Skip to content

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production #57721

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production

fix(service-settings,cli): pick the data key file that opens the stored secrets, or refuse in production #57721

Triggered via pull request November 4, 2026 12:55
Status Success
Total duration 23m 35s
Artifacts 2

ci.yml

on: pull_request
Build UI Deps
Build UI Deps
Plan Test Core shards
1m 26s
Plan Test Core shards
Matrix: dogfood
Dogfood Verify CLI
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
Temporal Conformance (live PG + MySQL)
Build Core
7m 22s
Build Core
Build Docs
Build Docs
Live E2E UI
5m 16s
Live E2E UI
UI Published Artifacts
UI Published Artifacts
Matrix: test-ui
Type Check UI
0s
Type Check UI
Lint UI
0s
Lint UI
Build & E2E UI
0s
Build & E2E UI
Matrix: test
Dogfood Regression Gate
14s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 24 notices
Test Core shard timing drift
Test Core (1/8): 938.4s measured vs 716.0s predicted across 1 package(s) = 1.31x (warning past 1.3x, DRIFT past 1.5x). Heaviest overshoot: @objectstack/cli, predicted 716.0s, measured 938.4s. scripts/test-shard-timings.json is drifting from the runtime; refresh it before it reaches the drift bound (see scripts/measure-test-shard-timings.mjs). Not a failure: this step stays green on every event.
Test Core shard timing drift
Test Core (4/8): 1389.1s measured vs 1051.8s predicted across 6 package(s) = 1.32x (warning past 1.3x, DRIFT past 1.5x). Heaviest overshoot: @objectstack/cli, predicted 716.0s, measured 999.8s. scripts/test-shard-timings.json is drifting from the runtime; refresh it before it reaches the drift bound (see scripts/measure-test-shard-timings.mjs). Not a failure: this step stays green on every event.
Suite-duration ceiling
@objectstack/organizations: 138.53s, over its 137.91s ceiling. Slowest file: src/claim-org-seed-ownership-dispatch.pin.test.ts 9.13s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
Suite-duration ceiling
@objectstack/cloud-connection: 222.55s, over its 163.89s ceiling. Slowest file: src/marketplace-install-local-seed-lookup.test.ts 2.90s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.
filter
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfood Regression Gate
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Plan Test Core shards
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (5/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (5/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Live E2E UI
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Build Core)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Build Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (6/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (6/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (2/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (2/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (7/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (7/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (3/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (3/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (8/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (8/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (1/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (1/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Turbo remote cache disabled (Test Core (4/8) closure)
Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.
Test Core (4/8)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Test Core
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
build-output
18 MB
sha256:de7ec1c6722d5e3f0afaf39f5e7a9e05ecd64ee58d27eeddd32a299270559142
test-core-timing-table
87.6 KB
sha256:80a5e1e3954c71cb67a1e8b0f59370ddc13affc25ba6f0c97e3e7e0025d4a945