micro--go-micro
Claude
4b61facf0d
Run Tests / Unit Tests (push) Has been cancelled
Harness (E2E) / Harnesses (mock LLM) (push) Has been cancelled
Harness (E2E) / Provider harnesses (live LLM conformance) (push) Has been cancelled
Lint / golangci-lint (push) Has been cancelled
govulncheck / govulncheck (push) Has been cancelled
Run Tests / Etcd Integration Tests (push) Has been cancelled
Comment out the automatic triggers on every loop workflow so the autonomous engine stops firing on its own while we land the current round of fixes 1:1: - planner / builder / coherence / security / release: drop the cron schedules (no more hourly/daily/weekly runs, no nightly auto-release). - triage: drop the workflow_run trigger so CI failures no longer auto-dispatch agent tasks. Each keeps workflow_dispatch, so any loop can still be run on demand, and re-enabling is just uncommenting the trigger. No prompts, tokens, or logic changed — only when the workflows fire. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL
101 行
4.0 KiB
YAML
101 行
4.0 KiB
YAML
name: "Loop: Release"
|
|
|
|
# Generated by `micro loop init`. Cuts the next tag when the default branch has
|
|
# new commits since the latest one, and pushes it with a PAT (CODEX_TRIGGER_TOKEN)
|
|
# so any tag-triggered release workflow fires. The bump reflects what shipped,
|
|
# read from the CHANGELOG [Unreleased] section: new features (Added/Changed) cut
|
|
# a MINOR; fixes/docs only cut a PATCH; breaking changes are skipped so a MAJOR
|
|
# stays a human decision.
|
|
#
|
|
# The tag MUST be pushed with a PAT, not the default GITHUB_TOKEN: a tag pushed
|
|
# by GITHUB_TOKEN does not trigger other workflows (Actions blocks that recursion).
|
|
|
|
on:
|
|
workflow_dispatch: {}
|
|
# PAUSED 2026-07-12: automatic nightly release disabled while the team does
|
|
# focused 1:1 fixes. Cut a release on demand via workflow_dispatch. Re-enable
|
|
# by uncommenting the schedule below.
|
|
# schedule:
|
|
# - cron: "0 23 * * *"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: loop-release
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # need full history + all tags
|
|
# Do NOT persist the default GITHUB_TOKEN as a git credential: it would
|
|
# be sent on the PAT push below and override it, so the tag push would
|
|
# authenticate as github-actions[bot] and 403. Letting the PAT in the
|
|
# push URL be the only credential is the whole point.
|
|
persist-credentials: false
|
|
- name: Cut the next patch tag if there are new commits
|
|
env:
|
|
RELEASE_TOKEN: ${{ secrets.CODEX_TRIGGER_TOKEN }}
|
|
REPO: ${{ github.repository }}
|
|
run: |
|
|
if [ -z "$RELEASE_TOKEN" ]; then
|
|
echo "CODEX_TRIGGER_TOKEN is not set — skipping."
|
|
exit 0
|
|
fi
|
|
git fetch --tags --force
|
|
|
|
LATEST=$(git tag --list 'v*.*.*' --sort=-v:refname | head -1)
|
|
if [ -z "$LATEST" ]; then
|
|
echo "no vMAJOR.MINOR.PATCH tag found — aborting so nothing weird gets tagged."
|
|
exit 1
|
|
fi
|
|
echo "latest tag: $LATEST"
|
|
|
|
COUNT=$(git rev-list --count "$LATEST"..HEAD)
|
|
echo "commits since $LATEST: $COUNT"
|
|
if [ "$COUNT" -eq 0 ]; then
|
|
echo "no new commits since $LATEST — no release."
|
|
exit 0
|
|
fi
|
|
|
|
ver="${LATEST#v}"
|
|
major="${ver%%.*}"
|
|
rest="${ver#*.}"
|
|
minor="${rest%%.*}"
|
|
patch="${rest#*.}"
|
|
case "$major.$minor.$patch" in
|
|
[0-9]*.[0-9]*.[0-9]*) ;;
|
|
*) echo "unexpected tag shape: $LATEST" ; exit 1 ;;
|
|
esac
|
|
|
|
# Choose the bump from what actually shipped, read from the CHANGELOG
|
|
# [Unreleased] section (kept current by the coherence role):
|
|
# new features (### Added / ### Changed) -> MINOR
|
|
# fixes/docs only -> PATCH
|
|
# breaking (### Removed / "(breaking)") -> skip; a major is a human call
|
|
UNRELEASED=""
|
|
if [ -f CHANGELOG.md ]; then
|
|
UNRELEASED=$(awk '/^## \[Unreleased\]/{f=1; next} /^## \[/{f=0} f' CHANGELOG.md)
|
|
fi
|
|
if printf '%s\n' "$UNRELEASED" | grep -qiE '^### Removed|^### Changed \(breaking\)|BREAKING'; then
|
|
echo "CHANGELOG [Unreleased] contains breaking changes — a major release is a human decision. Skipping."
|
|
exit 0
|
|
elif printf '%s\n' "$UNRELEASED" | grep -qE '^### (Added|Changed)'; then
|
|
NEXT="v${major}.$((minor + 1)).0"
|
|
KIND="minor (new features)"
|
|
else
|
|
NEXT="v${major}.${minor}.$((patch + 1))"
|
|
KIND="patch (fixes/docs only)"
|
|
fi
|
|
echo "cutting: $NEXT — $KIND ($COUNT commits since $LATEST)"
|
|
|
|
git config user.name "loop release bot"
|
|
git config user.email "noreply@users.noreply.github.com"
|
|
git tag -a "$NEXT" -m "Release $NEXT — automated $KIND ($COUNT commits since $LATEST)"
|
|
git push "https://x-access-token:${RELEASE_TOKEN}@github.com/${REPO}.git" "$NEXT"
|
|
echo "Pushed $NEXT."
|