[ci-maintainer] Import reference architectures fails daily: raster-embedded SVGs, rsvg-convert missing (fix PR #49 open)

[hivecommons-hive]

CI Issue

The daily Import reference architectures workflow fails at npm run validate:architecture-assets because two imported SVGs contain embedded raster image data:

[error] static/img/architectures/swisscom-cloud-native-telco/swisscom-cloud-native-telco-automation-architecture-overview.svg: contains embedded raster image data
[error] static/img/architectures/zeiss/solutionArchitecture.svg: contains embedded raster image data

scripts/import-architectures.mjs already handles this by shelling out to rsvg-convert to rasterize these SVGs to PNG — but the CI runner never installs it, so the script warns (Could not convert raster-embedded SVG; consider installing rsvg-convert) and validation then fails.

Evidence

• Latest failing run: 31236125534 (2026-08-08T02:57, schedule)
• The workflow has no successful run on record (2/2 failures).

Recommendation

Merge PR #49 (ci: install librsvg2-bin for import-architectures workflow, open since 2026-08-08, mergeable/clean) — it adds the one-line apt install librsvg2-bin step. This issue gives that PR a Fixes # target.

---

Filed by ci-maintainer agent (ACMM L6 — full mode)

[hivecommons-hive]

Status update (2026-09-16)

Still failing daily — latest run 35048610804 (2026-09-16T02:36Z), same two raster-embedded SVGs, same rsvg-convert missing cause.

Fix PR #49 was closed unmerged. The fix is a workflow-file change (one line in .github/workflows/import-architectures.yml), and this hive's ISSUES_AND_PRS App token lacks the Workflows permission, so the fix cannot be re-pushed by an agent in this mode — GitHub rejects workflow-file pushes server-side. This needs a maintainer using user credentials, or an ISSUES_PRS_MERGE agent where the App installation has Workflows read/write, to land.

Exact replacement text (verified against PR #49's diff). In .github/workflows/import-architectures.yml, immediately before - run: npm ci in the import job, add:

      - run: sudo apt-get update && sudo apt-get install -y librsvg2-bin

Verification after applying: trigger the workflow via workflow_dispatch (or wait for the 02:36Z schedule); the import step should rasterize the two SVGs instead of warning, and validate:architecture-assets should exit 0.

---

Comment by ci-maintainer agent (ACMM L4/L5 — hold-gated mode)

🐝 Hive Agent: ci-maintainer | Instance: hosted-available-lke648397-260827-5n31 | SHA: unknown

— hive: agent=ci-maintainer backend=copilot model=kimi-k3

[hivecommons-hive]

Scanner update: root cause has shifted (2026-09-17)

The librsvg2-bin install landed in #182 (d61c87e), so the raster-SVG conversion crash is fixed — but the workflow still fails daily, now at a later step. Latest run 35175044427 (2026-09-17) fails at validate:architectures:

2 error(s) in architecture catalog:
  [error] swisscom-cloud-native-telco: missing asset /img/architectures/swisscom-cloud-native-telco/swisscom-cloud-native-telco-automation-architecture-overview.svg
  [error] zeiss: missing asset /img/architectures/zeiss/solutionArchitecture.svg

New root cause: each nightly import re-fetches frontmatter from cncf/architecture that references .svg assets. scripts/import-architectures.mjs rasterizes raster-embedded SVGs to .png via rsvg-convert (which now works), but the imported record keeps the original .svg reference — so validation fails on the missing .svg. The committed data on main references .png consistently, which is why deploys pass; only the fresh-import path breaks.

Fix already open: PR #242 ("rewrite SVG asset references to PNG after raster-embedded conversion") addresses exactly this. Merging it should turn this workflow green.

---

Analysis by scanner agent (ACMM L4 — issues-only mode)

🐝 Hive Agent: scanner | Instance: hosted-available-lke648397-260827-5n31 | SHA: unknown

— hive: agent=scanner backend=copilot model=kimi-k3

[hivecommons-hive]

Status update (2026-09-18)

Still failing daily — latest run 35300028894 (2026-09-18T02:37Z), identical two missing-asset errors at `validate:architectures`.

Two candidate fixes are now open, both MERGEABLE — a human needs to pick one and close the other:

• PR fix: rewrite SVG asset references to PNG after raster-embedded conversion #242 — `fix: rewrite SVG asset references to PNG after raster-embedded conversion`
• PR fix(scripts): record post-conversion asset paths in import-architectures #261 — `fix(scripts): record post-conversion asset paths in import-architectures` (hold-gated agent PR)

Both address the same stale-`.svg`-reference root cause in `scripts/import-architectures.mjs`. Merging either should turn this workflow green; this issue stays blocked on that review decision.

---

Filed by ci-maintainer agent (ACMM L4/L5 — hold-gated mode)

🐝 Hive Agent: ci-maintainer | Instance: hosted-available-lke648397-260827-5n31 | SHA: unknown

— hive: agent=ci-maintainer backend=copilot model=kimi-k3

[hivecommons-hive]

Update 2026-09-19: original cause fixed, failure mode has moved

The original root cause (missing rsvg-convert on the runner) was fixed by #182, which added sudo apt-get install -y librsvg2-bin to the workflow (merged 2026-09-16, d61c87e).

The workflow still fails daily — runs 35175044427 (09-17), 35300028894 (09-18), 35416042974 (09-19) — but now at a later step, npm run validate:architectures:

2 error(s) in architecture catalog:
  [error] swisscom-cloud-native-telco: missing asset /img/architectures/swisscom-cloud-native-telco/swisscom-cloud-native-telco-automation-architecture-overview.svg
  [error] zeiss: missing asset /img/architectures/zeiss/solutionArchitecture.svg

New root cause (confirmed in scripts/import-architectures.mjs @ 00b44df)

1. Lines 96–103: every file under the upstream images/ dir is copied and its path pushed to record.assets — including .svg files.
2. Line 105: sanitizeArchitectureAssets() then converts raster-embedded SVGs to PNG via rsvg-convert and deletes the .svg (rmSync(file), line 257) — but record.assets was already built and still lists the deleted .svg path.
3. cleanMarkdown() (lines 172–174) likewise rewrites inline image refs preserving the .svg extension, so generated docs pages would also reference deleted files.
4. validate:architectures then fails on the dangling references, so no import PR is ever created.

The committed data on main is clean (validator passes locally: "Validated 7 architecture records") — the failure only manifests on freshly imported data in CI.

Fix already open

PR #242 (OPEN/MERGEABLE) fixes exactly this: it rebuilds record.assets from the post-sanitization directory listing and has sanitizeArchitectureAssets() return a rename map that cleanMarkdown() uses to rewrite .svg → .png refs. Merging #242 should make this workflow green; suggest adding Closes #121 to that PR (it currently cites #218).

---

Analysis by scanner agent (ACMM L4 — issues-only mode)

🐝 Hive Agent: scanner | Instance: hosted-available-lke648397-260827-5n31 | SHA: unknown

— hive: agent=scanner backend=copilot model=kimi-k3

[hivecommons-hive]

Correction/addendum to the above: merging #242 unblocks validate:architectures, but the workflow will then fail at its final peter-evans/create-pull-request step — the repo-level setting blocking GITHUB_TOKEN from creating PRs (tracked in #122, which explicitly names this workflow) applies here too. Both #242 and the #122 settings fix are needed for a green daily run.

---

Analysis by scanner agent (ACMM L4 — issues-only mode)

🐝 Hive Agent: scanner | Instance: hosted-available-lke648397-260827-5n31 | SHA: unknown

— hive: agent=scanner backend=copilot model=kimi-k3