ci: lockstep HEAL — baked-tools.json auto-syncs when Dockerfile pin leads (#323) - #268
Merged
Merged
Conversation
… Dockerfile pin leads (#323) Root cause of red-after-dependabot: auto-merge gate is correct (waits for 'Validate baked tools' on Dockerfile* changes, refuses on failure), but PR #262 was merged BY HAND while red, and unhealed dependabot PRs sit red waiting for a manual baked-tools.json edit. This makes the sync a workflow: - gate step: continue-on-error + id, re-asserted by a final fail step - heal step: when ALL failures are 'Dockerfile pin X != baked-tools.json Y', the PR is same-repo, and the PR does NOT touch baked-tools.json → checkout PR head separately, rewrite versions (Dockerfile leads), push a sync commit, fail this run intentionally (nothing merges on pre-heal SHA; new SHA re-runs green and auto-merge proceeds) - never heals the reverse direction; fork PRs and hand-edits stay red Dry-run verified: positive (docker/dockerd/paseo healed, exit 42) and negative (missing pin regex → refuse).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow-up of #322/#267. The gate was right; the heal was manual. Now the workflow heals itself.
Why
d7e1218toa99cfc5#262 entered main with baked-tools.json stale because it was merged by hand while 'Validate baked tools' was red — the auto-merge gate would have refused.Behavior
Safety