Repository navigation
fix(ci): pin the TODO scanner to the release that serves large push diffs - #8287
Conversation
…iffs The pinned v20.1.7 guard capped push diffs at 16 MiB, so a Go dependency bump that regenerates the notice files (56 MB diff on 8204c35) turned main red. v20.1.17 carries devantler-tech/.github#879. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@codex review |
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Nice work! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
✅MegaLinter analysis: Success✅ Linters with no issuesactionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint See detailed reports in MegaLinter artifacts
|
Why
mainis red on8204c35: the TODO scanner's Create issues from TODOs step failed twice (run 42709749843, attempts 1 and 2), with the same502on the push compare. That rules out a transient error.The cause is the size of the diff. The vcluster bump regenerated the Go notice files, so the push diff is 56 MB. ksail pins the scanner at
.githubv20.1.7, and that version's guard capped diff bodies at 16 MiB. devantler-tech/.github#879 raised the cap, and it ships in v20.1.17. ksail's pin is 5 commits behind that fix.Any Go dependency bump that regenerates the notices will turn
mainred again until the pin moves.What
A one-line pin bump of
.github/workflows/todos.yaml:66b52462(v20.1.7) →1a0eb6f1(v20.1.17).The reusable workflow's
workflow_callinputs and secrets are byte-identical at both refs. The 11 commits in between are: the guard fix (#879), runner and supply-chain fixes (#871, #873), an auto-merge fix (#872), and dependency bumps.Validation
actionlintpasses locally.mainand onworkflow_dispatch. It is proven by the first push after merge, which also supersedes the red run.