ci: bump xiboplayer/.github reusable pins past org-rename URL fix - #68
Open
linuxnow wants to merge 1 commit into
Open
ci: bump xiboplayer/.github reusable pins past org-rename URL fix#68linuxnow wants to merge 1 commit into
linuxnow wants to merge 1 commit into
Conversation
Bump rpm.yml, deb.yml, release.yml from xiboplayer/.github/...@5c3b3699cd05c12bb3ec76e5d1d317d539dd69b4 (2026-04-09) to xiboplayer/.github/...@46da335eed4b80fcc1bb8015686152b4290f7617 (2026-05-11) The post-rename anchor (46da335eed) includes c85d100 'chore(workflows): point dispatch URLs at renamed gh-pages repo' (2026-05-08), which updates the notify-step curl POST URL inside the reusable build-rpm.yml / build-deb.yml from the pre-rename xibo-players/xibo-players.github.io/dispatches to the post-rename xiboplayer/xiboplayer.github.io/dispatches. Until this bump, every tag-triggered build POSTed to the old URL. GitHub returned a 307 redirect + JSON body referencing follow-redirects; curl -sf (no -L flag) ignored the redirect and exited 0, so the workflow step reported success while the dispatch was silently dropped. update-repos.yml on xiboplayer.github.io has not run since 2026-04-17 as a result, and dnf repodata on dl.xiboplayer.org has been frozen at the same date. Manual replacement of dependabot PRs #56 / #59 / #61. Per scope review (see chore/scope-dependabot-to-github-actions companion PR), cargo-ecosystem dependabot has been disabled going forward; the reusable-pin bumps stay under github-actions ecosystem but are applied manually here under our authorship to keep the chore branch self-contained.
This was referenced May 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #66.
Summary
Bump rpm.yml + deb.yml + release.yml from
5c3b3699cd05c12bb3ec76e5d1d317d539dd69b4(2026-04-09) to46da335eed4b80fcc1bb8015686152b4290f7617(2026-05-11, current HEAD of dot-github main).The post-rename anchor includes dot-github commit
c85d100 chore(workflows): point dispatch URLs at renamed gh-pages repo(2026-05-08), which patches thenotifystep curl POST URL from the pre-renamexibo-players/xibo-players.github.io/dispatchestoxiboplayer/xiboplayer.github.io/dispatches. Until this bump, every tag-triggered build on arexibo silently dropped the update-repos dispatch (HTTP 307 +curl -sfno--Lquirk) — see #66 for the full root-cause writeup.Manual replacement for dependabot PRs #56 / #59 / #61 — same diff, our authorship, single load-bearing commit.
Test plan
v0.3.3-4) orworkflow_dispatchonrpm.yml.Trigger repository updatestep log — should see HTTP 204 with nodocumentation_urlJSON.update-repos.ymlfires onxiboplayer.github.ioshortly after.dl.xiboplayer.org/rpm/fedora/43/x86_64/repodata/repomd.xmllast-modified advances past 2026-04-17.Risk
Low. Three-line change. The post-rename SHA is current
mainof dot-github (proven stable; the dependabot-bump CI runs against this same SHA were all green). If anything regresses, revert is trivial (re-pin to5c3b3699cd).Companion
PR #X (
chore(dependabot): scope to github-actions only) — together these complete the post-rename scope review for arexibo.