Skip to content

docs: record Renovate monitoring safeguard #243

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
edithatogo merged 1 commit into from
Aug 1, 2026
+6 −0
Merged

docs: record Renovate monitoring safeguard #243

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions conductor/tracks/renovate-codecov-verification_20260801/evidence.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,10 @@ Verified on 2026-08-01 against `edithatogo/authentext`.
that endpoint.
- A paginated search of all repository issues and pull requests found no item
authored by `renovate[bot]` or another Renovate bot identity.
- The merged `renovate-hosted-monitor.yml` workflow now checks daily and on
demand, publishes a JSON evidence artifact, and emits a warning without
blocking normal CI when the Dashboard/PR proof is absent. Its local unit
coverage is included in the repository's enforced thresholds.
- The authenticated GitHub CLI token can administer the repository but cannot
install or enumerate user-account GitHub App installations. GitHub returned
`403` for the user-installations endpoint because it requires a GitHub-App
Expand Down
2 changes: 2 additions & 0 deletions conductor/tracks/renovate-codecov-verification_20260801/plan.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,8 @@
- [x] Verify the pull-request matrix and Codecov upload result.
- [x] Record owner-reported Renovate App installation and repository onboarding
state.
- [x] Add a scheduled, non-blocking hosted-evidence monitor with deterministic
tests and artifact output.
- [ ] Verify Renovate app access and a Dashboard or pull request.
- [x] Retain Dependabot because Renovate is not yet proven healthy.
- [x] Record external authorization blockers without overstating completion.
Expand Down
Loading