Skip to content

refactor(ci): internalize CI workflows and pin actions by SHA#57

Merged
branic merged 3 commits into
mainfrom
internalize-ci-workflows
Jun 10, 2026
Merged

refactor(ci): internalize CI workflows and pin actions by SHA#57
branic merged 3 commits into
mainfrom
internalize-ci-workflows

Conversation

@branic

@branic branic commented Jun 10, 2026

Copy link
Copy Markdown
Owner

Summary

  • Replace external reusable workflows from ansible/ansible-content-actions and ansible-network/github_actions with local job definitions, eliminating Dependabot noise (4+ PRs per upstream bump)
  • Add continue-on-error for devel/milestone matrix entries in sanity and unit jobs, fixing the current all_green breakage from upstream ansible-core issues
  • Pin actions/checkout and actions/setup-python by commit SHA for supply-chain security
  • Vendor the upstream changelog validation script into .github/scripts/validate_changelog.py
  • Fix galaxy-importer GALAXY_IMPORTER_CONFIG env var persistence bug from upstream

Test plan

🤖 Generated with Claude Code

Replace external reusable workflows from ansible/ansible-content-actions
and ansible-network/github_actions with local job definitions. This
eliminates Dependabot noise (4+ PRs per upstream bump) and gives us
control over continue-on-error for devel/milestone matrix entries,
fixing the current all_green breakage from upstream ansible-core issues.

- Vendor changelog validation script from upstream
- Pin actions/checkout and actions/setup-python by commit SHA
- Add continue-on-error for devel/milestone in sanity and unit jobs
- Fix galaxy-importer env var persistence bug from upstream

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@branic branic added the skip-changelog Skip changelog validation in CI label Jun 10, 2026
branic and others added 2 commits June 10, 2026 15:54
ansible-core devel requires Python >= 3.13, so py3.12 is unsupported.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Reuse the unit-galaxy-matrix output instead of a hardcoded matrix with
manual exclusions. The ansible version is extracted from the tox
environment name. This ensures unit-source always stays in sync with
the ansible-core support matrix without manual updates.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@branic branic merged commit a505ef7 into main Jun 10, 2026
60 of 63 checks passed
@branic branic deleted the internalize-ci-workflows branch June 10, 2026 23:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-changelog Skip changelog validation in CI

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant