Skip to content

V2.0.0/fix ci - #5

Merged
gimlichael merged 2 commits into
mainfrom
v2.0.0/fix-ci
Aug 9, 2026
Merged

V2.0.0/fix ci#5
gimlichael merged 2 commits into
mainfrom
v2.0.0/fix-ci

Conversation

@gimlichael

Copy link
Copy Markdown
Member

This pull request makes a small update to the CI pipeline and documentation. The main change is to further restrict when privileged jobs run in the GitHub Actions workflow, particularly for pull requests authored by Dependabot. The changelog is also updated with a new release date and correct comparison link.

Workflow improvements:

  • The workflow now disables privileged jobs not only for pull requests from forks, but also for pull requests authored by dependabot[bot], adding an extra layer of security. (.github/workflows/ci-pipeline.yml)
  • The pull request author is now explicitly captured as an environment variable for workflow steps. (.github/workflows/ci-pipeline.yml)

Documentation updates:

  • The release date for version 2.0.0 in CHANGELOG.md is corrected.
  • The changelog comparison link for version 2.0.0 is updated to point to the actual release tag.

Dependabot PRs from fork repositories need to skip jobs that require secrets or privileged environment access. Detecting dependabot[bot] as the pull request author ensures CI jobs like container publishing and attestation do not run when the change origin cannot be fully trusted.
Update the release date to the current date (2026-08-10) and fix the changelog link to point to the 2.0.0 tag instead of HEAD, ensuring the link resolves correctly in GitHub.
@gimlichael gimlichael self-assigned this Aug 9, 2026
@gimlichael
gimlichael merged commit 4878e3b into main Aug 9, 2026
5 checks passed
@gimlichael
gimlichael deleted the v2.0.0/fix-ci branch August 9, 2026 22:10
@greptile-apps

greptile-apps Bot commented Aug 9, 2026

Copy link
Copy Markdown

Greptile Summary

The PR narrows privileged CI execution by excluding Dependabot-authored pull requests and corrects the 2.0.0 changelog metadata.

  • Captures the pull-request author and disables privileged analysis jobs for Dependabot PRs.
  • Updates the 2.0.0 release date and changes its comparison link to target the release tag.

Confidence Score: 5/5

The PR appears safe to merge, with no actionable failures identified in the workflow or changelog changes.

The new condition only skips the intended privileged analysis jobs for Dependabot pull requests, while ordinary builds and tests remain reachable, and the documentation updates are consistent with the planned 2.0.0 release.

Important Files Changed

Filename Overview
.github/workflows/ci-pipeline.yml Correctly identifies Dependabot PRs and feeds the existing privileged-job gate without affecting normal build and test jobs.
CHANGELOG.md Updates the documented release date and replaces the moving HEAD comparison endpoint with the fixed 2.0.0 tag.

Reviews (1): Last reviewed commit: "💬 finalize release notes for 2.0.0" | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant