check-labels intermittently fails due to the organization IP allow list
Maintainers usually reply within 1 day
@soutaro is already working on this.
Since Oct 2, 2026.
Assessment
This issue has not been assessed yet.
Description
The required check-labels job can fail while fetching PR labels because GitHub rejects the API request under the organization's IP allow list. This can block merging a correctly labeled PR until the check succeeds.
On #4217, the PR had chore and dependencies labels, both of which satisfy bin/check_labels, but the job failed before it could validate them:
- Failed job
- Successful rerun, without changing the PR code or labels
The failed job reports:
GraphQL: ... the `Shopify` organization has an IP allow list enabled, and your IP address is not permitted to access this resource. (repository)
The empty command output is then passed to bin/check_labels, which raises JSON::ParserError.
The workflow runs on ubuntu-latest and uses gh pr view --json labels with the standard Actions token (GH_TOKEN: ${{ github.token }}). GitHub documents that organization IP allow lists apply to authenticated access to public resources, including GITHUB_TOKEN.
The rejection is explicit in the failure log, but I have not confirmed why the rerun was permitted; the outgoing IP addresses were not recorded.
- Dominant language
- Ruby
- Stars
- 2k
- Forks
- 282
- Avg merge
- 10h 12m
- Merged PRs (30d)
- 11
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from Shopify/ruby-lsp
-
Multi-line `<%# %>` ERB comments are parsed as Ruby, so semantic highlighting colors the prose as method callsPossibly taken @Pybsama claimed this 67 days ago. Openbug Stale
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
Shopify/ruby-lsp#4181 · 1 comment · 1 reaction ·
Maintainers usually reply within 1 day
-
Linux file system with square brackets in the directory/filename are failing to be indexedPossibly taken @andriytyurnikov claimed this 200 days ago. Openbug help-wanted pinned
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Shopify/ruby-lsp#3503 · 8 comments · 1 reaction ·
Maintainers usually reply within 1 day
-
Paths need to be escapedPossibly taken @Vraiment claimed this 1 day ago. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 25/100
Maintainers usually reply within 1 day
-
bug
Difficulty 4/5 3-5 days Newbie friendliness 38/100
Maintainers usually reply within 1 day
-
bug pinned
Difficulty 4/5 3-5 days Newbie friendliness 45/100
Shopify/ruby-lsp#4208 · 3 comments ·
Maintainers usually reply within 1 day
All issues in Shopify/ruby-lsp
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
eurosky-social/eu-haul#32 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
benbalter/add-to-org#17 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
benbalter/change_agent#11 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
benbalter/count-org-loc#20 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
benbalter/sitemap-parser#33 ·