ci: bump soothfast to v0.3.2 - #491
Merged
Merged
Conversation
- 0.3.2 drops soothfast-bot's own commits from the generated changelog, so the Unreleased section stops listing regeneration - every action reference is SHA-pinned by hand, including the two sparse-checkout refs that pull the bot scripts
Verdenroz
force-pushed
the
ci/bump-soothfast-0-3-2
branch
from
September 12, 2026 01:11
d4d95d8 to
34857d8
Compare
Contributor
soothfast gatefinance-query |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
CHANGELOG.md's Unreleased section currently listsRegenerate soothfast outputs (#474)andRegenerate derived artifacts (#473). Both are soothfast-bot commits that exist only to land generated files, so two of the changelog's entries describe the changelog regenerating itself. The cause was upstream and is fixed in v0.3.2, where the generator reads the author alongside the subject and drops the commits its own bot wrote. This repo's entire share of the fix is a version pin.Type of Change
Changes
Verdenroz/soothfastaction from80b18d8831521646b65fec79c6df14d6f763c602(v0.3.1) to69e2e9250414bd1dcaa1f45529f1e3fe12c593dd(v0.3.2) at all 13 pin sites: 8 insoothfast.yml, 2 indeploy.yml, 2 inio-probe.yml, 1 insdk-publish.yml.uses: Verdenroz/soothfast@<sha>; the other two areref:on theactions/checkoutsteps indeploy.ymlandio-probe.ymlthat sparse-check-out the action'saction/directory forland.sh. The two kinds are kept in lockstep. A bump driven by auses:grep alone misses theref:pins and leaves those workflows running v0.3.1 scripts against a v0.3.2 CLI.soothfast.tomlalone. The generator's default bot author issoothfast-bot[bot], which is what this repo's bot commits are already authored by, so a[changelog] bot-authorkey would only be one more value to drift.soothfast.lock,Cargo.tomlandCargo.lockalone. 0.3.1 to 0.3.2 is caret-compatible; only the action SHAs are pinned by hand.Breaking Changes
None. The composite action and its seven shell scripts are byte-identical between the two tags, so the bump changes the CLI and nothing else. No library, server, or MCP code is touched.
Testing
cargo test)The change is YAML only, so no cargo gate applies and the boxes above stay unticked. What ran, on all four changed workflows:
python3 -c "import yaml; yaml.safe_load(open(f))"parses each ofsoothfast.yml,deploy.yml,sdk-publish.yml,io-probe.yml.zizmor --no-online-auditsover the four reports no findings (27 suppressed).prek run --filesover the four passes.grep -rn '80b18d8831521646b65fec79c6df14d6f763c602' .github/returns nothing, andgrep -ro '69e2e9250414bd1dcaa1f45529f1e3fe12c593dd' .github/ | wc -lreturns 13.actionlintdid not run. It is not installed on the machine this was written on.The fix itself cannot be verified before merge, since it only shows up when the bot next regenerates the changelog on
master. Two things to check then. The Unreleased section should no longer carryRegenerate soothfast outputsorRegenerate derived artifactsunder### 🔧 Internal. The### 📦 Dependenciessection must still list its dependabot entries,Bump debian from ...andBump rust from .... The filter compares the author string exactly, sodependabot[bot]should survive it; dependabot entries disappearing would mean the filter is over-matching, which is a worse bug than the one this fixes and is grounds to revert.Documentation
CHANGELOG.mdis deliberately not touched here. The Unreleased section is generated, and the bot rewrites it after merge.Checklist
cargo check)cargo test)cargo fmt)cargo clippy)cargo doc --no-deps)Related Issues
Closes #480
Third in a stack. Base is
ci/bot-land-sdk-regeneration, so this stacks on #487, which stacks on #486, and it merges last. #486 and #487 both rewritesoothfast.ymlanddeploy.yml, which this also touches.