Skip to content

ci(sibling-pins): skip validation on PR text edits - #2546

Merged
mariusvniekerk merged 9 commits into
mainfrom
pr/ci-waste-1-cancel-replaced-runs
Oct 30, 2026
Merged

mariusvniekerk merged 9 commits into
mainfrom
pr/ci-waste-1-cancel-replaced-runs

Conversation

@rodboev

@rodboev rodboev commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Editing an agentsview PR's title or description no longer starts a sibling-pin check, which caused 36% of agentsview's sibling-pin runs last week (269 of 755). A change to the PR's base branch still reruns the check, since it can change which pins are valid.

New PR commits make earlier dependency verdicts obsolete. Stop those runs so they release runners for the current commit, while each merge-group run keeps its own result.
Changing a PR title or description leaves its dependency files unchanged. Reserve runner time for events that can change the dependency verdict.
The sibling pin check reads the proposed merge with the PR's base. A new base can bring different dependency pins, so dropping all PR edits left a stale verdict after a retarget. Title and description edits still cannot change that verdict and skip the check.

A skipped job reports success. The skipped run gets its own check name so it cannot satisfy the required sibling check. It also gets its own concurrency group, so a text edit cannot cancel a check that is still running for the latest commit.
Replacement dependency checks need the same cancellation group even when
an event omits pull request details. A single merge-ref key keeps those
runs together while text-only edits retain their independent groups.
A title or description edit must preserve an active sibling check and its required result, while a base edit still needs validation. Keep that rationale next to the cancellation groups so later workflow changes retain both cases.
@roborev-ci

roborev-ci Bot commented Oct 29, 2026

Copy link
Copy Markdown

roborev: Combined Review (32909a4)

Verdict: No findings at or above medium severity.


Reviewers: 2x codex, codex (security), codex (test-value) | Synthesis: codex | Total: 1m46s

GitHub can show a conditional job name as its literal expression when the job is skipped. Keep the check name readable for title and body edits, and describe the existing skip and cancellation behavior accurately.
@roborev-ci

roborev-ci Bot commented Oct 30, 2026

Copy link
Copy Markdown

roborev: Combined Review (0a687bd)

Verdict: Changes require fixes for 1 finding.

High

  • .github/workflows/sibling-pins.yml:27: After sibling-pin validation fails, editing the PR title or body creates a newer skipped check named "Sibling pins on main" on the unchanged commit. GitHub accepts skipped jobs as successful required checks, allowing the failed gate to be satisfied without fixing the pins. Separate concurrency groups do not preserve the failed validation result.

    Fix: Give metadata-only runs a distinct check name, or execute validation whenever publishing the required "Sibling pins on main" check. Preserve validation for base changes.


Reviewers: 2x codex, codex (security), codex (test-value) | Synthesis: codex, 7s | Total: 3m0s

Check consumers group results by name. Skipped title and body edits
need a distinct name so they leave the dependency verdict visible
while avoiding runner work for those edits.
@roborev-ci

roborev-ci Bot commented Oct 30, 2026

Copy link
Copy Markdown

roborev: Combined Review (cdf4bba)

Verdict: No findings at or above medium severity.


Reviewers: 2x codex, codex (security), codex (test-value) | Synthesis: codex | Total: 1m50s

@rodboev
rodboev marked this pull request as ready for review October 30, 2026 02:35
@roborev-ci

roborev-ci Bot commented Oct 30, 2026

Copy link
Copy Markdown

roborev: Combined Review (365e422)

Verdict: No findings at or above medium severity.


Reviewers: 2x codex, codex (security), codex (test-value) | Synthesis: codex | Total: 1m50s

@mariusvniekerk
mariusvniekerk merged commit a7adc85 into main Oct 30, 2026
32 checks passed
@mariusvniekerk
mariusvniekerk deleted the pr/ci-waste-1-cancel-replaced-runs branch October 30, 2026 13:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants