From 29e9801142e8da7df93aada804332842b297a212 Mon Sep 17 00:00:00 2001 From: Kushuh Date: Wed, 17 Jun 2026 10:22:39 +0200 Subject: [PATCH] fix(actions): route renovate go mod tidy through the module proxy MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GOPROXY=direct made `go mod tidy` resolve every dependency from origin. That intermittently failed on vanity-import hosts (gonum.org reset the connection mid-fetch), aborting the tidy and leaving go.sum un-regenerated after a go.mod bump — so consumers shipped a go.mod/go.sum mismatch that broke generated-go (mockery: invalid package name ""). Use the CDN-backed proxy with a direct fallback, and set GOPRIVATE for our own a-novel / a-novel-kit modules so freshly tagged internal versions are fetched straight from GitHub without waiting for the proxy to index them. Co-Authored-By: Claude Opus 4.8 --- generic-actions/renovate/action.yaml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/generic-actions/renovate/action.yaml b/generic-actions/renovate/action.yaml index f058563..f1eb4e9 100644 --- a/generic-actions/renovate/action.yaml +++ b/generic-actions/renovate/action.yaml @@ -43,10 +43,19 @@ runs: RENOVATE_PR_HOURLY_LIMIT: 0 LOG_LEVEL: debug RENOVATE_SECRETS: '{"GITHUB_TOKEN": "${{ inputs.github_token }}"}' + # Fetch public deps through the CDN-backed module proxy (reliable, cached) and + # fall back to direct only when the proxy can't serve a version. Plain "direct" + # made `go mod tidy` resolve every dependency from origin, which intermittently + # failed on vanity-import hosts (e.g. gonum.org reset the connection mid-fetch), + # aborting the tidy and leaving go.sum un-regenerated after a go.mod bump. + # GOPRIVATE keeps our own a-novel / a-novel-kit modules off the proxy and sumdb, + # so freshly tagged internal versions are fetched straight from GitHub without + # waiting for proxy.golang.org to index them. RENOVATE_CUSTOM_ENV_VARIABLES: | { "GITHUB_TOKEN": "'{{ secrets.GITHUB_TOKEN }}'", - "GOPROXY": "direct" + "GOPROXY": "https://proxy.golang.org,direct", + "GOPRIVATE": "github.com/a-novel,github.com/a-novel-kit" } RENOVATE_ALLOW_SCRIPTS: true RENOVATE_ASSIGN_AUTOMERGE: true