Repository navigation
chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 - #545
dependabot[bot] wants to merge 5 commits into
Conversation
dependabot
Bot
added
dependencies
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Castiron custom codeEvaluated main: Trusted main policy: ✅ No new custom-code files detected. 0 mixed files remain; 0 existing customizations changed. Compared A changed generated baseline means this report cannot reliably identify which handwritten lines changed. Inspect the custom-code diffDownload the exact patch produced by this run (requires repository access): gh run download 39367552789 --repo openai/openai-cli \
--name castiron-custom-code-39367552789-1 --dir /tmp/castiron-custom-code-39367552789-1
git apply --stat /tmp/castiron-custom-code-39367552789-1/custom-code.patch
cat /tmp/castiron-custom-code-39367552789-1/custom-code.patchOr reproduce it from an SDK checkout containing the vendored reporter: git fetch --no-tags origin 7639dab16a033ef6335cbb386b990b2ff6098d80 5b2686f0e4c7a693cd5aad7240baf7622a6ace5e
python3 scripts/castiron/custom_code_report.py report \
--base 7639dab16a033ef6335cbb386b990b2ff6098d80 \
--head 5b2686f0e4c7a693cd5aad7240baf7622a6ace5e --fetch --require-head-hash --public \
--out /tmp/castiron-custom-code-5b2686f0e4c7
cat /tmp/castiron-custom-code-5b2686f0e4c7/custom-code.patchThis is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8f3f5078e6
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "$RUNNER_TEMP/openai-cli-govulncheck" "$GITHUB_WORKSPACE" | ||
| - name: Download isolated release inputs | ||
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | ||
| uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 |
There was a problem hiding this comment.
Every CI run executes ./scripts/test, which runs go test ./..., but internal/releaseworkflow/workflow_test.go:24 still defines downloadArtifactAction as the v8.0.1 SHA. Because the assertions at lines 292 and 769 compare workflow steps against that constant, updating this step to v8.0.2 makes TestPublisherVerifiesIsolatedInputsBeforeReceivingSecrets and TestCandidateJobsUseOnlySameRunSourceArtifacts fail; update the expected pinned SHA with the workflow changes.
AGENTS.md reference: AGENTS.md:L69-L69
Useful? React with 👍 / 👎.
|
[saibot] review pending. full review is queued or incomplete. no approval yet. |
e1d4ee9 to
1f82846
Compare
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
1f82846 to
4978cc2
Compare
This branch has not been deployed
1 participant
Bumps actions/download-artifact from 8.0.1 to 8.0.2.
Release notes
Sourced from actions/download-artifact's releases.
Commits
9000827Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2e455989Prepare download-artifact v8.0.2a00b90cMerge pull request #492 from actions/tunc-d-download-artifact-package-bump29bb7ceUpdate@actions/artifactto 6.3.1484a0b5Update the readme (#473)