Repair weekly community-base release advisory uv bootstrap

オープン
  • 何か問題がありますか？
#474 コメント 4 件 リアクション 0 件 担当者 0 名 GitHub で見る

まだ誰も着手していません。

評価

難易度
4/5
見積もり時間
1〜2日
初心者へのやさしさ
25/100
issue の種類
バグ
明瞭さ
明確に書かれている
活発さ
活発
技術スタック
github-actions, python
領域
ci-cd, devops

調査の方向性

Read .github/workflows/release-advisory.yml alongside scripts/check_community_base_release.py; inspect the comparison step and its exit-code handling first. Check how the workflow bootstraps uv and Python on a bare GitHub-hosted runner, then verify exits 0, 2, and an error preserve the documented outputs and advisory path. Done means the bootstrap works while the release decision, error behavior, schedule, permissions, and deduplication remain unchanged.

索引モデルが issue の本文から書いたものです。

説明

bug infra operations P1

Problem and operator outcome

Hub intake d264d7b9-d93a-41c0-b00d-1190462433a5: the weekly Community-base Release Advisory has failed before inspecting releases since at least 2026-09-28. Run 40330880123 fails in Compare the pinned tag with the latest release with uv: command not found and exit 127. Restore the advisory on a bare GitHub-hosted runner without changing its release-decision or error contract.

Normative references

  • DTC fixed requirements: Python commands use uv.
  • Development process: independent engineer, tester and PM gates; on-call owns post-push observation.
  • Verification policy: versioned verification plan and explicit evidence dispositions; screenshots are inapplicable to CI-only changes.
  • Existing workflow and stdlib-only inspection script define the preserved advisory behavior.
  • The operator explicitly authorizes this job's direct worktree HEAD:main push and dispatch, overriding the usual local-main merge route. No PR is requested.

Scope

Repair the bootstrap in .github/workflows/release-advisory.yml so uv and a compatible Python interpreter are available before invoking the comparison script. The inspected script uses only Python's standard library; installing application dependencies or changing the lockfile is unnecessary unless implementation demonstrates a concrete need. Keep any regression verification focused on this workflow contract.

Non-goals

  • No community-base adoption, dependency pin changes, script feature changes, or new runtime packages.
  • No schedule, permission, runner, deduplication, advisory-content, or unrelated CI policy changes.
  • No product pages, deployment, database, infrastructure provisioning, or AWS access. Never use the main-temp AWS profile or static key for this job.

Dependencies

None. This is an independent workflow repair. GitHub repository push/dispatch authority is already provided by the operator; no AWS credential is needed.

Acceptance criteria

  • Community-base Release Advisory installs uv before scripts/check_community_base_release.py runs and provides the interpreter/dependencies the script needs on a bare runner; other workflow behavior is preserved.
  • Comparison exit 0 still emits result=already and follows Already latest; exit 2 still emits result=newer and the correct latest, and reaches the existing deduplicated advisory path. Any other exit remains an error and fails the job without masquerading as either result.
  • After pushing the approved fix to main, dispatch this workflow on main. Record the exact commit and run URL. The run must finish green when already current, or finish through the intended newer-release advisory path; a genuine error does not satisfy acceptance.
  • Work starts in an isolated worktree based on current origin/main; push directly to main with no PR after independent tester and PM approval, then remove the task worktree and branch.
  • Finish the report under ~/tmp/agent-reports/, publish the sanitized Hub result requested by intake, and announce/release the claim on the messaging bus. Do not expose credentials or use main-temp AWS credentials.

Verification scenarios

Repository and operations
  1. Independently inspect step order and uv bootstrap. Run the advisory script in an isolated standard-library environment without project sync, confirming its real interpreter needs are met.
  2. Exercise the actual comparison shell for ALREADY_LATEST/0, NEWER/2, and an error exit. Verify output fields and exit status, including absence of advisory output on genuine errors. Confirm the schedule, permissions and deduplication condition are unchanged.
  3. Generate the repository verification plan and retain the exact base/head, graph/plan digests and component dispositions. Use focused workflow checks; do not manufacture screenshot evidence for this CI-only change. Explain any graph-driven broader requirements explicitly in the role handoff.
  4. After the authorized direct push, on-call dispatches/observes the workflow on main and verifies step results and the intended outcome. An error, cancellation or missing final verdict remains unresolved.
Browser and Django

No public HTML, Django runtime, model, view or browser flow changes. Screenshots and product-browser scenarios are not_applicable with that reason. No new Django feature test is needed for a workflow bootstrap.

主要言語
Python
スター
0
フォーク
0
平均マージ
1分
マージ済み PR（30日）
2

環境構築

  • Dockerfile または Docker Compose ファイルあり
  • プルリクエストのテンプレートなし
  • コントリビューションガイドなし

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

DataTalksClub/website のほかの issue

DataTalksClub/website の issue をすべて見る

似ている issue

Python の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。