Repository navigation
🐛 fix(cooled-prek): read hook dates from repo - #67
Closed
gaborbernat wants to merge 1 commit into
Closed
gaborbernat wants to merge 1 commit into
gaborbernat wants to merge 1 commit into
Conversation
An unrelated turbohtml PR failed when a PyPI metadata request timed out before any hook ran. Record exact-pin upload dates during dependency updates and validate the committed manifest in PR checks, so hook runs do not depend on registry metadata availability. BREAKING CHANGE: Callers must commit a refreshed hook-pin manifest before updating this action.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A turbohtml PR failed before its hooks ran because the shared check timed out reading a pinned package's upload date from PyPI. A transient metadata outage can therefore block an unrelated PR.
The dependency update job now records upload dates for exact hook pins. PR checks validate that committed record against the hook configuration and use it to admit the pinned release ahead of the seven-day cutoff. Ranges, transitive dependencies, and later releases remain under the cutoff.
Repositories using this shared workflow must commit
.github/hook-pin-cutoffs.jsonbefore updating their workflow reference. A missing or stale record fails with an instruction to runrefresh-pinswhen hook pins change.