@norskvideo/ctl-dev-kit 0.1.46 → 0.1.48
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -10,10 +10,12 @@
|
|
|
10
10
|
# norsk-ctl daemon to the `latest` channel (dev-only; CI downloads ctl
|
|
11
11
|
# directly, so a stale pin never affects CI or customers).
|
|
12
12
|
#
|
|
13
|
-
# Commits the bump straight to main (nightly cron + on demand).
|
|
14
|
-
#
|
|
15
|
-
#
|
|
16
|
-
#
|
|
13
|
+
# Commits the bump straight to main (nightly cron + on demand). The push is
|
|
14
|
+
# made with CI_DISPATCH_TOKEN (a PAT), so it DOES fire the product's push-
|
|
15
|
+
# triggered workflows (checks, build-image, integration) against the bumped
|
|
16
|
+
# pins; a GITHUB_TOKEN push would not (Actions' recursion guard), and the bump
|
|
17
|
+
# would land unverified until the next human push. A red run at 04:2x on main
|
|
18
|
+
# is the signal that a Norsk nightly is bad and the bump needs reverting.
|
|
17
19
|
#
|
|
18
20
|
# Single-sourced in @norskvideo/ctl-dev-kit (conventions/upgrade-latest.yml) and
|
|
19
21
|
# copied verbatim into each product repo; the check:drift gate fails CI if a copy
|
|
@@ -37,12 +39,17 @@ jobs:
|
|
|
37
39
|
changed: ${{ steps.bump.outputs.changed }}
|
|
38
40
|
summary: ${{ steps.bump.outputs.summary }}
|
|
39
41
|
steps:
|
|
42
|
+
# Check out with CI_DISPATCH_TOKEN, not the automatic GITHUB_TOKEN: the
|
|
43
|
+
# checkout credential is what the push to main below authenticates with,
|
|
44
|
+
# and only a PAT push triggers the push-driven workflows that validate the
|
|
45
|
+
# new pins (see the header). Same arrangement as sync-dev-kit.yml.
|
|
40
46
|
# clean: false -- the integration suite (shared x64 pool) leaves root-owned
|
|
41
47
|
# bind-mount dirs under test-temp/ that a non-root git clean can't remove
|
|
42
48
|
# (EACCES). These jobs never need those files; skip the clean so an innocent
|
|
43
49
|
# bystander checkout doesn't choke on another workflow's leftovers.
|
|
44
50
|
- uses: actions/checkout@v5
|
|
45
51
|
with:
|
|
52
|
+
token: ${{ secrets.CI_DISPATCH_TOKEN }}
|
|
46
53
|
clean: false
|
|
47
54
|
|
|
48
55
|
- name: Resolve the nightly channel and rewrite the coupled pins
|