5 Commits

Include renames

Author	SHA1	Message	Date
sneak	3a4a6bb21f	Set a time limit on the canonical check job (closes #120) ... The canonical check workflow gave its job no time limit, so a hung script/cibuild held the shared runner until the runner's own default. The check job now sets timeout-minutes: 20. script/cibuild runs three Docker builds (the test phase, the lint phase, then the image, which runs both again), each held to the 5-minute build limit, plus the bootstrap. REPO_POLICIES.md and both checklists name the limit among what the workflow sets. Model: opus-5-5	2026-10-07 09:04:00 +00:00
clawbot	b3508a4361	Fetch history and tags in the canonical workflow (closes #110) ... The policy said a repository whose version comes from git tags needs `fetch-depth: 0` on its CI checkout, because the checkout action clones shallow with no tags; every repository's version comes from `git describe --tags --always`, but the canonical `.gitea/workflows/check.yml` did not set it, so CI stamped a bare short commit id where a local build of a tagged repository stamps the tag. The checkout step now sets `fetch-depth: 0` with a one-line comment, and the workflow bullet of `prompts/REPO_POLICIES.md` and both checklists name it beside `persist-credentials: false` and the `concurrency` block, as part of what the workflow does. Unverified: a live run, which waits on the shared runner. Model: opus-5-5	2026-10-06 08:15:41 +02:00
clawbot	6aac45857a	Cancel replaced CI runs and drop the checkout token (closes #107) ... The canonical `.gitea/workflows/check.yml` lacked two settings `dnswatcher` had added, so a byte-identical re-vendor removed them. A `concurrency` block grouped by workflow and branch, with `cancel-in-progress: true`, makes a new push cancel the older run on the same branch and leaves every other branch's runs alone; on 2026-10-02 45 stale runs had queued on the one shared runner. `persist-credentials: false` on the checkout step keeps the job's token out of `.git/config`; `script/cibuild` needs no token. Each has a one-line comment, and the policy's workflow bullet and both checklists describe the file as it now is. Unverified: the two live checks, which wait on the shared runner. Model: opus-5-5	2026-10-06 05:52:57 +02:00
sneak	3d8d1c0600	Adopt scripts-to-rule-them-all: script/ entrypoints, Makefile shims, policy update (#23) ... Reviewed-on: #23 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-06 23:53:05 +02:00
sneak	f43445caea	Add CI policy, strengthen hash-pinning rule, add Gitea Actions workflow ... - All Dockerfiles must run make check as a build step - Every repo needs a Gitea Actions workflow running docker build on push - Greatly strengthen the hash-pinning rule: explicitly list all reference types, ban curl|bash installs, mark as most important rule in document - Add model .gitea/workflows/check.yml pinned by commit hash	2026-02-22 16:35:42 +01:00