diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-10 23:33:16 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-10 23:33:16 +0300 |
| commit | 0a6d9dca9d1cb71413c9085410e28e0c4afdca3f (patch) | |
| tree | b2890295552089acb8f7c9b9bf278403be13f1c3 /docs/documentation.md | |
| parent | 9e44387fa1b8fc006146b9fb774e6316101033e6 (diff) | |
| download | vyos-documentation-0a6d9dca9d1cb71413c9085410e28e0c4afdca3f.tar.gz vyos-documentation-0a6d9dca9d1cb71413c9085410e28e0c4afdca3f.zip | |
ci: harden update-version-tags against stale re-runs and silent failures
Two improvements to .github/workflows/update-version-tags.yml, bundled
because they touch the same code block:
1. HEAD-equivalence guard. GitHub's "Re-run jobs" replays the original
event SHA, which for this workflow would move tag rolling/1.5/1.4
backward to a stale commit. Compare github.sha against the live
branch HEAD via the API and exit 0 with a log line if they differ.
2. PATCH-first with 404-only fallback to POST. The previous "GET probe
then PATCH or POST" pattern silently fell through to POST on any
gh-api error (auth, rate-limit, 5xx), which would attempt to create
a tag that already exists and mask the real failure. Now the
fallback to POST fires only on HTTP 404; every other error is
re-emitted to stderr and fails the job.
Backport to circinus and sagitta after merge.
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to 'docs/documentation.md')
0 files changed, 0 insertions, 0 deletions