@async/pipeline 0.9.3 → 0.9.5

package/dist/internal/node/github.js

@@ -3,9 +3,10 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
 import { dirname, join, relative, resolve } from "node:path";
 import { githubConfigForJob, pipelineError } from "../core/index.js";
+import { sourceImpactPlanForJob } from "./sources.js";
 export const GITHUB_WORKFLOW_PATH = ".github/workflows/async-pipeline.yml";
 export const GITHUB_LOCK_PATH = ".github/async-pipeline.lock.json";
-const GENERATOR_VERSION = 14;
+const GENERATOR_VERSION = 16;
 const DEFAULT_NODE_VERSION = "24";
 const DEFAULT_DENO_VERSION = "2";
 const DEFAULT_PNPM_VERSION = "11.1.0";
@@ -19,8 +20,8 @@ function defineActionRef(id, uses, sha, label) {
         ref: `${uses}@${sha} # ${label}`
     };
 }
-const ASYNC_ACTIONS_SHA = "313494352cd10207bf0331c83e83364eb45c8e02";
-const ASYNC_ACTIONS_LABEL = "v0.1.5";
+const ASYNC_ACTIONS_SHA = "cef0f1a3b7dd1300a16004e6d69b472261a3272f";
+const ASYNC_ACTIONS_LABEL = "v0.1.7";
 const GENERATED_ACTIONS = [
     defineActionRef("async.actions.setup", "async/actions/setup", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.run", "async/actions/run", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
@@ -28,6 +29,8 @@ const GENERATED_ACTIONS = [
     defineActionRef("async.actions.preview", "async/actions/preview", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.publish", "async/actions/publish", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("async.actions.dependabot-merge", "async/actions/dependabot-merge", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
+    defineActionRef("async.actions.evidence", "async/actions/evidence", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
+    defineActionRef("async.actions.source-impact", "async/actions/source-impact", ASYNC_ACTIONS_SHA, ASYNC_ACTIONS_LABEL),
     defineActionRef("actions.checkout", "actions/checkout", "de0fac2e4500dabe0009e67214ff5f5447ce83dd", "v6.0.2"),
     defineActionRef("actions.cache", "actions/cache", "0057852bfaa89a56745cba8c7296529d2fc39830", "v4"),
     defineActionRef("pnpm.setup", "pnpm/setup", "cf03a9b516e09bc5a90f041fc26fc930c9dc631b", "v1.0.0"),
@@ -44,6 +47,8 @@ const ASYNC_PAGES_ACTION = actionRef("async.actions.pages");
 const ASYNC_PREVIEW_ACTION = actionRef("async.actions.preview");
 const ASYNC_PUBLISH_ACTION = actionRef("async.actions.publish");
 const ASYNC_DEPENDABOT_MERGE_ACTION = actionRef("async.actions.dependabot-merge");
+const ASYNC_EVIDENCE_ACTION = actionRef("async.actions.evidence");
+const ASYNC_SOURCE_IMPACT_ACTION = actionRef("async.actions.source-impact");
 const CHECKOUT_ACTION = actionRef("actions.checkout");
 const CACHE_ACTION = actionRef("actions.cache");
 const PNPM_SETUP_ACTION = actionRef("pnpm.setup");
@@ -63,6 +68,7 @@ export async function renderGitHubWorkflow(pipeline, options) {
     const packageInfo = await readPackageInfo(options.cwd);
     const renderModel = buildRenderModel(pipeline, {
         ...packageInfo,
+        cwd: options.cwd,
         configPath: relativePath(options.cwd, options.configPath),
         workflowPath
     });
@@ -85,6 +91,8 @@ export async function renderGitHubWorkflow(pipeline, options) {
         dependencyCachePath: renderModel.dependencyCachePath,
         dependabotAutoMerge: renderModel.dependabotAutoMerge,
         packagePreviews: renderModel.packagePreviews,
+        evidence: renderModel.evidence,
+        sourceImpact: renderModel.sourceImpact,
         bridge: renderModel.bridge,
         pages: renderModel.pages,
         manualDispatchJobs: renderModel.manualDispatchJobs,
@@ -112,6 +120,8 @@ export async function renderGitHubWorkflow(pipeline, options) {
         dependencyCachePath: renderModel.dependencyCachePath,
         dependabotAutoMerge: renderModel.dependabotAutoMerge,
         packagePreviews: renderModel.packagePreviews,
+        evidence: renderModel.evidence,
+        sourceImpact: renderModel.sourceImpact,
         bridge: renderModel.bridge,
         pages: renderModel.pages,
         manualDispatchJobs: renderModel.manualDispatchJobs
@@ -231,6 +241,7 @@ function buildRenderModel(pipeline, options) {
     if (packagePreviews.enabled) {
         addPullRequestTrigger(triggers, "pull_request");
     }
+    const evidence = resolveGitHubEvidence(pipeline);
     const pages = resolveGitHubPages(pipeline);
     const bridge = resolveGitHubBridge(pipeline);
     if (pages.enabled) {
@@ -259,25 +270,38 @@ function buildRenderModel(pipeline, options) {
     const nodeVersion = pipeline.sync.github.nodeVersion ?? DEFAULT_NODE_VERSION;
     const runtime = resolveRuntimeSpecs(pipeline.sync.github.runtime, options.projectKind, nodeVersion);
     const setup = resolveGitHubSetup(pipeline.sync.github.setup, options.packageManager, options.packageManagerVersion);
+    const jobs = Object.values(pipeline.jobs)
+        .map((job) => ({
+        id: job.id,
+        target: [...job.target],
+        trigger: [...job.trigger],
+        env: { ...pipeline.env, ...(job.env ?? {}) },
+        environment: job.environment,
+        requires: job.requires,
+        execution: job.execution,
+        github: githubConfigForJob(pipeline, job),
+        if: renderGitHubJobCondition(job, pipeline.triggers)
+    }))
+        .sort((left, right) => left.id.localeCompare(right.id));
+    const sourceImpactJobs = resolveGitHubSourceImpactJobs(pipeline, options.cwd, jobs);
+    const sourceImpact = {
+        ...pipeline.sync.github.sourceImpact,
+        generatedJobs: sourceImpactJobs.map((job) => ({
+            job: job.job,
+            planJob: job.planJob,
+            matrixJob: job.matrixJob,
+            matrixRows: job.plan.matrix.include.length,
+            sources: Object.keys(job.plan.sources).sort((left, right) => left.localeCompare(right))
+        }))
+    };
     return {
         name: "Async Pipeline",
         configPath: options.configPath,
         workflowPath: options.workflowPath,
         projectKind: options.projectKind,
         triggers,
-        jobs: Object.values(pipeline.jobs)
-            .map((job) => ({
-            id: job.id,
-            target: [...job.target],
-            trigger: [...job.trigger],
-            env: { ...pipeline.env, ...(job.env ?? {}) },
-            environment: job.environment,
-            requires: job.requires,
-            execution: job.execution,
-            github: githubConfigForJob(pipeline, job),
-            if: renderGitHubJobCondition(job, pipeline.triggers)
-        }))
-            .sort((left, right) => left.id.localeCompare(right.id)),
+        jobs,
+        sourceImpactJobs,
         tasks: pipeline.tasks,
         packageManager: options.packageManager,
         packageManagerVersion: options.packageManagerVersion,
@@ -291,11 +315,83 @@ function buildRenderModel(pipeline, options) {
         dependencyCachePath: pipeline.sync.github.dependencyCache === false ? undefined : options.dependencyCachePath,
         dependabotAutoMerge: pipeline.sync.github.dependabotAutoMerge,
         packagePreviews,
+        evidence,
+        sourceImpact,
         bridge,
         pages,
         manualDispatchJobs
     };
 }
+function resolveGitHubEvidence(pipeline) {
+    const config = pipeline.sync.github.evidence;
+    if (!config.enabled)
+        return config;
+    if (pipeline.jobs[config.job]) {
+        throw pipelineError("ASYNC_PIPELINE_GITHUB_EVIDENCE_JOB_CONFLICT", `sync.github.evidence.job "${config.job}" conflicts with an existing pipeline job. Remove the explicit job or set sync.github.evidence.job to a different id.`);
+    }
+    const generatedJobs = new Set(["package-preview", "dependabot-auto-merge", pipeline.sync.github.pages.job, "async-bridge"]);
+    if (generatedJobs.has(config.job)) {
+        throw pipelineError("ASYNC_PIPELINE_GITHUB_EVIDENCE_JOB_CONFLICT", `sync.github.evidence.job "${config.job}" conflicts with a generated GitHub job. Set sync.github.evidence.job to a different id.`);
+    }
+    return config;
+}
+function resolveGitHubSourceImpactJobs(pipeline, cwd, jobs) {
+    const config = pipeline.sync.github.sourceImpact;
+    if (!config.enabled)
+        return [];
+    const jobsById = new Map(jobs.map((job) => [job.id, job]));
+    const explicitJobs = new Set(config.jobs);
+    const selectedJobIds = config.jobs.length > 0 ? config.jobs : jobs.map((job) => job.id);
+    const generatedIds = new Set([
+        "package-preview",
+        "dependabot-auto-merge",
+        "async-bridge",
+        pipeline.sync.github.evidence.job,
+        pipeline.sync.github.pages.job
+    ].map((id) => id.toLowerCase()));
+    const existingJobIds = new Set(Object.keys(pipeline.jobs).map((id) => id.toLowerCase()));
+    const result = [];
+    for (const jobId of selectedJobIds) {
+        const job = jobsById.get(jobId);
+        if (!job) {
+            throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact references missing job "${jobId}".`);
+        }
+        if (job.github?.runsOnMatrix) {
+            throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact cannot target job "${jobId}" because that job already uses github.runsOnMatrix.`);
+        }
+        const plan = sourceImpactPlanForJob(pipeline, cwd, jobId);
+        if (plan.matrix.include.length === 0) {
+            if (explicitJobs.has(jobId)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_INVALID", `sync.github.sourceImpact job "${jobId}" has no source task refs.`);
+            }
+            continue;
+        }
+        const generatedJobPrefix = safeGeneratedJobId(jobId);
+        const planJob = `${generatedJobPrefix}-source-plan`;
+        const matrixJob = `${generatedJobPrefix}-sources`;
+        for (const generatedJob of [planJob, matrixJob]) {
+            const generatedJobKey = generatedJob.toLowerCase();
+            if (existingJobIds.has(generatedJobKey)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_JOB_CONFLICT", `Generated source-impact job "${generatedJob}" conflicts with an existing pipeline job.`);
+            }
+            if (generatedIds.has(generatedJobKey)) {
+                throw pipelineError("ASYNC_PIPELINE_GITHUB_SOURCE_IMPACT_JOB_CONFLICT", `Generated source-impact job "${generatedJob}" conflicts with another generated GitHub job.`);
+            }
+            generatedIds.add(generatedJobKey);
+        }
+        result.push({
+            job: jobId,
+            planJob,
+            matrixJob,
+            planPath: `.async/actions/source-impact/${safeArtifactPart(jobId)}-source-plan.json`,
+            plan,
+            if: job.if,
+            github: job.github,
+            env: job.env
+        });
+    }
+    return result.sort((left, right) => left.job.localeCompare(right.job));
+}
 function resolveGitHubBridge(pipeline) {
     const config = pipeline.sync.github.bridge;
     const actionsJobEnabled = gitHubBridgeActionsEnabled(config);
@@ -447,6 +543,10 @@ function renderWorkflow(model) {
             renderPagesDeployJob(lines, job);
         }
     }
+    for (const sourceJob of model.sourceImpactJobs) {
+        renderSourceImpactPlanJob(lines, model, sourceJob);
+        renderSourceImpactMatrixJob(lines, model, sourceJob);
+    }
     if (model.pages.enabled) {
         renderGeneratedPagesJob(lines, model);
         renderPagesDeployJob(lines, {
@@ -469,6 +569,9 @@ function renderWorkflow(model) {
     if (model.bridge.actionsJob.enabled) {
         renderBridgeJob(lines, model);
     }
+    if (model.evidence.enabled) {
+        renderEvidenceFanInJob(lines, model);
+    }
     return `${lines.join("\n").replace(/\n+$/u, "")}\n`;
 }
 function renderJob(lines, model, job) {
@@ -548,8 +651,48 @@ function renderJob(lines, model, job) {
         lines.push("");
         renderPagesBuildSteps(lines, job.github.pages);
     }
+    renderEvidenceCollectStep(lines, model, { matrix: Boolean(runnerMatrix && runnerMatrix.length > 0) });
     lines.push("");
 }
+function renderSourceImpactPlanJob(lines, model, sourceJob) {
+    const runsOn = sourceJob.github?.runsOn ?? "ubuntu-latest";
+    lines.push(`  ${yamlKey(sourceJob.planJob)}:`, `    name: ${sourceJob.planJob}`);
+    if (sourceJob.if) {
+        lines.push(`    if: ${sourceJob.if}`);
+    }
+    lines.push(`    runs-on: ${Array.isArray(runsOn) ? JSON.stringify(runsOn) : runsOn}`, "    permissions:", "      contents: read", "    outputs:", "      matrix: ${{ steps.source-plan.outputs.matrix }}", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...renderSetupSteps(model));
+    renderWriteSourceImpactPlanStep(lines, sourceJob);
+    lines.push("", "      - name: Plan source impact matrix", "        id: source-plan", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: plan", `          source-plan: ${sourceJob.planPath}`, "          output-matrix: true");
+    renderEvidenceCollectStep(lines, model);
+    lines.push("");
+}
+function renderSourceImpactMatrixJob(lines, model, sourceJob) {
+    const runsOn = sourceJob.github?.runsOn ?? "ubuntu-latest";
+    lines.push(`  ${yamlKey(sourceJob.matrixJob)}:`, `    name: ${sourceJob.job} source (\${{ matrix.source }}:\${{ matrix.taskId }})`, `    needs: ${JSON.stringify(sourceJob.planJob)}`, `    if: \${{ always() && needs['${sourceJob.planJob}'].result == 'success' }}`, "    strategy:", "      fail-fast: false", `      matrix: \${{ fromJSON(needs['${sourceJob.planJob}'].outputs.matrix || '{"include":[]}') }}`, `    runs-on: ${Array.isArray(runsOn) ? JSON.stringify(runsOn) : runsOn}`, "    permissions:", "      contents: read", "    steps:", "      - name: Checkout", `        uses: ${CHECKOUT_ACTION}`, "", ...(model.taskCache
+        ? [
+            "      - name: Restore task cache",
+            `        uses: ${CACHE_ACTION}`,
+            "        with:",
+            "          path: .async/cache",
+            "          key: async-pipeline-${{ runner.os }}-${{ github.sha }}",
+            "          restore-keys: |",
+            "            async-pipeline-${{ runner.os }}-",
+            ""
+        ]
+        : []), ...renderSetupSteps(model), ...renderDependencyInstallSteps(model));
+    if (model.buildCommand) {
+        lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
+    }
+    renderWriteSourceImpactPlanStep(lines, sourceJob);
+    lines.push("", "      - name: Validate source checkout", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: checkout", `          source-plan: ${sourceJob.planPath}`, "          source-id: ${{ matrix.source }}", "          ref: ${{ matrix.ref }}", "          path: ${{ matrix.path }}", "", "      - name: Prepare source checkout", `        uses: ${ASYNC_SOURCE_IMPACT_ACTION}`, "        with:", "          mode: prepare", `          source-plan: ${sourceJob.planPath}`, "          source-id: ${{ matrix.source }}", "          path: ${{ matrix.path }}");
+    renderRunActionStep(lines, "Run source task", `${model.command} github check && ${model.command} run-task "\${{ matrix.task }}"`, scopeActionEnv(sourceJob.env, new Set()), { artifactName: "async-pipeline-${{ github.job }}-${{ matrix.source }}-${{ matrix.taskId }}-runs" });
+    renderEvidenceCollectStep(lines, model, { matrix: true });
+    lines.push("");
+}
+function renderWriteSourceImpactPlanStep(lines, sourceJob) {
+    const planJson = JSON.stringify(sourceJob.plan, null, 2);
+    lines.push("", "      - name: Write generated source plan", "        run: |", `          mkdir -p ${shellWord(dirname(sourceJob.planPath))}`, `          cat > ${shellWord(sourceJob.planPath)} <<'ASYNC_SOURCE_PLAN'`, ...planJson.split("\n").map((line) => `          ${line}`), "          ASYNC_SOURCE_PLAN");
+}
 function renderGeneratedPagesJob(lines, model) {
     const pages = model.pages;
     if (!pages.target)
@@ -572,6 +715,7 @@ function renderGeneratedPagesJob(lines, model) {
     renderRunActionStep(lines, "Run Pages target", `${model.command} github check && ${model.command} run-task ${shellWord(pages.target)}`, {});
     lines.push("");
     renderPagesBuildSteps(lines, pages);
+    renderEvidenceCollectStep(lines, model);
     lines.push("");
 }
 function renderGeneratedPagesCondition(pages) {
@@ -605,6 +749,17 @@ function renderRunActionStep(lines, name, command, env, options = {}) {
     lines.push("", `      - name: ${name}`, `        uses: ${ASYNC_RUN_ACTION}`, "        with:", `          command: ${JSON.stringify(command)}`, "          check-generated: false", `          artifact-name: ${options.artifactName ?? "async-pipeline-${{ github.job }}-runs"}`);
     renderActionEnv(lines, env);
 }
+function renderEvidenceCollectStep(lines, model, options = {}) {
+    if (!model.evidence.enabled)
+        return;
+    const suffix = options.matrix ? "${{ github.job }}-${{ strategy.job-index }}" : "${{ github.job }}";
+    lines.push("", "      - name: Collect evidence manifest", "        if: ${{ always() }}", `        uses: ${ASYNC_EVIDENCE_ACTION}`, "        with:", "          mode: collect", "          paths: |", ...model.evidence.paths.map((path) => `            ${path}`), ...(model.evidence.receiptPaths.length > 0
+        ? [
+            "          receipt-paths: |",
+            ...model.evidence.receiptPaths.map((path) => `            ${path}`)
+        ]
+        : []), `          manifest-path: ".async/evidence/${suffix}/manifest.json"`, `          summary-path: ".async/evidence/${suffix}/summary.md"`, `          artifact-name: ${model.evidence.artifactNamePrefix}-${suffix}`, `          retention-days: ${model.evidence.retentionDays}`, `          if-no-files-found: ${model.evidence.ifNoFilesFound}`, `          include-summary: ${model.evidence.includeSummary ? "true" : "false"}`);
+}
 function resolveLifecycleJobPlan(model, job) {
     if (job.execution || job.target.length !== 1)
         return undefined;
@@ -852,6 +1007,10 @@ function splitShellWords(command) {
 function safeArtifactPart(value) {
     return value.replace(/[^A-Za-z0-9_.-]+/gu, "-");
 }
+function safeGeneratedJobId(value) {
+    const normalized = value.toLowerCase().replace(/[^a-z0-9_-]+/gu, "-").replace(/^-+|-+$/gu, "");
+    return normalized || "job";
+}
 function renderPackagePreviewJob(lines, model) {
     const preview = model.packagePreviews;
     if (!preview.package || !preview.target)
@@ -872,7 +1031,8 @@ function renderPackagePreviewJob(lines, model) {
         lines.push("", "      - name: Build pipeline CLI", `        run: ${model.buildCommand}`);
     }
     renderRunActionStep(lines, "Run package preview target", `${model.command} github check && ${model.command} run-task ${shellWord(preview.target)}`, {});
-    lines.push("", "      - name: Publish package preview", `        uses: ${ASYNC_PREVIEW_ACTION}`, "        with:", `          package-path: ${JSON.stringify(preview.package)}`, `          target-registry: ${JSON.stringify(preview.registry)}`, ...(preview.namespace ? [`          namespace: ${JSON.stringify(preview.namespace)}`] : []), "          mode: pr", `          comment: ${preview.comment ? "true" : "false"}`, `          token-env-name: ${JSON.stringify(preview.tokenEnv)}`, "        env:", "          CI: true", `          ${preview.tokenEnv}: \${{ secrets.${preview.tokenEnv} }}`, "");
+    lines.push("", "      - name: Publish package preview", `        uses: ${ASYNC_PREVIEW_ACTION}`, "        with:", `          package-path: ${JSON.stringify(preview.package)}`, `          target-registry: ${JSON.stringify(preview.registry)}`, ...(preview.namespace ? [`          namespace: ${JSON.stringify(preview.namespace)}`] : []), "          mode: pr", `          comment: ${preview.comment ? "true" : "false"}`, `          token-env-name: ${JSON.stringify(preview.tokenEnv)}`, "        env:", "          CI: true", `          ${preview.tokenEnv}: \${{ secrets.${preview.tokenEnv} }}`);
+    renderEvidenceCollectStep(lines, model);
     lines.push("");
 }
 function renderBridgeJob(lines, model) {
@@ -894,6 +1054,7 @@ function renderBridgeJob(lines, model) {
     }
     renderRunActionStep(lines, "Check generated workflow", `${model.command} github check`, {});
     renderBridgePullStep(lines, bridge);
+    renderEvidenceCollectStep(lines, model);
     lines.push("");
 }
 function renderBridgeCondition(bridge) {
@@ -921,6 +1082,28 @@ function renderBridgePullStep(lines, bridge) {
     ].map(shellWord).join(" ");
     lines.push("", "      - name: Pull and apply Async bridge change sets", `        uses: ${ASYNC_RUN_ACTION}`, "        with:", `          command: ${JSON.stringify(command)}`, "          check-generated: false", "          artifact-name: async-bridge-${{ github.run_id }}", "        env:", "          CI: true", `          ASYNC_PROJECT_URL: \${{ vars.${bridge.endpointVar} }}`, `          ASYNC_PROJECT_TOKEN: \${{ secrets.${bridge.tokenEnv} }}`, "          GITHUB_REPOSITORY: ${{ github.repository }}", "          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}");
 }
+function renderEvidenceFanInJob(lines, model) {
+    const needs = evidenceProducerJobIds(model);
+    if (needs.length === 0)
+        return;
+    const evidence = model.evidence;
+    lines.push(`  ${yamlKey(evidence.job)}:`, `    name: ${evidence.job}`, `    needs: ${JSON.stringify(needs)}`, "    if: always()", "    runs-on: ubuntu-latest", "    permissions:", "      contents: read", "    steps:", "      - name: Merge evidence manifests", `        uses: ${ASYNC_EVIDENCE_ACTION}`, "        with:", "          mode: merge", `          artifact-pattern: ${evidence.artifactNamePrefix}-*`, "          manifest-path: .async/evidence/index.json", "          summary-path: .async/evidence/index.md", `          artifact-name: ${evidence.artifactNamePrefix}-index`, `          retention-days: ${evidence.retentionDays}`, `          if-no-files-found: ${evidence.ifNoFilesFound}`, `          include-summary: ${evidence.includeSummary ? "true" : "false"}`, "");
+}
+function evidenceProducerJobIds(model) {
+    const ids = new Set(model.jobs.map((job) => job.id));
+    for (const sourceJob of model.sourceImpactJobs) {
+        ids.add(sourceJob.planJob);
+        ids.add(sourceJob.matrixJob);
+    }
+    if (model.pages.enabled)
+        ids.add(model.pages.job);
+    if (model.packagePreviews.enabled)
+        ids.add("package-preview");
+    if (model.bridge.actionsJob.enabled)
+        ids.add(model.bridge.job);
+    ids.delete(model.evidence.job);
+    return [...ids].sort((left, right) => left.localeCompare(right));
+}
 function renderDependabotAutoMergeJob(lines, ecosystems) {
     lines.push("  dependabot-auto-merge:", "    name: dependabot-auto-merge", "    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.event.pull_request.draft == false", "    runs-on: ubuntu-latest", "    permissions:", "      contents: write", "      pull-requests: write", "    steps:", "      - name: Fetch Dependabot metadata", "        id: dependabot-metadata", `        uses: ${DEPENDABOT_FETCH_METADATA_ACTION}`, "        with:", "          github-token: ${{ secrets.GITHUB_TOKEN }}", "", "      - name: Merge validated Dependabot PR", `        uses: ${ASYNC_DEPENDABOT_MERGE_ACTION}`, "        with:", "          pull-request-number: ${{ github.event.pull_request.number }}", "          actor: ${{ github.event.pull_request.user.login }}", "          dependency-ecosystem: ${{ steps.dependabot-metadata.outputs.package-ecosystem }}", "          allowed-ecosystems: |", ...ecosystems.map((ecosystem) => `            ${ecosystem}`), "        env:", "          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}", "");
 }