Repository navigation
Conversation
lusoris
enabled auto-merge (squash)
May 29, 2026 10:19
lusoris
force-pushed
the
chore/ci-runner-standardization-20260529
branch
from
May 29, 2026 11:31
df98418 to
3d21995
Compare
lusoris
disabled auto-merge
May 29, 2026 11:49
lusoris
marked this pull request as draft
May 29, 2026 11:49
lusoris
force-pushed
the
chore/ci-runner-standardization-20260529
branch
2 times, most recently
from
May 29, 2026 13:22
892e585 to
de1204f
Compare
…nners (ADR-0802) Replace floating `ubuntu-latest` runner alias with `ubuntu-24.04` across 15 workflow files to prevent silent toolchain drift when GitHub promotes the alias to Ubuntu 26.04 (expected H2 2026). Add ADR-0802 documenting the pin policy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
lusoris
force-pushed
the
chore/ci-runner-standardization-20260529
branch
from
May 29, 2026 15:32
de1204f to
ae4d3a3
Compare
lusoris
marked this pull request as ready for review
May 31, 2026 13:40
Contributor
Author
|
Superseded by master after merge marathon 2026-05-31. |
Contributor
Author
|
Superseded by #520 — bundled per 2026-06-01 triage. |
lusoris
added a commit
that referenced
this pull request
Jun 2, 2026
lusoris
added a commit
that referenced
this pull request
Jun 2, 2026
…-24.04 pin + #173 Renovate grouping + #183 release-please draft) (#520) * chore(ci): nightly workflow audit — remove redundant TSan, fix retention + Python ver (ADR-0793) Three targeted fixes surfaced by a periodic nightly-CI audit: 1. Remove the `tsan` job from nightly.yml. sanitizers.yml already fires TSan on every push to master (ADR-0710); the daily cron duplicate burned ~45 runner-minutes/night for zero additional signal. 2. Add explicit `retention-days` to both nightly artifacts: 14 d for the clang-tidy-full-report (diagnostic value expires quickly) and 30 d for nightly-benchmark-results (one month of period-over-period comparisons). Both previously defaulted to GitHub's 90-day retention. 3. Fix `python-version: "3.14.5"` → `"3.12"` in nightly-bisect.yml. Python 3.14 is a pre-release alpha series with no stable release; the step name ("Set up Python 3.12") was correct and the version string was wrong. This would cause the job to fail trying to download a non-existent release. No functional changes to test coverage. All nightly signal is preserved. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore(ci): pin ubuntu-latest to ubuntu-24.04 across all non-Docker runners (ADR-0802) Replace floating `ubuntu-latest` runner alias with `ubuntu-24.04` across 15 workflow files to prevent silent toolchain drift when GitHub promotes the alias to Ubuntu 26.04 (expected H2 2026). Add ADR-0802 documenting the pin policy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore(deps): Renovate — Go/Cargo grouping, off-hours schedule, PR-cap (ADR-0812) - Global schedule: "at any time" → "before 6am on weekdays" (Europe/Vienna); vulnerability alerts retain their existing "at any time" override. - Add gomod packageRule: minor+patch grouped, auto-merged Monday mornings; major individual, manual review. - Add cargo packageRule: same group-and-automerge pattern; major manual. - prConcurrentLimit: 12 → 10 (Go grouping reduces PR count per cycle). - ADR-0812 documents the decision and alternatives. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore(release): set release-please draft mode for manual version review Set `"draft": true` in `release-please-config.json` root package so the next release PR opens as a draft, requiring manual review before merge. Prevents an unintended `4.0.0` major bump caused by three incorrectly marked breaking commits (PR #52, #80, #108). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore(ci): add bundle CHANGELOG fragment for CI workflow hygiene PRs #141 #165 #173 #183 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Lusoris <lusoris@pm.me>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
ubuntu-latestrunner alias withubuntu-24.04across 15 workflow files, preventing silent toolchain drift when GitHub promotes the alias to Ubuntu 26.04 (expected H2 2026).Audit findings:
ubuntu-24.0413.2.0everywhere (ADR-0603)windows-2025consistently across all jobsmacos-latestintentional (Apple Silicon)semgrep/semgrepalready SHA-pinnedupstream-watcher.ymlubuntu-latest, siblings wereubuntu-24.04Not changed:
docker-image.ymlanddocker-publish-production.yml— Docker build host OS version does not affect the produced image.Reset note: This PR was reconstructed from scratch against master. Previous contamination (Go workspace audit, DNN changes, SYCL refactors, Helm chart edits, etc.) was stripped. Final diff: 19 files, 15 workflow YAMLs + ADR + changelog + README row + rebase-notes entry.
Test plan
ubuntu-latestcurrently resolves toubuntu-24.04)check-yamlpre-commit hook passes (verified locally — all green)Deliverables checklist (ADR-0108)
## Alternatives consideredubuntu-24.04changelog.d/changed/ci-runner-ubuntu-24-pin.mddocs/rebase-notes.mdentry added (no rebase impact: CI workflows are fork-local)🤖 Generated with Claude Code