Skip to content

BUILD-8956 Verify config-poetry action#110

Closed
hedinasr wants to merge 10 commits into
masterfrom
feat/hnasr/BUILD-8956-verifyConfigPoetry
Closed

BUILD-8956 Verify config-poetry action#110
hedinasr wants to merge 10 commits into
masterfrom
feat/hnasr/BUILD-8956-verifyConfigPoetry

Conversation

@hedinasr

@hedinasr hedinasr commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

Summary

Dogfood PR to validate the new config-poetry action from SonarSource/ci-github-actions#292.

  • Adds a Verify config-poetry job that runs the standalone action, then poetry install and poetry build
  • Points build-poetry at feat/hnasr/BUILD-8956-createConfigPoetry for end-to-end validation through the refactored build action

Test plan

  • Verify config-poetry job passes (standalone action + Poetry install/build via Repox)
  • Build job passes (build-poetry consuming config-poetry internally)
  • Promote job passes

Revert action refs to @master / @v1 after ci-github-actions#292 is merged.


Summary by Gitar

  • Runner configuration:
    • Updated runs-on targets to use warp-custom-ubuntu-24-04 for all workflows.
    • Added warp-custom-ubuntu-24-04 as an allowed label in .github/actionlint.yaml.
  • CI Workflow enhancements:
    • Configured build job to output BUILD_NUMBER and passed it to the promote job via environment variables.

This will update automatically on new commits.

Add a verify-config-poetry job that exercises the standalone action,
and point build-poetry at the feature branch for end-to-end validation.
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Jun 11, 2026

Copy link
Copy Markdown

BUILD-8956

Replace the separate verify job with an inline config-poetry step
ahead of build-poetry in the existing build workflow.
Promote was incrementing the build number in a separate job because
get-build-number could not restore the cache from config-poetry.
@hedinasr
hedinasr deployed to sca-checking June 11, 2026 14:38 — with GitHub Actions Active
@hedinasr
hedinasr marked this pull request as ready for review June 12, 2026 12:48
@hedinasr
hedinasr requested a review from a team as a code owner June 12, 2026 12:48
Copilot AI review requested due to automatic review settings June 12, 2026 12:48

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the CI workflow to dogfood and validate the new config-poetry GitHub Action and to pass the produced build number into the promote job.

Changes:

  • Exposes BUILD_NUMBER as an output from the build job (sourced from the config-poetry step).
  • Adds mise-action setup and runs the standalone config-poetry action before build-poetry.
  • Propagates BUILD_NUMBER into the promote job environment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/build.yml
Comment thread .github/workflows/build.yml Outdated

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR should not be merged as it is. I added the DO NOT MERGE label and moved the PR to draft.
Of course, there are the temporary dogfooding pins that will be removed before merge.
But also

  • build-poetry includes config-poetry, that's the default usage we want to validate with the workflow on master
  • config-poetry can be tested as in 09e1bb2, eventually merged on master or not (be careful that poetry install && poetry build may not be correct/accurate is set_project_version() is not in config-poetry. The verify-config-poetry job was ok.
  • 085cd83 should be merged on master (except the lines 32, 33)
  • fix the runs-on: github-ubuntu-latest-s with the latest recommendations in order to validate on the expected runners

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you squash the commits into one, keeping only one separate commit for @feat/hnasr/BUILD-8956-createConfigPoetry (that commit will be removed before merge).
The other changes will be kept.

Comment thread .github/workflows/build.yml Outdated
- name: Verify Poetry resolves dependencies via Repox
run: |
export PATH="$PATH:/home/runner/.local/bin"
poetry install && poetry build

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The verification is missing, or it relies on the lock file?
Can we confirm that it fails (or makes downloads outside of Repox) if config-poetry is commented out?

Comment thread .github/workflows/build.yml Outdated
Restore standalone verify-config-poetry job, validate build-poetry alone
in the build job, propagate BUILD_NUMBER to promote, and run on
warp-custom-ubuntu-24-04.
@hedinasr
hedinasr force-pushed the feat/hnasr/BUILD-8956-verifyConfigPoetry branch from 87a53a1 to 36b9589 Compare June 18, 2026 08:09
Comment thread .github/workflows/build.yml Outdated
@sonarqubecloud

Copy link
Copy Markdown

@hedinasr hedinasr closed this Jun 23, 2026
@hedinasr
hedinasr deleted the feat/hnasr/BUILD-8956-verifyConfigPoetry branch June 23, 2026 09:27
@gitar-bot

gitar-bot Bot commented Jun 23, 2026

Copy link
Copy Markdown
Code Review ✅ Approved 1 resolved / 1 findings

Updates CI runner targets to use warp-custom-ubuntu-24-04 and propagates BUILD_NUMBER to the promote job. All configuration changes are verified and ready.

✅ 1 resolved
Quality: Remove debug commands before merging dogfood PR

📄 .github/workflows/build.yml:24-25
The delta adds debug commands cat ~/.bashrc and which poetry to the 'Verify config-poetry' step. These are diagnostic-only and should be removed before this PR is merged. Note this is already a draft labeled 'DO NOT MERGE', so this is just a reminder to clean up the temporary debug output (and the dogfood action refs pinned to feature branches) before finalizing.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants