Skip to content

chore(ci): QA pass — action pins, integration gate, dev docs build, practice flow - #32

Open
murffious wants to merge 4 commits into
devfrom
chore/ci-practice-flow
Open

murffious wants to merge 4 commits into
devfrom
chore/ci-practice-flow

Conversation

@murffious

Copy link
Copy Markdown
Owner

What changed

QA pass over the repository on 2026-09-07. Every CI gate was green locally and remotely; the defects were in the scaffolding around the gates rather than the gates themselves.

  • Action pins two majors behind, Node 20 deprecation annotations on every run. Bumped to the Node 24 majors; Dependabot (monthly, grouped, targets dev) keeps them current.
  • check_pathway_integration.py required by CONTRIBUTING, never run by CI. Added to the test job.
  • Docs built on PRs to dev but not on pushes to dev. Push trigger added; deploy still gated on main.
  • release_check.sh pinned to 0.1.0 and ran three test files. Now reads pyproject.toml and runs the suite. Verified end to end locally.
  • Default PR template (the pathway one only applied with ?template=), CONTRIBUTING sections on hotfix sync-back and releasing, packs/COVERAGE.md path fixed in two places, ROADMAP Phase 1 checkboxes made truthful.

Alongside this PR a ci-required ruleset on main and dev requires a pull request and these checks: separation gate, test 3.11/3.12/3.13, Coverage, docs build. Admin bypass on PR only.

Checks I ran locally

  • ruff, full pytest, pathway packs, integration gate
  • all five separation-job gates
  • mkdocs build --strict, build_notebooks.py --check, cookbook tests
  • scripts/release_check.sh (the corrected version)

🤖 Generated with Claude Code

murffious and others added 4 commits September 7, 2026 21:04
…ractice flow

Every action pin in ci.yml, docs.yml and publish.yml was two majors behind and
GitHub annotated each green run with a Node 20 deprecation notice nobody read.
Bumped to the Node 24 majors; a Dependabot config (target dev, monthly, grouped)
keeps them from rotting again.

CONTRIBUTING has required `scripts/check_pathway_integration.py` to exit 0
before merge since the pathway template landed, but CI never ran it. It does now.

docs.yml built on PRs to dev but not on pushes to dev, so the integration branch
carried less evidence than main. Push trigger added; deploy stays gated on main.

scripts/release_check.sh asserted __version__ == "0.1.0" and ran three test
files. It has failed silently on every release since 0.2.0; it now reads the
version from pyproject.toml and runs the full suite. Verified locally end to end.

Also: a default pull-request template (the pathway one only applied with a
?template= query), CONTRIBUTING sections on hotfix sync-back and releasing
(f0199c8 sat on main alone until this pass fast-forwarded dev), the
packs/COVERAGE.md path corrected in two places, and ROADMAP Phase 1 checkboxes
brought up to what actually exists.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
…e it in the release step

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Private vulnerability reporting enabled on the repository the same day.
SECURITY.md draws the line this project needs drawn: a wrong number is the
worst bug we have, but it is a public evidence issue, not a private report.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant