Files
stack/.gitea/workflows/comment-pull.yml
kert 592b845584
All checks were successful
CI / lint (push) Successful in 1m9s
CI / notebooks-smoke (push) Successful in 1m54s
Deploy / changes (push) Successful in 23s
CI / test (push) Successful in 4m25s
Infra CI / notebooks (push) Successful in 1m8s
Infra CI / zotero (push) Successful in 19s
Infra CI / docs (push) Successful in 1m21s
Infra CI / api (push) Successful in 1m15s
Infra CI / llm (push) Successful in 52s
Infra CI / mc (push) Successful in 17s
Infra CI / bcda (push) Successful in 1m47s
Deploy / notebooks (push) Has been skipped
Deploy / zotero (push) Has been skipped
Deploy / docs (push) Successful in 46s
Package Supply Chain / pkg-supply-chain (push) Successful in 1m31s
Deploy / api (push) Successful in 1m12s
Deploy / bcda (push) Successful in 1m47s
Deploy / mc (push) Has been skipped
Deploy / llm (push) Successful in 1m13s
Deploy / report (push) Successful in 14s
feat(bib): nightly pull of every open regulations.gov docket
Nothing pulled open dockets on a schedule, so the FY2027 Hospice
(CMS-2026-1156, 215 comments) and CY2027 ESRD (CMS-2026-2245, 228)
proposed-rule dockets sat unpulled for months.

- `stack bib pull-open-dockets`: walk every unsealed docket from its
  watermark (attachments on), then enrich the new stubs at the 1000/hr
  reg.gov budget. Sealed dockets cost nothing; a docket quiet long enough
  after its period closes seals itself, so the job idles between seasons.
- Comment Pull workflow (02:30 nightly, generated): register this year's
  PFS proposed rule when it appears, pull + enrich the open dockets in
  the api container, index new comments in the llm container.
- compose: api gets REGULATIONS_GOV_API_KEY and ./.state/comments (rw);
  the llm extra gains typer so `stack llm index` runs inside llm.
- CLI reference regenerated for the new command.

Security: streamlit 1.66.0 capped pillow <13, leaving pillow 12.3.0 with
41 advisories (5 critical) fixed only in 13.0. streamlit 1.66.1 (Oct 21)
lifts the cap; exempted from the 7-day cooldown via exclude-newer-package,
and constraint-dependencies holds pillow >=13. Lock scans clean.
2026-10-27 15:40:05 -04:00

52 lines
1.7 KiB
YAML

# DO NOT EDIT — generated by gen_config.py from stack.toml
# Re-generate: uv run python dev/scripts/gen_config.py
name: Comment Pull
on:
workflow_dispatch:
schedule:
- cron: "30 2 * * *"
jobs:
comment-pull:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: https://github.com/actions/checkout@v4
- name: Set up uv
run: curl -LsSf https://astral.sh/uv/install.sh | sh
env:
UV_INSTALL_DIR: /usr/local/bin
- name: Register this year's PFS proposed rule, if published
run: |
docker exec api uv run --no-sync \
stack bib fetch-pfs-comments --since "$(date +%Y)-01-01" --attachments
- name: Pull and enrich every open docket
run: |
docker exec api uv run --no-sync stack bib pull-open-dockets
- name: Index new comments for the chat search
run: |
docker exec llm uv run --no-sync stack llm index --collection comments
- name: File failure issue
if: failure()
env:
GITEA_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
run: |
# Jobs that never install uv (image builds, infra checks) still
# need it here — otherwise the filer dies with "uv: command not
# found" and the failure is never filed.
command -v uv >/dev/null 2>&1 || curl -LsSf https://astral.sh/uv/install.sh | sh
export PATH="$HOME/.local/bin:$PATH"
uv sync --no-dev --quiet 2>/dev/null || true
uv run python -m api.diag.ci \
--workflow "Comment Pull" --job "comment-pull" \
--run "${{ github.run_number }}" \
--sha "${{ github.sha }}" \
--ref "${{ github.ref }}" || true