; + assert.deepEqual(contracts[key(sha)], contracts[key("31b44f3ffc7f208fb281dd2b64decce67c53d316")]); + assert.equal(Object.keys(contracts).filter((k) => k.endsWith(`@${sha}`)).length, 1); +}); + // Convergence as a property, never as a hardcoded SHA. The daily // claude-lanes-repin lane rewrites these components on every ci-workflows // release, and a test naming one revision would go red by construction on