Skip to content

chore: promote dev to main - #5

Merged
BryanLawless merged 1 commit into
mainfrom
dev
Nov 3, 2026
Merged

BryanLawless merged 1 commit into
mainfrom
dev

Conversation

@BryanLawless

@BryanLawless BryanLawless commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Promotes the dev sync and release secrets fix (#4).

The first `Main` run after the promotion failed in **Merge main into
dev**. The called `sync-dev.yml` job received an empty
`SNAPFLOW_AUTOMATION_PRIVATE_KEY`, even though its job sets
`environment: automation`. The release-please job in the same run read
the same secret fine, because it's defined directly in `main.yml`.

- `sync-dev.yml` now runs as its own workflow on pushes to `main`, so it
reads the `automation` environment directly. It never needed anything
from `main.yml`.
- `main.yml` now passes `secrets: inherit` to `release.yml`, which needs
release-please's outputs and the `beta` environment's R2 and TUF keys.
The zizmor `secrets-inherit` finding is suppressed with a reason.

Checked locally: actionlint passes, and zizmor reports only the existing
low-severity `self-repository` hints.
@coderabbitai

coderabbitai Bot commented Nov 3, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 44 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 075fa36b-ddac-4fd8-af1a-18a0ac43bf88
Commits

Reviewing files that changed from the base of the PR and between da3ddc1 and 3fa0a69.

Files selected for processing: 2
  • .github/workflows/main.yml
  • .github/workflows/sync-dev.yml
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.

@BryanLawless
BryanLawless merged commit 01a3321 into main Nov 3, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant