Summary

Fixes two issues found in CI:

1. actionlint false positives in ci-self-test

Root cause: The actionlint job vends .openci/ from a pinned SHA via resolve-openci. When the top-level workflow files (e.g., reusable-ci.yml) contain newer action input names than what exists in the older vendored composite actions, actionlint reports "input not defined" errors.

Fix: Remove the resolve-openci vendoring step from the actionlint job. Actionlint only needs to check the current source files — the vendored .openci/ at a different SHA introduces false positives.

2. test.yml text corruption

Root cause: An earlier version of bump-self-sha.sh used awk '{print $NF}' to extract the old SHA from manifest.yml. On the line YiAgent/OpenCI: "sha" # resolve-openci bootstrap, awk extracted bootstrap instead of the SHA. The perl substitution then replaced bootstrap with the full 40-char SHA 34a93579..., corrupting bootstrapping into 34a93579...ping in 4 locations.

Fix: Restored the original text in all comments, descriptions, and step names.

Files Changed

• .github/workflows/reusable-self-test.yml — Remove resolve-openci from actionlint job
• .github/workflows/test.yml — Fix 4 corrupted text instances

^{Need help on this PR? Tag @codesmith with what you need. Autofix is disabled.}

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configurations for improved efficiency and consistency.

Greptile Summary

This PR fixes two CI regressions: actionlint false positives caused by vendoring .openci/ at a mismatched SHA, and text corruption in test.yml where a faulty awk extraction in bump-self-sha.sh mangled the word "bootstrapping" into a SHA fragment across four locations. All workflow files are also updated to the new self-reference SHA (0fc8c78).

• reusable-self-test.yml: Removes the resolve-openci vendoring step from the actionlint job so actionlint only sees current source files, eliminating false "input not defined" errors from stale composite actions.
• test.yml: Restores four occurrences of self-bootstrapping that were corrupted by the SHA-bump script extracting bootstrap (the comment word) instead of the actual SHA value.
• All caller workflows + manifest.yml: Consistent SHA bump from 119c3eab to 0fc8c78.

Confidence Score: 5/5

Safe to merge — both fixes are targeted and correct, with no logic changes to production paths.

The actionlint fix correctly removes a step that was injecting stale composite actions into a linting context, and the text restoration in test.yml is a straightforward revert of script-induced corruption. All SHA bumps are internally consistent. The only residual item is the dead .openci/.github/actionlint.yaml branch in the config-file check, which was already flagged in a previous review comment — it causes no runtime failure, just unreachable code.

.github/workflows/reusable-self-test.yml — the actionlint config-file check still has a branch that references .openci/.github/actionlint.yaml, which can never be true now that the resolve-openci step has been removed from that job.

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[actionlint job] --> B[Checkout source]
    B --> C{Before this PR}
    C -->|resolve-openci step| D[Vendor .openci/ at pinned SHA]
    D --> E[Run actionlint]
    E --> F[❌ False positives: input not defined\nfor actions at older SHA]

    B --> G{After this PR}
    G --> H[Run actionlint directly on source]
    H --> I{Config file?}
    I -->|.openci/.github/actionlint.yaml| J[⚠️ Dead branch — .openci/ never populated]
    I -->|.github/actionlint.yaml| K[✅ Use repo config]
    I -->|neither| L[✅ Run with defaults]

_{Reviews (3): Last reviewed commit: "chore: sync all SHA references via bump-..." | Re-trigger Greptile}