Skip to content

Add credential-free CI with verified failure gates - #12

Merged
yaolin-dev merged 9 commits into
mainfrom
codex/core-ci-checks
Oct 26, 2026
Merged

yaolin-dev merged 9 commits into
mainfrom
codex/core-ci-checks

Conversation

@yaolin-dev

@yaolin-dev yaolin-dev commented Oct 26, 2026 •

Copy link
Copy Markdown
Owner

Core tests previously relied on local tool paths and could be mislabeled as Release. This change runs explicit Debug and Release suites, all Node tests, synthetic offline audits and static checks, Android Release JVM tests, and an unsigned main App Release compile on GitHub. A stable CI required check accepts only successful results from every job.

The workflow pins Actions/toolchains, validates discovery and reported results, retains failure evidence, and isolates build inputs from local configuration. Test fixes remove hardcoded Xcode paths, replace TMDB timing sleeps with synchronization, publish the loopback fixture port atomically, and preserve Python fixture diagnostics. README, Chinese README, contribution/build guidance and the changelog document coverage and limitations.

Validation: all seven checks in the final PR run passed: https://github.com/yaolin-dev/OKVideoMac/actions/runs/40349213188. Three macOS jobs initially received no runner and executed no steps; they passed after a capacity retry. The tested merge tree matches the implementation commit. Core Debug and Release each completed 1,233 discovered tests: 1,204 passed, 29 explicitly allowed skips, zero failures. Node: 55 passed; SourceAudit: 51 passed; crash configuration: 15 passed; symbol cases: 7 passed; CI validator tests: 28 passed; Android Release JVM: 45 passed. All 232 static inputs passed; 163 documentation file links were checked locally. The main App and two helpers compiled for arm64 Release with signing disabled.

The isolated intentional-failure run at https://github.com/yaolin-dev/OKVideoMac/actions/runs/40346059822 produced exactly one expected failure in each Core configuration and a failed aggregate check while all other jobs passed. Its faulty commit is not in this branch.

Existing AGP/Kotlin dependency-metadata lint diagnostics remain documented; full Android lint coverage is not claimed. Real playback/UI, live accounts and release signing/notarization remain separate checks. App runtime code, version 0.9.0 / Build 155, signed release assets, Desktop installation and branch-protection settings are unchanged.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T15:27:53.137388Z d6711fe PR opened
🔒 Security Review ✅ Completed 2026-10-26T15:29:48.417769Z d6711fe PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@yaolin-dev
yaolin-dev merged commit 621a737 into main Oct 26, 2026
10 of 14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants