fix(ci): don't file failure issues for Renovate's branches
Some checks failed
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / notebooks-smoke (push) Has been cancelled
Deploy / changes (push) Has been cancelled
Deploy / notebooks (push) Has been cancelled
Deploy / zotero (push) Has been cancelled
Deploy / docs (push) Has been cancelled
Deploy / api (push) Has been cancelled
Deploy / bcda (push) Has been cancelled
Deploy / llm (push) Has been cancelled
Deploy / mc (push) Has been cancelled
Deploy / report (push) Has been cancelled

A red renovate/* branch already stays unmerged and shows on Renovate's
Dependency Dashboard; the auto-filer added an issue per failed job on
top (ten from today's first Renovate batch, #1397–#1407). The failure
step now skips branches named renovate/*, both as the push ref and as a
PR head. Regenerated via gen_config.py; pkg-supply-chain.yml, which
gen_config no longer emits, is edited the same way by hand.
This commit is contained in:
kert
2026-10-29 19:09:56 -04:00
parent da336fe6b2
commit d64c07f271
13 changed files with 31 additions and 27 deletions

View File

@@ -27,7 +27,7 @@ jobs:
run: uv run --no-project python dev/scripts/vendor_bcda_app.py --check
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -62,7 +62,7 @@ jobs:
run: uv run pytest tests/ -x --cov=src --cov-report=term-missing --cov-fail-under=99 -q -n auto
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -109,7 +109,7 @@ jobs:
run: uv run python dev/scripts/nb_integration.py --set ci-smoke
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -34,7 +34,7 @@ jobs:
docker exec llm uv run --no-sync stack llm index --collection comments
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -134,7 +134,7 @@ jobs:
crane push /tmp/notebooks.tar git:3000/homelab/stack/notebooks:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -192,7 +192,7 @@ jobs:
crane push /tmp/zotero.tar git:3000/homelab/stack/zotero:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -250,7 +250,7 @@ jobs:
crane push /tmp/docs.tar git:3000/homelab/stack/docs:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -308,7 +308,7 @@ jobs:
crane push /tmp/api.tar git:3000/homelab/stack/api:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -366,7 +366,7 @@ jobs:
crane push /tmp/bcda.tar git:3000/homelab/stack/bcda:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -424,7 +424,7 @@ jobs:
crane push /tmp/llm.tar git:3000/homelab/stack/llm:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -482,7 +482,7 @@ jobs:
crane push /tmp/mc.tar git:3000/homelab/stack/mc:latest --insecure
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -177,7 +177,7 @@ jobs:
fi
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -68,7 +68,7 @@ jobs:
run: python3 dev/scripts/nb_fe_smoke.py --image local/notebooks:build --network ci
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -101,7 +101,7 @@ jobs:
run: docker build -f infra/images/zotero.Dockerfile -t local/zotero:build .
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -134,7 +134,7 @@ jobs:
run: docker build -f infra/images/docs.Dockerfile -t local/docs:build .
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -167,7 +167,7 @@ jobs:
run: docker build -f infra/images/api.Dockerfile -t local/api:build .
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -200,7 +200,7 @@ jobs:
run: docker build -f infra/images/bcda.Dockerfile -t local/bcda:build .
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -233,7 +233,7 @@ jobs:
run: docker build -f infra/images/llm.Dockerfile -t local/llm:build .
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
@@ -266,7 +266,7 @@ jobs:
run: docker build -f infra/images/mc.Dockerfile -t local/mc:build infra/rustfs/
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -50,7 +50,7 @@ jobs:
exit "${golden_rc:-0}"
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -45,7 +45,7 @@ jobs:
run: python3 dev/scripts/nb_fe_smoke.py --url http://notebooks:2718 --network gateway
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -61,7 +61,7 @@ jobs:
run: uv run python dev/scripts/pkg_issues.py
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -132,7 +132,7 @@ jobs:
done
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -30,7 +30,7 @@ jobs:
dist/*.tar.gz
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -47,7 +47,7 @@ jobs:
run: docker start zotero
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |

View File

@@ -118,10 +118,14 @@ def _trivy_step(
def _failure_step(workflow_name: str, job_name: str) -> str:
"""Emit an if:failure() step that files a Gitea issue."""
"""Emit an if:failure() step that files a Gitea issue.
Not for Renovate's branches: Renovate holds a red branch back and shows
it on its Dependency Dashboard, so an issue per failed job is noise.
"""
return f"""\
- name: File failure issue
if: failure()
if: failure() && !startsWith(github.head_ref || github.ref_name, 'renovate/')
env:
GITEA_TOKEN: ${{{{ secrets.DEPLOY_TOKEN }}}}
run: |