8000 docs(release): restore the signing group repository after adding a branch by norrietaylor · Pull Request #3088 · gominimal/minimal · GitHub
[go: up one dir, main page]

Skip to content

docs(release): restore the signing group repository after adding a branch - #3088

Merged
norrietaylor merged 1 commit into
mainfrom
docs/signing-group-repo-restore
Nov 6, 2026
Merged

norrietaylor merged 1 commit into
mainfrom
docs/signing-group-repo-restore

Conversation

@norrietaylor
@norrietaylor norrietaylor commented Nov 6, 2026 •
Copy link
Copy Markdown
Member

What

Adds a step to the release branch procedure in docs/internal/release-pipeline.md: after updating the signing runner group's workflow list, add gominimal/minimal back to the group and check that it is listed.

Why

The documented PATCH can leave the group with no repositories. The group then holds the signing jobs in the queue while its runner stays idle. This happened to a release dry run, and adding the repository back released it.

The cause is likely the PATCH but was not reproduced, to avoid another test write on the live group. The added PUT is safe to repeat, so the step holds either way.

Verification

  • The PUT and the check are the commands that restored the group: the check printed gominimal/minimal, and the queued job started on the runner about a minute later.
  • just lint-prose docs/internal/release-pipeline.md.

Summary by CodeRabbit

  • Documentation
    • Added guidance for restoring the repository list after updating the signing runner group, and checking that the repository is listed to help prevent signing jobs from remaining queued.

@norrietaylor
norrietaylor requested a review from a team as a code owner November 6, 2026 02:52
@coderabbitai
coderabbitai Bot commented Nov 6, 2026 •
Copy link
Copy Markdown
Contributor

Explain Change →

No actionable comments were generated in the recent review.

Walkthrough

The release pipeline instructions now warn that updating the signing runner group can clear its repository list. They add commands to restore gominimal/minimal and verify that it appears in the list.

Changes: Release pipeline instructions

Layer / File(s) Summary
Signing runner repository recovery instructions
docs/internal/release-pipeline.md
The instructions explain that an empty repository list can prevent signing jobs from running. They add commands to restore gominimal/minimal and verify the list.

Estimated code review effort: 1 (Trivial) | ~4 minutes

Possibly related PRs

Suggested reviewers: agent-137

Merge Risk: Minimal · up to 92055

The instructions restore and check the repository’s runner access. No actionable merge risk was identified.

Pre-merge checks: Passed 5

Check name Status Explanation
Title check Passed The title identifies the documented change to restore the signing group repository.
Description check Passed The description ex 8000 plains the change, its cause, and verification. It omits the template's checklist and does not include the lint output.
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Some tools did not complete. Review the errors below.

Vale (3.24.0)

{
"Line": 13,
"Path": ".vale.ini",
"Text": "Style 'ste' isn't on the StylesPath (/styles). If it's a package, run vale sync.",
"Code": "E201",
"Span": 23
}

A rabbit checks the runner’s list,
One repo missing, jobs persist.
Restore the name, then check once more,
The signing jobs can find the door.
I hop away; the list is right.

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Essentials
  • Run ID: 7a04c385-2033-4989-ae9a-620327fdbbcb
Commits

Reviewing files that changed from the base of the PR and between cd262ac and 9205529.

Files selected for processing: 1

  • docs/internal/release-pipeline.md

Included review availability: This review used your included allowance. 1 included review remains after this review. Your included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

@minimal-foundry
minimal-foundry Bot commented Nov 6, 2026 •
Copy link
Copy Markdown
Contributor

Approved: no findings at 920552974c38.

Nothing to do.

Clobber: none.

@minimal-foundry minimal-foundry Bot left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

minimal-review — approved

Verdict APPROVE — No findings.

Panel: 3 of 3 personas ran (correctness, security, supply-chain).

@minimal-foundry minimal-foundry Bot added the review:approved minimal-review approved the current head label Nov 6, 2026
@bryan-minimal bryan-minimal left a comment
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving. The PUT is idempotent and the check prints what it should, so the step is safe either way.

On the cause: the PATCH above resends visibility from the GET. The likely culprit is that a write of visibility: "selected" resets the group's selected-repository list. If so, dropping visibility from the --jq object, so the PATCH sends only restricted_to_workflows and selected_workflows, would stop the list emptying in the first place. That's untested, and I wouldn't test it on the live group either. The restore step is right to keep regardless.

@norrietaylor
norrietaylor added this pull request to the merge queue Nov 6, 2026
Merged via the queue into main with commit 98bb3e3 Nov 6, 2026
35 checks passed
@norrietaylor
norrietaylor deleted the docs/signing-group-repo-restore branch November 6, 2026 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

review:approved minimal-review approved the current head

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0