starred/appstore
1
0
Fork 0
mirror of https://github.com/okxlin/appstore.git synced 2026-09-24 16:01:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: allow digest-only Renovate automerge

Browse Source 
Treat exact same-reference SHA-256 digest replacements as image-only updates that do not require an app-version marker. Reconcile all whitelisted Renovate PRs through the final automerge gate so labels and marker prefilters cannot strand eligible updates.
This commit is contained in:
okxlin
2026-08-07 13:29:29 +08:00
parent 42b3fed882
commit 04355fa322
3 changed files with 66 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/scripts/test_renovate_app_version.py
+27
View File
@@ -811,6 +811,33 @@ class RenovateAppVersionTests(unittest.TestCase):
self.assertIn("headRefName,headRepositoryOwner,isCrossRepository", reconcile)
self.assertIn('.headRefName | startswith("selfhosted-renovate/")', reconcile)
def test_automerge_allows_exact_digest_only_updates_without_version_marker(self):
workflow = (
REPO_ROOT / ".github" / "workflows" / "renovate-automerge.yml"
).read_text(encoding="utf-8")
self.assertIn("def digest_reference(image):", workflow)
self.assertIn(
're.fullmatch(r"([^@\\s]+)@sha256:([0-9a-fA-F]{64})", image)',
workflow,
)
self.assertIn("old_digest[0] != new_digest[0]", workflow)
self.assertIn("old_digest[1] == new_digest[1]", workflow)
self.assertIn("filename_is_compose != previous_is_compose", workflow)
self.assertIn("digest_only=true", workflow)
self.assertIn("steps.shape.outputs.digest_only", workflow)
self.assertIn("Digest-only image update; app-version marker is not required", workflow)
self.assertIn("Update app version [skip ci]", workflow)
def test_reconcile_delegates_all_whitelisted_open_prs_to_automerge_gate(self):
workflow = (
REPO_ROOT / ".github" / "workflows" / "renovate-automerge-reconcile.yml"
).read_text(encoding="utf-8")
self.assertNotIn('index("renovate-auto")', workflow)
self.assertNotIn("Update app version [skip ci]", workflow)
self.assertIn("gh workflow run renovate-automerge.yml", workflow)
def test_semantic_entrypoint_blocks_external_host_abort(self):
entrypoint = REPO_ROOT / ".github" / "scripts" / "renovate-entrypoint.sh"
with tempfile.TemporaryDirectory(prefix="renovate-entrypoint-test-") as tmp: