Skip to content

ci: e2e installs the browsers' system libraries with apt timeouts and a 10-minute bound - #864

Merged
irparent merged 1 commit into
mainfrom
ci/e2e-apt-bounded
Oct 7, 2026
Merged

irparent merged 1 commit into
mainfrom
ci/e2e-apt-bounded

Conversation

@irparent

@irparent irparent commented Oct 7, 2026

Copy link
Copy Markdown
Member

The e2e job now installs the browsers and their system libraries as two steps, and the system-library step has a bound.

  • Browsers (npx playwright install chromium firefox): unchanged behaviour. The cache keyed on the Playwright version makes it instant; a miss after a Playwright bump downloads from Playwright's server and keeps the job's 40-minute limit.
  • System libraries (npx playwright install-deps chromium firefox): these come through apt from the runner's mirror list. apt is now told to give up on a mirror that stops answering after 30 seconds and to retry three times, and the step stops at 10 minutes.

Why: on a run of #863 the browser cache was restored, but apt's first mirror stopped answering and apt waited on it for 39 minutes until the job limit cancelled the run, with nothing wrong in the change. With this, a bad mirror day fails the step in minutes with a clear cause, or apt moves to the next mirror and the job continues.

actionlint (the image CI pins) passes on ci.yml.

🤖 Generated with Claude Code

@vercel

vercel Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
website Ignored Ignored Oct 7, 2026 7:01pm UTC

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Iris gate — 1 of 2 tripped --fail-on detector_veto

iris-eval ingest: 3 stored, 1 tripped --fail-on detector_veto (2 of 3 evaluated in dataset "release-gate")

Trace Verdict Basis Rules, classes or missing inputs Evidence
0c97db82cec9ec5d44be399814e51a0a failed detector_veto + risk_over_loss no_pii, pii_leak, credential_leak no_pii: AWS Access Key (output 45–65)
Verdict basis Traces
detector_veto 2
clean 1

Unjudged questions: task_completed (3), tool_use_correct (3) — a trace that did not carry what a rule needs.

tests/fixtures/ci-gate/traces.ndjson · 3 evaluated · dataset release-gate: 2 in the gate · exit 1 · what the bases mean

@github-actions

github-actions Bot commented Oct 7, 2026

Copy link
Copy Markdown

Iris gate — 1 stored, nothing tripped --fail-on any

iris-eval ingest: 1 stored, 0 tripped --fail-on any

Verdict basis Traces
clean 1

Unjudged questions: task_completed (1), tool_use_correct (1) — a trace that did not carry what a rule needs.

tests/fixtures/ci-gate/clean.ndjson · 1 evaluated · exit 0 · what the bases mean

@irparent
irparent merged commit da7e099 into main Oct 7, 2026
73 checks passed
@irparent
irparent deleted the ci/e2e-apt-bounded branch October 7, 2026 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant