fix(automerge): accept divergent osv check names in the reusable auto-merge gate - #7
Merged
Merged
Conversation
…aves The osv verification reports as "osv scanner" where inlined (kanon) but "… osv scanner / osv-scan" where delegated (theatron, aletheia); a single endswith leaf can never match both, so auto-merge hard-failed on every delegating repo with all real checks green. require_passed_check now accepts any-of leaves; osv checks "osv scanner" then "osv-scan".
forkwright
added a commit
to forkwright/theatron
that referenced
this pull request
Jul 1, 2026
…e fix (#166) Pulls forkwright/.github#7: the reusable dependabot auto-merge gate now matches the delegated osv-scan check name, unblocking auto-merge on this repo. Gate-Passed: kanon 0.1.5 +stages:fmt,check,clippy,nextest,lint sha:e8440d9acedcb55c9dc49271e9775963c60348ec
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Root cause of dependabot auto-merge failing on every delegating repo (observed: 5 of 6 theatron dependabot PRs, all 4 aletheia ones): the reusable's
endswith("osv scanner")matcher never matches the delegated check namesecurity / osv scanner / osv-scan, while kanon's inlinedosv scannermatches — so kanon auto-merged and theatron/aletheia hard-failed with all real checks green.require_passed_checknow takes any-of leaves and the osv line checks"osv scanner" "osv-scan". Behavior otherwise unchanged: first matching check must bepass; nothing reported under any leaf still fails closed.Supersedes theatron's stranded
fix/dependabot-auto-merge-localbranch (which ported the workflow local to one repo — this fixes the shared reusable for the fleet). Consuming repos on@mainget it immediately; theatron pins at66867bcand needs a pin bump (follow-up).Longer-term: fleet-standardization R7 (kanon #2342) should unify the check names themselves, at which point the any-of degrades gracefully to a single leaf.