Skip to content

ci: install the pinned toolchain's components in the retried step - #797

Merged
flyingrobots merged 4 commits into
mainfrom
ci/preinstall-pinned-toolchain-components
Oct 13, 2026
Merged

flyingrobots merged 4 commits into
mainfrom
ci/preinstall-pinned-toolchain-components

Conversation

@flyingrobots

@flyingrobots flyingrobots commented Oct 13, 2026 •

Copy link
Copy Markdown
Owner

What changes

rust-toolchain.toml pins 1.96.0 with rustfmt and clippy. Most jobs installed 1.96.0 through dtolnay/rust-toolchain with a narrower component set (often none). The first cargo command in a later run step then made rustup sync the channel manifest and install the missing components. That implicit download has no retry.

Observed on #791: the Build and check Edict provider verifier job failed in its cargo xtask step with

info: syncing channel updates for '1.96.0-x86_64-unknown-linux-gnu'
error: could not download file from 'https://static.rust-lang.org/dist/channel-rust-1.96.0.toml.sha256'

although the job had installed 1.96.0 two steps earlier (cargo, rust-std, rustc only).

Every step that installs 1.96.0 now names both components: 32 steps across seven workflows, of which one already did. The download happens inside the action, which retries, and run steps need no network for the toolchain. No job installs anything it was not already installing implicitly.

Evidence

The failing log lines above are from run 38349154351. This PR's own checks exercise the change; the thing to look for is that no run step prints syncing channel updates for '1.96.0-...'.

Limits

This removes one source of the flake, the one seen. A download failure inside the action after its retries, or a crates.io or container-registry failure, can still fail a job.

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Rust formatting and linting tools are now consistently available across automated build and validation workflows, including checks for security, performance, determinism, and reproducible builds on Linux and macOS.
    • These workflow updates do not change user-facing application behavior.

rust-toolchain.toml pins 1.96.0 with rustfmt and clippy. Most jobs installed
1.96.0 through dtolnay/rust-toolchain with a narrower component set, so the
first cargo command in a later run step made rustup fetch the channel manifest
and the missing components. That implicit download has no retry, and a
transient failure of static.rust-lang.org failed the job (for example
"could not download file from .../channel-rust-1.96.0.toml.sha256" in the
Edict provider verifier job).

Every 1.96.0 install step now names both components, so the download happens
in the action, which retries, and run steps need no network for the toolchain.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-13T05:40:34.143542Z a2defd4 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: flyingrobots/echo/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 85d237a1-1387-4739-9ffd-ac363350b960
📥 Commits

Reviewing files that changed from the base of the PR and between f86acbd and a2defd4.

📒 Files selected for processing (6)
  • .github/workflows/ci.yml
  • .github/workflows/det-gates.yml
  • .github/workflows/determinism.yml
  • .github/workflows/dind-cross-platform.yml
  • .github/workflows/macos-local.yml
  • .github/workflows/security-audit.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

Rust toolchain setup steps across CI, determinism, platform, and security workflows now explicitly install rustfmt and clippy. The build-repro candidate job keeps its existing wasm target setup.

Changes: Rust workflow setup

Layer / File(s) Summary
Install components across workflows
.github/workflows/ci.yml, .github/workflows/det-gates.yml, .github/workflows/determinism.yml, .github/workflows/dind-cross-platform.yml, .github/workflows/macos-local.yml, .github/workflows/security-audit.yml
Rust toolchain setup steps now explicitly install rustfmt and clippy. The build-repro candidate job retains its existing wasm target setup.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to a2def

This change is limited to CI toolchain setup; no actionable merge-blocking risk is indicated by the supplied review context.

### Architecture Summary

Architecture risk: 🔵 Low · up to a2def

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

  • observed — Modified behavior in .github/workflows/ci.yml: The format job now explicitly installs rustfmt and clippy with Rust 1.96.
  • observed — Modified behavior in .github/workflows/ci.yml: The core-libraries Clippy job now installs rustfmt in addition to clippy.
  • observed — Modified behavior in .github/workflows/ci.yml: The support-libraries Clippy job now installs rustfmt in addition to clippy.
  • observed — Modified behavior in .github/workflows/ci.yml: The binaries Clippy job now installs rustfmt in addition to clippy.
Pre-merge checks · Passed 5
Passed Passed checks (5 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title accurately summarizes the main change: installing the pinned Rust toolchain components in CI steps that can be retried.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

The previous commit duplicated a components key in echo-keep-experimental.yml,
which already named both components, and indented the new keys inconsistently
in the two-space workflow files. Restore the first and correct the others.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: dfe0a7668f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/echo-keep-experimental.yml Outdated
Comment thread .github/workflows/determinism.yml Outdated
flyingrobots and others added 2 commits October 12, 2026 22:30
Address review: the first pass matched only steps written as a list item and
missed the six named steps in det-gates.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@flyingrobots
flyingrobots merged commit 7651b52 into main Oct 13, 2026
42 checks passed
@flyingrobots
flyingrobots deleted the ci/preinstall-pinned-toolchain-components branch October 13, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant