Skip to content

Approve the v20.1.6 publisher for organization settings #5872

Description

@devantler

🤖 Generated by the Agentic Engineer

Evidence

  • devantler-tech/.github#869 (Dependabot) moves the organization settings publisher from v20.0.3 to v20.1.4. Its contract test refuses: check-manifests-caller.sh reports unreviewed publisher content at 3f0791b9b2f435133d13980e918ac8f2f361c519, because that revision is not yet approved by the platform.
  • Between v20.0.3 (57310dc6) and v20.1.4 (3f0791b9), require-unpublished-version.sh and recover-manifests-version.sh keep their blobs. publish-manifests.yaml changes one line: the runner-hardening action moves from v2.22.2 to v2.22.3, pinned to a commit. The reviewed workflow blob at v20.1.4 is ce6ed49062b44b56379c408c8c785a542cff533f.
  • The settings source still serves a release built by the v20.0.3 publisher, so v20.0.3 must stay accepted.

Outcome

The platform accepts the v20.1.4 publisher for organization settings, deployed before .github switches to it, so the next settings release is not refused.

Acceptance

  • The approvals table and the github-config source's identity pattern name the v20.1.4 commit 3f0791b9b2f435133d13980e918ac8f2f361c519. v20.0.3 stays accepted, and v19.0.8 (0966f4b0) is retired, because a consumer accepts at most two canonical commits.
  • After deployment, the live source still serves the current release and reads Ready.
  • .github#869 can then pin v20.1.4 and update its approved publisher revision and reviewed workflow blob in check-manifests-caller.sh.

Activity

  1. added theissue type on Nov 4, 2026
  2. moved this to 📥 Backlog in 🌊 Project Boardon Nov 4, 2026
  3. coderabbitai commented on Nov 4, 2026

    @coderabbitai
    Contributor
    🔗 Related PRs

    #5266 - fix(security): restore verified organization settings publication [merged]


    📝 Issue Planner

    Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.

    • Create Plan

    🧪 Issue enrichment is currently in open beta.

    You can configure auto-planning by selecting labels in the issue_enrichment configuration.

    To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

    issue_enrichment:
      auto_enrich:
        enabled: false

    💬 Have feedback or questions? Drop into our discord!

  4. added a commit that references this issue on Nov 7, 2026
  5. moved this from 📥 Backlog to 🏃🏻‍♂️ In Progress in 🌊 Project Boardon Nov 7, 2026
  6. changed the title [-]Approve the v20.1.4 publisher for organization settings[/-] [+]Approve the v20.1.6 publisher for organization settings[/+] on Nov 7, 2026
  7. devantler commented on Nov 7, 2026

    @devantler
    ContributorAuthor

    🤖 Generated by the Agentic Engineer

    Retargeted from v20.1.4 to v20.1.6 (56ceec6717a1faa0686d865424cd2d1d45f18a0a). The Dependabot update that needed v20.1.4 (devantler-tech/.github#869) was closed, and its replacement, devantler-tech/.github#877, pins v20.1.6. The reviewed workflow blob at v20.1.6 is ce6ed49062b44b56379c408c8c785a542cff533f, the same as at v20.1.4, and both helper scripts are unchanged. Delivery: #5900.

  8. moved this from 🏃🏻‍♂️ In Progress to ✅ Done in 🌊 Project Boardon Nov 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Fields

    Priority

    None yet

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions