Skip to content

Quote the step name that made package.yml unparseable - #7

Merged
HackTuah merged 2 commits into
mainfrom
ci/package-workflow-yaml
Sep 20, 2026
Merged

HackTuah merged 2 commits into
mainfrom
ci/package-workflow-yaml

Conversation

@HackTuah

Copy link
Copy Markdown
Member

One line. Reproduced locally with a YAML parser; the commit message carries the run and job ids. Also the reason this was invisible to the gate, recorded as a follow-up.

…seable

The public-readiness change replaced an em dash in a step name with a colon,
which turned the plain scalar into a mapping and made the whole file
unparseable. GitHub reported it as a run named after the file path on the
merge of pull request #1 (run 35477735783, zero jobs), and Dependabot's
github-actions updater failed on the same file (dependency_file_not_parseable,
job 1583380179). Reproduced locally with a YAML parser at line 173, column 25.

No gate step parses the workflow files, so the gate was green on a workflow
GitHub could not read. That is a rule that could be an enforcer and is not
one yet; recorded as a follow-up for the next slice rather than added here.

Signed-off-by: Ayla Croft <aylacroft@proton.me>
open-pull-requests-limit: 0 on all three ecosystems. Version bumps are not
this project's to take from a bot: VERSIONS.md is the pin list and a version
moves after a proposal and an approval. On its first run Dependabot opened
five version-bump pull requests in two minutes, and one of them, #2, was
merged by mistake in place of the pull request that fixes package.yml.
Security updates still arrive as pull requests with the gate run on them.

Signed-off-by: Ayla Croft <aylacroft@proton.me>
@HackTuah
HackTuah force-pushed the ci/package-workflow-yaml branch from e9e60cc to 43949d6 Compare September 20, 2026 00:10
@HackTuah
HackTuah merged commit 0a98b04 into main Sep 20, 2026
2 checks passed
@HackTuah
HackTuah deleted the ci/package-workflow-yaml branch September 20, 2026 00:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant