Skip to content

ci: update pinned actions and retry stalled apt mirrors - #13

Merged
napalm255 merged 2 commits into
mainfrom
ci/actions-and-mirror-retries
Oct 27, 2026
Merged

napalm255 merged 2 commits into
mainfrom
ci/actions-and-mirror-retries

Conversation

@napalm255

Copy link
Copy Markdown
Contributor

Changes

  • Actions: mise-action 5.0.1 → 5.2.3, CodeQL init/analyze 4.38.2 → 4.39.1 (same commit for both), download-artifact 8.0.1 → 8.0.2, upload-artifact 7.0.1 → 7.0.2, in both the root and template/ workflows. Supersedes build(deps): bump the github-actions group across 1 directory with 3 updates #10, which is out of date with main and covers only the root workflows.
  • Stalled mirrors: on 2026-10-26, "Install native test tools" hung until the 30-minute job timeout in quickmusic, quickrem (twice) and quickspot while azure.archive.ubuntu.com crawled. template/scripts/native_tools.sh now runs each apt-get update and --download-only under a 150 s deadline (a healthy run takes under 10 s), retries up to 3 times, switches sources to archive.ubuntu.com after the first failure, and runs dpkg only once every package is cached, so a timeout never interrupts an install. It is used by both ci.yml and sonar.yml.
  • A failed playwright install --with-deps is retried up to 3 times. There is no deadline on it because it may be running dpkg.
  • Root lint now shellchecks template/scripts/*.sh. Version 0.1.4.

Validation

  • just ci passes here, including actionlint, zizmor, shellcheck and the 4 new tests, which run the real script against a fake sudo.
  • quickts just ci passes against this template via QUICK_TEMPLATE_SOURCE.
  • Template PR CI does not run the payload workflows, so app PRs synced to this branch's SHA will exercise them on hosted runners.

Update mise-action to 5.2.3, CodeQL to 4.39.1, download-artifact to 8.0.2 and upload-artifact to 7.0.2 across the root and payload workflows.

Install native test tools through scripts/native_tools.sh: each apt download runs under a deadline, retries switch from the runner's Azure mirror to archive.ubuntu.com, and dpkg runs only once every package is cached. Retry a failed Playwright browser install up to three times.
@sonarqubecloud

Copy link
Copy Markdown

@napalm255
napalm255 merged commit 846ae47 into main Oct 27, 2026
7 checks passed
@napalm255
napalm255 deleted the ci/actions-and-mirror-retries branch October 27, 2026 01:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant