Skip to content

fix(ci): beta's branch-protection caller is dead twice over — wrong job id AND the retired Codeberg org - #257

Merged
rubenvdlinde merged 1 commit into
betafrom
hotfix/ci-branch-protection-beta
Aug 4, 2026
Merged

fix(ci): beta's branch-protection caller is dead twice over — wrong job id AND the retired Codeberg org#257
rubenvdlinde merged 1 commit into
betafrom
hotfix/ci-branch-protection-beta

Conversation

@rubenvdlinde

Copy link
Copy Markdown
Contributor

Problem — two independent faults, either fatal on its own

beta's .github/workflows/branch-protection.yml could not satisfy the required check for two separate reasons:

  1. Wrong job id. GitHub composes a reusable-workflow status context as <caller-job-id> / <called-job-name>. The org rulesets Main Branch Protection and Beta Branch Protection require branch-protection / check-branch, but the caller job was named protect, so the emitted context was protect / check-branch. The required context never reported at all — PRs to main/beta sat permanently pending and only --admin could ship them.
  2. Retired org name. uses: Conduction/.github/... names the retired Codeberg org. On GitHub the org is ConductionNL, so from commit e2faa092 ("org rename") Actions could not resolve the reusable workflow at all — the run produced zero jobs.

Live evidence: PR #90 (development → beta, open since March) has 34 status checks and not one of them is branch-protection / check-branch.

Fix

protectbranch-protection, ConductionConductionNL.

Deliberately narrow — please read

Seven other workflows on beta still carry the retired org name:

code-quality.yml, documentation.yml, issue-triage.yml, openspec-sync.yml, release-beta.yml, release-stable.yml, sync-to-beta.yml

They are not touched here on purpose. Correcting them would switch real lint/test/release gates back on for a branch that has been stale since March, and that needs its own red/green triage rather than being smuggled in behind a branch-protection fix.

Safety

Making a never-reporting check report is only safe if it will pass. The shared check-branch job requires PRs to beta come from development, main, or hotfix/*. This PR is from hotfix/*, and larpingapp has both development and beta, so the topology holds. (petstore had neither branch — a second, independent fault there.)

…+ retired org)

1. Job id `protect` emitted `protect / check-branch`; the org rulesets
   require `branch-protection / check-branch`, so the required context never
   reported and PRs to main/beta sat permanently pending.
2. `uses: Conduction/.github/...` names the RETIRED Codeberg org. On GitHub
   the org is `ConductionNL`, so Actions could not resolve the reusable
   workflow at all and the run produced zero jobs.

Deliberately narrow: seven other workflows on this branch (code-quality,
documentation, issue-triage, openspec-sync, release-beta, release-stable,
sync-to-beta) still carry the same retired org name. Correcting those would
switch real test/lint gates back on for a branch that has been stale since
March, which is a separate change that needs its own red/green triage.
@rubenvdlinde
rubenvdlinde merged commit 70440b5 into beta Aug 4, 2026
4 checks passed
@rubenvdlinde
rubenvdlinde deleted the hotfix/ci-branch-protection-beta branch August 4, 2026 13:23
@rubenvdlinde
rubenvdlinde restored the hotfix/ci-branch-protection-beta branch August 8, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant