Skip to content

fix(ci): gate release on every check in one test-build-release pipeline #162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
danielvm-git merged 3 commits into from
Oct 25, 2026
Merged

fix(ci): gate release on every check in one test-build-release pipeline #162

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
5f52387
fix(ci): gate release on every check in one test-build-release pipeline
danielvm-git Oct 25, 2026
f7021be
docs(website): regenerate release guide and gate-trace pages for test…
danielvm-git Oct 25, 2026
20eaa8d
docs(specs): record local verification for BUG-2026-10-25-release-not…
danielvm-git Oct 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .cline/skills/gate-trace/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,8 +70,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .codebuddy/skills/gate-trace/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,8 +70,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .codex/skills/gate-trace/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,8 +70,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .copilot/skills/gate-trace/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,8 +70,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .cursor/rules/gate-trace.mdc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,8 +69,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .gemini/extensions/bigpowers/commands/prompts/gate-trace.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,8 +69,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
4 changes: 2 additions & 2 deletions .gemini/extensions/bigpowers/skills/gate-trace/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,8 +71,8 @@ gate_trace:
## Integration Points

- **release-branch SKILL.md** — pre-PR gate (FAIL blocks merge).
- **sync-skills.yml** — runs `trace-stories.sh --strict` as its "Traceability gate" step (FAIL
blocks pipeline), which shares this skill's coverage data (`traceability-matrix.json`) but
- **test-build-release.yml** — its `sync` job runs `trace-stories.sh --strict` as the "Traceability gate" step (FAIL
blocks the release job), which shares this skill's coverage data (`traceability-matrix.json`) but
does not invoke a gate-trace PASS/CONCERNS/FAIL/WAIVED verdict directly.
- **verify-work SKILL.md** — runs blind-spot checks; gate-trace consumes the result.

Expand Down
2 changes: 1 addition & 1 deletion .github/SEMANTIC-RELEASE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,7 @@ Requires:
git log --oneline main | head -5

# View Actions
# GitHub → Actions → Release workflow
# GitHub → Actions → Test Build Release → release job

# View release
# GitHub → Releases
Expand Down
18 changes: 9 additions & 9 deletions .github/workflows/docs-site.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,12 +28,12 @@ permissions:

jobs:
build:
runs-on: ubuntu-latest
runs-on: ubuntu-22.04
timeout-minutes: 15
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- uses: actions/setup-node@v4
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:
node-version: '22'
cache: npm
Expand All @@ -55,25 +55,25 @@ jobs:
npm ci
npm run build

- uses: actions/configure-pages@v5
- uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
with:
enablement: true

- uses: actions/upload-pages-artifact@v4
- uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
with:
path: website/dist

deploy:
needs: build
runs-on: ubuntu-latest
runs-on: ubuntu-22.04
timeout-minutes: 15
environment:
name: github-pages
url: ${{ steps.deploy_attempt_1.outputs.page_url || steps.deploy_attempt_2.outputs.page_url || steps.deploy_attempt_3.outputs.page_url || 'https://danielvm-git.github.io/bigpowers/' }}
steps:
- name: Deploy to GitHub Pages (attempt 1)
id: deploy_attempt_1
uses: actions/deploy-pages@v4
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
continue-on-error: true

- name: Wait before deploy retry
Expand All @@ -83,7 +83,7 @@ jobs:
- name: Deploy to GitHub Pages (attempt 2)
id: deploy_attempt_2
if: steps.deploy_attempt_1.outcome == 'failure'
uses: actions/deploy-pages@v4
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
continue-on-error: true

- name: Wait before final deploy retry
Expand All @@ -93,7 +93,7 @@ jobs:
- name: Deploy to GitHub Pages (attempt 3)
id: deploy_attempt_3
if: steps.deploy_attempt_1.outcome == 'failure' && steps.deploy_attempt_2.outcome == 'failure'
uses: actions/deploy-pages@v4
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
continue-on-error: true

- name: Verify deployment succeeded
Expand Down
127 changes: 0 additions & 127 deletions .github/workflows/golden-suite.yml
View file
Open in desktop

This file was deleted.

4 changes: 2 additions & 2 deletions .github/workflows/publish-wiki.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,10 +11,10 @@ permissions:

jobs:
publish:
runs-on: ubuntu-latest
runs-on: ubuntu-22.04
timeout-minutes: 10
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- name: Validate OKF
run: |
Expand Down
59 changes: 0 additions & 59 deletions .github/workflows/publish.yml
View file
Open in desktop

This file was deleted.

4 changes: 2 additions & 2 deletions .github/workflows/sync-references.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,11 @@ on:

jobs:
sync:
runs-on: ubuntu-latest
runs-on: ubuntu-22.04
timeout-minutes: 10
permissions:
contents: read
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Regenerate docs/references from SSOT
run: bash scripts/sync-references.sh
Loading