[shared-ci] build-test failing across cncf/prow-github-actions

[hivecommons-hive]

Finding

build-test (.github/workflows/test.yml, npm run test:coverage) is red on at least three open PRs for one cause that none of their diffs touch:

PR	SHA	red run	twin run on same SHA
#286	f143cea	37176045750, 37176043225	both red
#289	—	37164340088	green
#293	79b5afd	37176595985	green

In every red run all 81 test files / 1648 tests pass; the job exits 1 on a single vitest Unhandled Error:

AssertionError: The expression evaluated to a falsy value:
  assert(err.code !== "ERR_TLS_CERT_ALTNAME_INVALID")
  ❯ TLSSocket.onHttpSocketError node:internal/deps/undici/undici:7806:7
This error originated in "__tests__/issueCommentTest/meow.test.ts"

Root cause (traced in #284): a status-only msw mock in the unit /meow suite leaves undici reading an unframed body; meow.ts's body.cancel() makes undici pre-connect a replacement socket that @mswjs/interceptors passes through to the real api.thecatapi.com:443. Whether the stray handshake trips ERR_TLS_CERT_ALTNAME_INVALID depends on the runner's network path, so the check flips red/green per run — main's last runs (a270568, 2026-10-03) are green, but today both build-test runs on #286 went red in a row.

Recommendation

• The durable fix is already open and green: test(meow): keep the unit /meow suite off the real network under msw 3 #287 (__tests__/issueCommentTest/meow.test.ts only; Closes #284). It is hold-labelled and needs a human to review and lift the hold.
• Until test(meow): keep the unit /meow suite off the real network under msw 3 #287 merges, do not re-run, retrigger, or push to the affected PRs for this failure — each is deferred with a <!-- hive-shared-ci-N --> marker pointing here so they can be re-run once the baseline is fixed.
• After test(meow): keep the unit /meow suite off the real network under msw 3 #287 merges, re-run build-test on the marked PRs (or update-branch them) and close this incident.

Priority

• Impact: high (blocks every PR's required check intermittently)
• Effort: low (fix exists in test(meow): keep the unit /meow suite off the real network under msw 3 #287)

---

Filed by quality agent (hold-gated mode)

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: 3fc21f2

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

/kind failing-test

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: 3fc21f2

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Additional affected PR, same signature (81/81 test files pass, job exits 1 on the single ERR_TLS_CERT_ALTNAME_INVALID unhandled error from __tests__/issueCommentTest/meow.test.ts):

PR	SHA	red run	twin run on same SHA
#298	0c046cb	37189010670	37188992176 green

Red/green on the same SHA again confirms this is baseline flake, not the diff. #298 already carries the <!-- hive-shared-ci-294 --> marker; no retries or pushes until #287 lands.

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: unknown

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Additional affected PR, same signature (81/81 test files, 1652/1652 tests pass; job exits 1 on the single ERR_TLS_CERT_ALTNAME_INVALID unhandled error from __tests__/issueCommentTest/meow.test.ts):

PR	SHA	red runs
#304	21ffcc7	37210468217, 37210440285

#304 touches only __tests__/bundle/triggerArms.test.ts; stamped with <!-- hive-shared-ci-294 -->. main's last three build-test runs (a270568, 44445c8, 14f94d0 on 2026-10-03) are green, consistent with the per-run network-path flake. Still waiting on #287.

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: unknown

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Additional affected PR, same signature (81/81 test files pass; job exits 1 on the single ERR_TLS_CERT_ALTNAME_INVALID unhandled error from __tests__/issueCommentTest/meow.test.ts):

PR	SHA	red run	twin run on same SHA
#306	b2465ba	37218349088	37218322987 green

main has had no build-test run since 3fc21f2 (#263 merged 2026-10-03 20:09Z); its last runs on a270568 are green, so the baseline is stale rather than red. #287 remains the fix and is green.

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: 3fc21f2

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Two more affected PRs, same signature (81/81 test files pass; job exits 1 on the single ERR_TLS_CERT_ALTNAME_INVALID unhandled error from __tests__/issueCommentTest/meow.test.ts); both red runs on each SHA:

PR	SHA	red runs	files touched
#310	709cb6c	37234002533, 37233899279	__tests__/bundle/pullReqJobsArms.test.ts
#312	f5e5587	37234340602, 37234245909	__tests__/bundle/labelSyncFailureArms.test.ts

Both stamped with <!-- hive-shared-ci-294 -->. Now 7 held PRs (#286, #293, #298, #304, #306, #310, #312) are blocked on #287 — four consecutive red runs on the two newest heads suggests the flake rate is rising, so lifting the hold on #287 is the single highest-leverage human action for this repo.

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: unknown

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Additional affected PR, same signature (81/81 test files, 1647/1647 tests pass; job exits 1 on the single ERR_TLS_CERT_ALTNAME_INVALID unhandled error from __tests__/issueCommentTest/meow.test.ts); both runs on the SHA red:

PR	SHA	red runs	files touched
#316	4d52012	37250277147, 37250241099	__tests__/bundle/requireMatchingLabelArms.test.ts

main still has no build-test run newer than a270568 (green, 2026-10-03); all 8 open quality PRs (#286, #293, #298, #304, #306, #310, #312, #316) are now stamped <!-- hive-shared-ci-294 -->. Fix remains #287 (held, awaiting human review).

---

🐝 Hive Agent: quality | Instance: hosted-available-lke648397-260827-5q9t | SHA: unknown

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88