You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Approve the v20.1.6 publisher for organization settings #5872
devantler-tech/.github#869 (Dependabot) moves the organization settings publisher from v20.0.3 to v20.1.4. Its contract test refuses: check-manifests-caller.sh reports unreviewed publisher content at 3f0791b9b2f435133d13980e918ac8f2f361c519, because that revision is not yet approved by the platform.
Between v20.0.3 (57310dc6) and v20.1.4 (3f0791b9), require-unpublished-version.sh and recover-manifests-version.sh keep their blobs. publish-manifests.yaml changes one line: the runner-hardening action moves from v2.22.2 to v2.22.3, pinned to a commit. The reviewed workflow blob at v20.1.4 is ce6ed49062b44b56379c408c8c785a542cff533f.
The settings source still serves a release built by the v20.0.3 publisher, so v20.0.3 must stay accepted.
Outcome
The platform accepts the v20.1.4 publisher for organization settings, deployed before .github switches to it, so the next settings release is not refused.
Acceptance
The approvals table and the github-config source's identity pattern name the v20.1.4 commit 3f0791b9b2f435133d13980e918ac8f2f361c519. v20.0.3 stays accepted, and v19.0.8 (0966f4b0) is retired, because a consumer accepts at most two canonical commits.
After deployment, the live source still serves the current release and reads Ready.
.github#869 can then pin v20.1.4 and update its approved publisher revision and reviewed workflow blob in check-manifests-caller.sh.
Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.
Create Plan
🧪 Issue enrichment is currently in open beta.
You can configure auto-planning by selecting labels in the issue_enrichment configuration.
To disable automatic issue enrichment, add the following to your .coderabbit.yaml:
issue_enrichment:
auto_enrich:
enabled: false
💬 Have feedback or questions? Drop into our discord!
changed the title [-]Approve the v20.1.4 publisher for organization settings[/-][+]Approve the v20.1.6 publisher for organization settings[/+]on Nov 7, 2026
Retargeted from v20.1.4 to v20.1.6 (56ceec6717a1faa0686d865424cd2d1d45f18a0a). The Dependabot update that needed v20.1.4 (devantler-tech/.github#869) was closed, and its replacement, devantler-tech/.github#877, pins v20.1.6. The reviewed workflow blob at v20.1.6 is ce6ed49062b44b56379c408c8c785a542cff533f, the same as at v20.1.4, and both helper scripts are unchanged. Delivery: #5900.
Activity
coderabbitai commentedon Nov 4, 2026
🔗 Related PRs
#5266 - fix(security): restore verified organization settings publication [merged]
📝 Issue Planner
Check the box below or use the
@coderabbitai plancommand to generate an implementation plan and prompts that you can use with your favorite coding assistant.🧪 Issue enrichment is currently in open beta.
You can configure auto-planning by selecting labels in the issue_enrichment configuration.
To disable automatic issue enrichment, add the following to your
.coderabbit.yaml:💬 Have feedback or questions? Drop into our discord!
chore: agent-claim #5872 nonce=40997824f16b63f5cd7ced648a984a9f
[-]Approve the v20.1.4 publisher for organization settings[/-][+]Approve the v20.1.6 publisher for organization settings[/+]devantler commentedon Nov 7, 2026
Retargeted from v20.1.4 to v20.1.6 (
56ceec6717a1faa0686d865424cd2d1d45f18a0a). The Dependabot update that needed v20.1.4 (devantler-tech/.github#869) was closed, and its replacement, devantler-tech/.github#877, pins v20.1.6. The reviewed workflow blob at v20.1.6 isce6ed49062b44b56379c408c8c785a542cff533f, the same as at v20.1.4, and both helper scripts are unchanged. Delivery: #5900.