fix(renovate): drop followTag on retired v1 floating tag - #89
Conversation
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Team Run ID: 📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. WalkthroughThe Renovate rule for organization reusable-workflow SHA pins no longer follows the floating ChangesRenovate workflow pin updates
Estimated code review effort: 1 (Trivial) | ~2 minutes Merge Risk: ⚪ Minimal · up to Renovate will track immutable semver releases rather than the retired v1 tag, restoring workflow-pin update delivery. The change is ready to merge. Suggested reviewers: Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
Full details: Docstring CoverageExplanation No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.) ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
There was a problem hiding this comment.
Pull request overview
This PR updates Renovate configuration to ensure GitHub Actions reusable-workflow SHA pin updates continue flowing now that the floating v1 tag is retired/immutable under org tag protection.
Changes:
- Removes
followTag: "v1"from the org reusable-workflow package rule to avoid pins freezing on an unmoving major tag. - Updates the rule description to document the tag-protection constraint and the rationale for relying on semver release tags.
|
The org tag-protection ruleset forbids re-pointing v* tags, so the floating v1 tag froze at the v1.1.0 commit; followTag "v1" therefore froze all org-workflow SHA-pin updates at v1.1.0-era code. Plain semver tracking of the immutable vX.Y.Z release tags (cut on every push to the source repo's main) restores update delivery. Companion to ByronWilliamsCPA/.github#244 and ByronWilliamsCPA/.claude#251 (CI-057 inversion).
0964cdb to
d9016b0
Compare
|
Removes
followTag: "v1"from the org-workflow Renovate rule. The org tag-protection ruleset forbids re-pointingv*tags, sov1froze at the v1.1.0 commit and the followed tag silently froze all org-workflow SHA-pin updates. Plain semver tracking of the immutablevX.Y.Zrelease tags restores update delivery.Companion to ByronWilliamsCPA/.github#244 (v1 tag retirement) and ByronWilliamsCPA/.claude#251 (CI-057 inversion). Satisfies the inverted CI-057.
Generated with Claude Code
Summary by CodeRabbit