Repository navigation
Pin current 19 shared sources before landing 20-only addon ports (Q870) #279
Description
Objective
Keep current Odoo 19 tenant builds reproducible while shared repositories move to 20 under Q870 (parent #277). Current tenant workspace manifests and artifact source inputs select shared addons and disable_odoo_online from main. Landing a 20-only manifest/access-policy port there would break the next 19 build.
Finish Line
Small source PRs pin the three current 19 consumers (CM website, OPW and CM) to verified exact 19-compatible shared-addon and disable_odoo_online commits in their canonical workspace/artifact inputs. Actual consumer resolution/build checks prove those 19 builds remain reproducible. Subsequent per-tenant 20 conversions explicitly advance the pins with their 20 image. No deployment or live data change occurs.
Current Status
State: Done. All three current Odoo 19 consumers have landed exact source pins with actual consumer build proofs: website #217 at 8cde73004151e12e309ad72b09e2f5e86e5b937a, CM #254 at e26cf008 (full landing in the linked PR), and OPW #322 at 4f6beac62630bfd5117beb0b51d43dc3557a64bd.
OPW exact reviewed head 1ad9d52a3bdc1e174cf6c628fefd5c0f86bcbba2 passed all nine source checks, including 380 addon tests with zero failures and the normal schema-2 production artifact build. Its downloaded artifact pins shared addons 5f25b46, disable_odoo_online 30c04a5 and devkit bd006d0, with no duplicate source or floating addon selector. Build 40306274158 produced image sha256:7c883c26ac7ca23cb286805f07c3648f1f82a24be1605fa6dac675a24d9c82aa. Required baseline refresh preserved adopted #315. Claim 6413287855 was released and read back in comment 6413981425.
The cross-repository landing reconciliation requested owning-agent status review; this review confirms the complete three-tenant source finish line. Native 20 addon ports remain blocked separately by image qualification #158; tenant conversion children own advancing pins to 20. No production data, live OPW 18 or Client release changed. Inspection: not run under direction#98 comment 6399734189.
Removed: duplicated OPW shared-source selections in build and normalization paths. Net lines: OPW #322 +31; prior website and CM slices +15 and +20.
Scope
Shared source pins only. Preserve each tenant's current source content and accepted runtime until its separate 20 conversion/release. Do not freeze unrelated dependencies or revive Launchplane-owned build inputs. Keep at most two lead PRs open, complete each handoff before the next.
Validation
Supported source resolution and tenant consumer-build checks on exact commits. Verify artifact provenance resolves to the pins. Client test notes explain there is nothing to test if source content is unchanged. Current-head CI, outside-provider review and the train remain required; inspection may be NOT RUN under direction#98 comment6399734189.
Relationships
Child of #277. Blocks disable_odoo_online#63 and odoo-shared-addons#83. Related #248. Tenant conversion children own advancing these pins to 20. No live OPW 18 modification, production data writes or outbound-connected copies.
Activity
shiny-code-app commentedon Oct 26, 2026
Claimed by ODOO20LEAD-1025
Session: 01a17537-b01c-7721-89fb-60509a049441
Branch: work/odoo19-source-pins-1025
Claimed at: 2026-10-25T21:32:15-04:00
Next action: Pin existing 19 shared-source inputs in each tenant; prove source resolution/build; retain branches unopened until preceding image slices land.
Admission: milestone; #277
Work record
shiny-code-app commentedon Oct 26, 2026
Waiting for merge train landing of website source-pin PR217. This ends when Website PR217 is confirmed merged, freeing a lead PR slot for the already prepared CM source-pin branch. This is one delivery event;279 stays open until all three tenant pins and artifact proofs land..
shiny-code-app commentedon Oct 26, 2026
Nothing here is waiting on a person or event.
shiny-code-app commentedon Oct 26, 2026
Waiting for merge train landing of CM source-pin PR254. This ends when CM PR254 is confirmed merged, completing the second qualified tenant delivery. The lead then rechecks OPW repository capacity and its retained source-pin branch;279 closes only after all three qualified pin deliveries land..
shiny-code-app commentedon Oct 26, 2026
Released claim 6406262162
Qualified source deliveries are handed to lead observation; no source edits remain in the retained branches. Website https://github.com/cbusillo/odoo-tenant-cm-website/pull/217 merged through the train at8cde73004151e12e309ad72b09e2f5e86e5b937a. Exact source020e66a024dbf0b7881bac96abc3fce842cb6896 has passing current-head CI, weighed Anthropic review and downloaded production artifact proof with both intended addon pins, no duplicate source or floating selector. Website primary checkout is clean and fast-forwarded to that merge. Its clean published task worktree was deliberately kept by the retirement helper because this active claim names the branch; retire only after this release is confirmed and no live user is found.
CM https://github.com/cbusillo/odoo-tenant-cm/pull/254 at3aed3731b8051038746e9c92c99944837d6032ef has passing current-head CI,191 native addon tests with zero failures/errors, weighed Anthropic review and exact downloaded artifact provenance. Checked Ready is posted; the structured wait is its train landing. Retain its clean pushed worktree /Volumes/Developer-Artifacts/worktrees/odoo-tenant-cm/odoo19-source-pins-1025 until that event. This release does not declare279 complete.
OPW source is clean/pushed at8f60831 on work/odoo19-source-pins-1025, retained external worktree /Volumes/Developer-Artifacts/worktrees/odoo-tenant-opw/odoo19-source-pins-1025. All shared consumers include ordinary CI, addon tests and both dependency-normalization paths, preserving trusted regeneration boundaries. Full35 normalization/migration-neutralization tests, actionlint and actual resolver execution pass; Anthropic review found no blocking defect. Hosted artifact and addon CI remain required once opened. Keep unopened while repository pacing is near cap: last inventory9 nondraft source/dependency PRs, including7 task PRs and an additional parked draft. The oldest checked feature remains under its Client acceptance/qualified-preview wait; do not bypass it or take another source owner's work. Recheck capacity and current ownership before opening this retained source branch. The devkit task worktree at142ce23 is a clean pinned proof input, not new devkit implementation; preserve until279 custody is reconciled.
Next actor: ODOO20LEAD-1025 under the explicit parent lead claim observes CM's train event, clears only that actual wait, reconciles landing and rechecks OPW capacity. All three qualified pin deliveries must land before279 closes or its native blocks on the20-only addon ports are cleared. Current lead source-PR cap is two. No safe-exit or claim-coverage all-clear is asserted; the separate claim-checker native read-loop reproduction remains tracked by its owner.
Removed: duplicate website shared selector and floating shared-source checkouts. Net lines: website+15 landed; CM+20 handed to train; OPW+30 retained unopened. Local editable checkout semantics are explicitly documented; no new policy gate, helper or command. Inspection NOT RUN under direction98comment6399734189. Local HTTPS artifact check was unavailable and existing hosted Build supplied the actual website/CM proofs. No production data, liveOPW18, grant, subscription or promotion action.
Retained PR handoff: https://github.com/cbusillo/odoo-tenant-cm-website/pull/217, https://github.com/cbusillo/odoo-tenant-cm/pull/254
shiny-code-app commentedon Oct 26, 2026
Waiting for OPW repository PR capacity under the brief cap. This ends when Fresh inventory excluding train batches and intentionally parked drafts has room under the existing brief cap for the prepared OPW source-pin PR, after existing owned landings or authorized blocker repair. Recheck ownership and retain all Client waits before opening..
shiny-code-app commentedon Oct 26, 2026
Read-only capacity diagnosis for the retained OPW source-pin slice:311's failed Build40137873591 stops at the private devkit checkout with "Input required and not supplied: token", before executing dependency installation or the artifact build. This is not evidence of GraphQL3.3 incompatibility. The other failing owner-review check is separate and has no Actions log; its actual reason remains to be read through the supported Client-feedback route before acting.
The build references the existing Actions source-read secret. GitHub documents that Dependabot-triggered runs use Dependabot secrets rather than Actions secrets, and re-running as another actor retains those restrictions. No token value was read, copied, granted or moved; no rerun, identity substitution or workflow bypass was attempted. The repository's existing trusted normalization/publish boundary must be preserved when the next authorized OPW landing agent handles this legacy update. No compatibility or current artifact qualification is claimed from these early passing checks.
Existing315's manifest-only devkit-pin adoption remains current-head nonfailing with a recorded qualified preview, pending its normal review/Ready flow. Fresh repository count remains9 nondraft source/dependency PRs plus parked309. Neither315 nor311 was adopted, edited or handed off.239's Client/qualified-preview hold remains.279's capacity wait and all native20-port prerequisites remain in force; this diagnosis does not make room or authorize a new source PR by itself.
Removed: none in read-only diagnosis. Net lines:0 repository lines. Current lead priority remains actual174 train landing, then the prepared Community20 publication158.
shiny-code-app commentedon Oct 26, 2026
Existing OPW315 is engineering-qualified at2620d52e7418b60661158f34fabcf6903a607037 and checked Ready through the normal helper: https://github.com/cbusillo/odoo-tenant-opw/pull/315#issuecomment-6412049928. Full own outside review is weighed on that PR; all10 current-head checks settled nonfailing,380 addon tests passed and the downloaded exact schema2 artifact agrees with its devkit ref. Conditional source/runtime concerns were weighed against the approved Q709 capability and bounded current settings evidence; this makes no actual restore, Client acceptance or production claim.
This is help landing an existing update under parent277 coordination, with no source edit/new worktree/new child claim/new PR at the cap. Image178 is the other observed own PR, so the two-PR limit is preserved. Wait for315's actual train landing, then recount ordinary open OPW PRs excluding train batches/parked draft309.279's source-pin branch8f60831 remains unopened while capacity is full. Before opening it, integrate actual newly landed main through the required-baseline path so its older manifest cannot revert315's devkit/runtime refs. Do not update merely because a branch is behind; this refresh is required to preserve the newly accepted pin contract.
Removed: none in this review/handoff. Net lines:0 (+2/-2) for existing315. No source279 implementation changed, no additional cap exemption asserted, no credential/lane/data action.
shiny-code-app commentedon Oct 26, 2026
Existing OPW315 landed through train321 atafd2a20d48d06a5c05568771100e7326b280f4c0. Actual candidate8c5844fb46a629ae6b2ad3fd39024c5b4ec95581 settled all15 checks nonfailing. Landing reconciliation completed, and the clean main tenant checkout was fast-forwarded to the exact actual landing. No task worktree was created or retired for this metadata-only adoption; retained source279 worktree8f60831 stays in place.
Fresh capacity read after landing:8 ordinary nondraft PRs remain (311,308,284,281,273,272,246,239), excluding parked309 and train batches. That is still the brief's cap, so279 remains unopened and waiting; no exception is asserted. The adopted PR advanced both devkit/runtime refs tobd006d0 with net0 source lines. Its source artifact/380 tests and checked Ready are on315; actual train CI passed independently. Neither source nor train success proves an OPW data restore, sanitized-copy readiness, staff acceptance or production result.
Next: observe image178's native20 checks/train/publication while the existing OPW queue settles. Before279 opens, recheck capacity/ownership, take its source claim and integrate actual main through the supported required-baseline route so the retained branch cannot revert315. Keep the originally reviewed shared/disable pins and repeat matching proof after the refreshed tree is known. No live18/data/access or credential action.
Removed: existing315 from the open queue. Net lines:0 (+2/-2).
shiny-code-app commentedon Oct 26, 2026
The separate311 owner-review failure is now diagnosed from its current exact-head check output.
launchplane/owner-reviewat e80dedd09d9bdb95e78f576b9a75946e253f0cf0 says Client test notes are missing. It is not evidence of a Client rejecting the update. The current PR body has no Client/Owner test-notes section. That is an engineering metadata omission, separate from the already diagnosed secretless Dependabot/private-checkout Build failure.Next admitted landing/repair agent should review the actual dependency compatibility, supply accurate Client test notes, and qualify a supported trusted build path before Ready. Do not ask Mike to repair CI or treat missing notes as his acceptance wait. Do not copy Actions secrets into Dependabot, grant access, change identity or rerun the same actor to bypass the missing-token boundary. No PR body/source/rerun/setting was changed during this diagnosis; this does not adopt311 or assert package compatibility.
Removed: one unknown cause from the queue diagnosis. Net lines:0 tracked source.
shiny-code-app commentedon Oct 26, 2026
Nothing here is waiting on a person or event.
shiny-code-app commentedon Oct 26, 2026
Claimed by ODOO20LEAD-1025
Session: 01a17537-b01c-7721-89fb-60509a049441
Branch: work/odoo19-source-pins-1025
Claimed at: 2026-10-26T06:00:53-04:00
Next action: Resume retained reviewed OPW8f60831 source pins after resolved queue capacity; required-refresh actualOPWmainafd2a20 preserving315 devkit/runtimerefs, revalidate canonical workflow and both normalization source selections, outside-review exact refreshed diff, open one OPWPR then current-head addon/artifact proof and Ready/train. No runtime data or credentials.
Admission: milestone; #277
Work record
shiny-code-app commentedon Oct 26, 2026
Released claim 6413287855
OPW source preservation is source-finished, clean/pushed at1ad9d52a3bdc1e174cf6c628fefd5c0f86bcbba2 in retained PR322/work/odoo19-source-pins-1025. Required actual315baselineafd2a20 is integrated; bd006devkit/runtime refs preserved. Final Anthropic review none/weighed6413600135. Full35localcontracttests,6actualresolverexecutions, actionlint/diff pass. Hosted Build40306274158 and full Addon tests40306274222 passed380tests; all9current-head checks settled nonfailing. CheckedReady6413860144 posted. Downloadedschema2sourceartifact9abf6d85... binds exacthead/shared5f25b46/disable30c04/OCA89e649/devkitbd006 with no floatingselectors, image7c883c26.... Actual train landing is still the finish event;279 stays open until that event and then root277reconciles it. Website217/CM254 alreadydelivered/qualified.
Root277 retains normal CI/train/main observation of322 and image179, plus normal Community20publication40299570507. A read-only OPWcontroller observation at10:36:54UTC reported resume_reconciliation/currentselect-next-actioncheckpoint, semantic progress10:36:49. Preserve that original operation; no new mutating driver, handmerge, label/identity retry or invented outcome. The controller owns continuation. Resume source279 ownership only if actual source changes are needed, preserving all Client/lane holds.
Source179516a371 remains independently source-finished/reviewed with its own current-head native checks pending, source170 claim released6413249906. Source158's sourceclaim released6412928514; its normal main20runtime publication has produced qualified digest/evidence artifacts, devtools pair and aliases/nativequalification stillneeded. Existingformalcoverageconditional2826retained, noallclear.
Preserve this externalOPWworktree and devkit142proofcustody until actual322landing/guardedcleanup. No third own PR. Source279 net+31(+46/-15): remove floating/duplicate source selection, disablebranchselector andartifact-inputaddon-CIskip. No runtime/data/live18/access/credential/subscription/manualpublisherchange. InspectionNOTRUNapprovedexception.
Retained PR handoff: https://github.com/cbusillo/odoo-tenant-opw/pull/322