Skip to content

test: verify the pin-reconcile companion adopts a moved checkout pin - #483

Closed
joshua-temple wants to merge 1 commit into
mainfrom
test/reconcile-trip-fixed
Closed

joshua-temple wants to merge 1 commit into
mainfrom
test/reconcile-trip-fixed

Conversation

@joshua-temple

Copy link
Copy Markdown
Collaborator

Problem

This is a manual verification PR for the pin-reconcile self-heal companion. It confirms the companion produces a true positive after the changed-files wiring fix landed on main.

Change

Bumps the actions/checkout pin in every hand-written source workflow from v7.0.0 to v6.0.0 (a real, released tag SHA), leaving the generated workflows and the pin manifest untouched so the companion has to reconcile them itself.

Verification

Expectation: PR Validation runs the detector, which records the moved governed pin as relevant. The Pin Reconcile companion then adopts the new ref into internal/generate/action_pins.yaml, regenerates the generated workflows to match, and pushes the reconciling commit onto this branch, after which the workflow-drift check goes green.

This branch is throwaway and will be closed without merging.

Signed-off-by: Joshua Temple <joshua.temple@stablekernel.com>
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

PR Validation checks failed

Action-pins consistency guard failed

Apply this edit to internal/generate/action_pins.yaml (adopt the bumped ref):

  • actions/checkout: set sha to 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3, version to v6.0.0

This assumes the Dependabot bump direction (adopting the governed got SHA into the manifest); a manifest-first hand edit would point the other way.

On a same-repo Dependabot PR the auto-fix job pushes this automatically; on a fork PR apply the edit by hand.

Job: Unit Tests

Failing step: Run unit tests

Annotations:

.github:6263 failure:  Process completed with exit code 123.
log excerpt
2026-07-06T08:06:02.6994091Z === RUN   TestActionPinsAnchorCoversManifest
2026-07-06T08:06:02.6994969Z     action_pins_anchor_test.go:39: 
2026-07-06T08:06:02.6996328Z         	Error Trace:	/home/runner/work/cascade/cascade/internal/generate/action_pins_anchor_test.go:39
2026-07-06T08:06:02.6999244Z         	Error:      	Should be empty, but was [workflows/action-pins.yml:49 actions/checkout want 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 got 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0]
2026-07-06T08:06:02.7000867Z         	Test:       	TestActionPinsAnchorCoversManifest
2026-07-06T08:06:02.7002982Z         	Messages:   	dependabot anchor refs diverge from action_pins.yaml: [workflows/action-pins.yml:49 actions/checkout want 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 got 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0]
2026-07-06T08:06:02.7004021Z --- FAIL: TestActionPinsAnchorCoversManifest (0.00s)
2026-07-06T08:06:02.7004436Z === RUN   TestDefaultActionPins_MatchesPriorHardcodedTable
2026-07-06T08:06:02.7004902Z --- PASS: TestDefaultActionPins_MatchesPriorHardcodedTable (0.00s)
2026-07-06T08:06:02.7005323Z === RUN   TestActionPinsManifest_EmitFlags
2026-07-06T08:06:02.7005669Z --- PASS: TestActionPinsManifest_EmitFlags (0.00s)
2026-07-06T08:06:02.7006033Z === RUN   TestActionRef_DefaultTagModeUnchanged
2026-07-06T08:06:02.7006401Z --- PASS: TestActionRef_DefaultTagModeUnchanged (0.00s)
2026-07-06T08:06:02.7006801Z === RUN   TestActionRef_ExplicitTagModeMatchesDefault
2026-07-06T08:06:02.7007207Z --- PASS: TestActionRef_ExplicitTagModeMatchesDefault (0.00s)
2026-07-06T08:06:02.7007637Z === RUN   TestActionRef_SHAModePinsEveryActionWithComment
2026-07-06T08:06:02.7008075Z --- PASS: TestActionRef_SHAModePinsEveryActionWithComment (0.00s)
2026-07-06T08:06:02.7008514Z === RUN   TestActionRef_ActionPinsOverrideRegardlessOfMode
2026-07-06T08:06:02.7008951Z --- PASS: TestActionRef_ActionPinsOverrideRegardlessOfMode (0.00s)
2026-07-06T08:06:02.7009362Z === RUN   TestActionRef_EmptyOverrideFallsThrough
2026-07-06T08:06:02.7009748Z --- PASS: TestActionRef_EmptyOverrideFallsThrough (0.00s)
2026-07-06T08:06:02.7010122Z === RUN   TestActionRef_UnknownActionPassthrough
2026-07-06T08:06:02.7010505Z --- PASS: TestActionRef_UnknownActionPassthrough (0.00s)
2026-07-06T08:06:02.7010850Z === RUN   TestActionRef_NilConfigSafe
2026-07-06T08:06:02.7011156Z --- PASS: TestActionRef_NilConfigSafe (0.00s)
2026-07-06T08:06:02.7011478Z === RUN   TestCLISetupRef_NilConfigSafe
2026-07-06T08:06:02.7011794Z --- PASS: TestCLISetupRef_NilConfigSafe (0.00s)
2026-07-06T08:06:02.7012473Z === RUN   TestCLISetupRef
2026-07-06T08:06:02.7012819Z === RUN   TestCLISetupRef/tag_default_when_cli_version_unset
2026-07-06T08:06:02.7013244Z === RUN   TestCLISetupRef/explicit_tag_in_tag_mode
2026-07-06T08:06:02.7013690Z === RUN   TestCLISetupRef/sha_mode_with_sha_set_emits_sha_and_version_comment
2026-07-06T08:06:02.7014167Z === RUN   TestCLISetupRef/sha_mode_without_sha_falls_back_to_tag
2026-07-06T08:06:02.7014554Z === RUN   TestCLISetupRef/tag_mode_ignores_a_set_sha
2026-07-06T08:06:02.7015196Z === RUN   TestCLISetupRef/beta_opts_into_master_regardless_of_pin_mode
2026-07-06T08:06:02.7015581Z --- PASS: TestCLISetupRef (0.00s)
2026-07-06T08:06:02.7016024Z     --- PASS: TestCLISetupRef/tag_default_when_cli_version_unset (0.00s)
2026-07-06T08:06:02.7016539Z     --- PASS: TestCLISetupRef/explicit_tag_in_tag_mode (0.00s)
2026-07-06T08:06:02.7017117Z     --- PASS: TestCLISetupRef/sha_mode_with_sha_set_emits_sha_and_version_comment (0.00s)
2026-07-06T08:06:02.7017738Z     --- PASS: TestCLISetupRef/sha_mode_without_sha_falls_back_to_tag (0.00s)
2026-07-06T08:06:02.7018255Z     --- PASS: TestCLISetupRef/tag_mode_ignores_a_set_sha (0.00s)
2026-07-06T08:06:02.7018812Z     --- PASS: TestCLISetupRef/beta_opts_into_master_regardless_of_pin_mode (0.00s)
2026-07-06T08:06:02.7019259Z === RUN   TestPinPolicy_E2E_SelfActionSHAPinned
2026-07-06T08:06:02.7019618Z --- PASS: TestPinPolicy_E2E_SelfActionSHAPinned (0.01s)
2026-07-06T08:06:02.7020006Z === RUN   TestPinPolicy_E2E_OrchestrateEmitsPinnedRefs
2026-07-06T08:06:02.7020408Z --- PASS: TestPinPolicy_E2E_OrchestrateEmitsPinnedRefs (0.00s)
2026-07-06T08:06:02.7020796Z === RUN   TestGetCLIRef_DefaultIsPinnedNotMutable
2026-07-06T08:06:02.7021175Z --- PASS: TestGetCLIRef_DefaultIsPinnedNotMutable (0.00s)
2026-07-06T08:06:02.7021540Z === RUN   TestPinPolicy_E2E_Deterministic
2026-07-06T08:06:02.7021861Z --- PASS: TestPinPolicy_E2E_Deterministic (0.01s)
2026-07-06T08:06:02.7022640Z === RUN   TestPinPolicy_E2E_TagModeDefaultUnchanged
2026-07-06T08:06:02.7023173Z --- PASS: TestPinPolicy_E2E_TagModeDefaultUnchanged (0.01s)
2026-07-06T08:06:02.7023591Z === RUN   TestActionRef_OverridePreservesVersionComment
2026-07-06T08:06:02.7024008Z --- PASS: TestActionRef_OverridePreservesVersionComment (0.00s)
2026-07-06T08:06:02.7024436Z === RUN   TestRenderLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:06:02.7024839Z === PAUSE TestRenderLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:06:02.7025251Z === RUN   TestGenerateLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:06:02.7025676Z === PAUSE TestGenerateLocalActions_RejectsUnsafeActionFolder
2026-07-06T08:06:02.7026088Z === RUN   TestRenderLocalActions_AllowsDefaultActionFolder
2026-07-06T08:06:02.7026479Z === PAUSE TestRenderLocalActions_AllowsDefaultActionFolder
2026-07-06T08:06:02.7026854Z === RUN   TestReleaseGenerator_NoAppTokenByDefault

Full job log

Job: PR Gate

Failing step: Verify gated jobs succeeded or were skipped

Annotations:

.github:19 failure:  Process completed with exit code 1.
log excerpt
2026-07-06T08:06:26.3503458Z Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20260628.225
2026-07-06T08:06:26.3504499Z ##[endgroup]
2026-07-06T08:06:26.3505723Z ##[group]GITHUB_TOKEN Permissions
2026-07-06T08:06:26.3508405Z Contents: read
2026-07-06T08:06:26.3509222Z Metadata: read
2026-07-06T08:06:26.3509833Z ##[endgroup]
2026-07-06T08:06:26.3512447Z Secret source: Actions
2026-07-06T08:06:26.3513709Z Prepare workflow directory
2026-07-06T08:06:26.3854702Z Prepare all required actions
2026-07-06T08:06:26.3954619Z Complete job name: PR Gate
2026-07-06T08:06:26.4786760Z ##[group]Run if [ "true" = "true" ]; then
2026-07-06T08:06:26.4788120Z �[36;1mif [ "true" = "true" ]; then�[0m
2026-07-06T08:06:26.4788978Z �[36;1m  echo "A required check failed or was cancelled."�[0m
2026-07-06T08:06:26.4789754Z �[36;1m  echo "  unit-tests:     failure"�[0m
2026-07-06T08:06:26.4790530Z �[36;1m  echo "  lint:           success"�[0m
2026-07-06T08:06:26.4791371Z �[36;1m  echo "  workflow-drift: success"�[0m
2026-07-06T08:06:26.4792127Z �[36;1m  exit 1�[0m
2026-07-06T08:06:26.4792706Z �[36;1mfi�[0m
2026-07-06T08:06:26.4793365Z �[36;1mecho "PR Gate passed (jobs succeeded or were skipped)."�[0m
2026-07-06T08:06:26.4794258Z �[36;1mecho "  unit-tests:     failure"�[0m
2026-07-06T08:06:26.4794938Z �[36;1mecho "  lint:           success"�[0m
2026-07-06T08:06:26.4795600Z �[36;1mecho "  workflow-drift: success"�[0m
2026-07-06T08:06:26.5307818Z shell: /usr/bin/bash -e {0}
2026-07-06T08:06:26.5309766Z ##[endgroup]
2026-07-06T08:06:26.5592395Z A required check failed or was cancelled.
2026-07-06T08:06:26.5593689Z   unit-tests:     failure
2026-07-06T08:06:26.5594735Z   lint:           success
2026-07-06T08:06:26.5595873Z   workflow-drift: success
2026-07-06T08:06:26.5623454Z ##[error]Process completed with exit code 1.
2026-07-06T08:06:26.5903801Z Cleaning up orphan processes

Full job log

@joshua-temple
joshua-temple deleted the test/reconcile-trip-fixed branch July 6, 2026 08:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant