Repository navigation
Reduce duplicate CI work and fix release evidence - #37
Merged
Merged
Conversation
PostgreSQL fixture versions do not change the Plex image. Share four immutable native builds across eight test lanes, retain byte binding and certification requirements, and bound normal container logs while keeping explicit diagnostics available. Constraint: Preserve the running frozen v1.3.23 certification source Confidence: high Scope-risk: moderate Tested: 103 Python regressions; actionlint 1.7.12; bash syntax; whitespace; independent workflow review Not-tested: Revised workflow execution on GitHub runners Directive: Merge after v1.3.23 certification and release, preserving its evidence
Docker build records use gzip storage and cannot be extracted by the ZIP artifact action. Exclude only those records while retaining the workload evidence and release bundle. Confidence: high Scope-risk: narrow Tested: Actual build-record gzip signature; actionlint; whitespace checks Not-tested: Updated filter on GitHub runners
Pair the duration evidence with the full checks already completed by its identical smoke candidate. Upload the validated release bytes again for the current issuer attempt, retaining the independent publication timestamp and provenance checks. Constraint: Partial infrastructure retries must not authenticate stale publication artifacts Confidence: high Scope-risk: moderate Directive: Keep final provenance and timestamp guards strict Tested: 108 Python tests, actionlint, shell syntax, diff checks Not-tested: Revised workflow on native GitHub runners
cgnl
changed the title
Use Docker Hub for the identical pinned Alpine manifest so builds and metadata tests can start when ECR rejects downloads. Confidence: high Scope-risk: narrow Tested: Docker Hub manifest digest and platforms, actionlint, diff check Not-tested: Updated jobs on GitHub runners
cgnl
marked this pull request as ready for review
October 12, 2026 21:54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Native certification completed all eight 350-minute workloads, but release assembly rejected checks intentionally performed by the matching smoke tests and reused an artifact from an earlier attempt. This change validates both results against the same source, image and bundle, then uploads those exact validated release bytes for the current attempt. Final publication provenance and timestamp checks remain strict.
The matrix builds four images once and reuses them across PostgreSQL versions. Normal logs are bounded, Docker build records are excluded from ZIP downloads, and explicit diagnostic logging remains available. Operator-reviewed release configuration can be loaded from a repository variable and is checked again before publication.
Validation: 108 Python tests, actionlint, shell syntax and diff checks passed. Independent review passed after correcting the run-ID export and trusted helper list. The revised native workflow still needs runner validation.