Repository navigation
docs(release): restore the signing group repository after adding a branch - #3088
Conversation
|
No actionable comments were generated in the recent review. Walkthrough
Merge Risk:
|
|
Approved: no findings at Nothing to do. Clobber: none. |
There was a problem hiding this comment.
Approving. The PUT is idempotent and the check prints what it should, so the step is safe either way.
On the cause: the PATCH above resends visibility from the GET. The likely culprit is that a write of visibility: "selected" resets the group's selected-repository list. If so, dropping visibility from the --jq object, so the PATCH sends only restricted_to_workflows and selected_workflows, would stop the list emptying in the first place. That's untested, and I wouldn't test it on the live group either. The restore step is right to keep regardless.
What
Adds a step to the release branch procedure in
docs/internal/release-pipeline.md: after updating thesigningrunner group's workflow list, addgominimal/minimalback to the group and check that it is listed.Why
The documented
PATCHcan leave the group with no repositories. The group then holds the signing jobs in the queue while its runner stays idle. This happened to a release dry run, and adding the repository back released it.The cause is likely the
PATCHbut was not reproduced, to avoid another test write on the live group. The addedPUTis safe to repeat, so the step holds either way.Verification
PUTand the check are the commands that restored the group: the check printedgominimal/minimal, and the queued job started on the runner about a minute later.just lint-prose docs/internal/release-pipeline.md.Summary by CodeRabbit