Skip to content

v1.6.2 — Upgrade environment repair - #42

Merged
juancobo merged 5 commits into
mainfrom
v1.6.2
Jul 17, 2026
Merged

v1.6.2 — Upgrade environment repair#42
juancobo merged 5 commits into
mainfrom
v1.6.2

Conversation

@juancobo

Copy link
Copy Markdown
Member

Patch release. Repairs the upgrade workflow environment: the "Upgrade Telar" workflow installed only part of the Python dependencies the upgrade tooling needs, so post-migration data regeneration failed on user sites (fail-closed since v1.5.0, so no workflow-driven upgrade targeting v1.5.0+ could succeed). Also repairs two related defects that reached user sites: the v1.6.0 migration shipped package.json without its lock file (breaking npm ci in site CI), and the user-site guard on the test workflow was accidentally dropped in v1.5.0 (framework tests ran, and failed, on user sites).

Changes:

  • .github/workflows/upgrade.yml: install -r requirements.txt; duplicate-issue guard (supersedes an existing open upgrade issue for the same target instead of filing a twin)
  • scripts/upgrade.py: ensure regeneration dependencies before data regeneration, installing from the release tarball's bundled requirements.txt (fallback: the site's copy) — reaches existing sites with stale workflow copies, since the tooling is fetched fresh at the target version on every run; pip install bounded with a timeout; regeneration subprocesses use sys.executable
  • scripts/migrations/v161_to_v162.py: new migration — ships package.json + regenerated package-lock.json as a pair, deletes .github/dependabot.yml from user sites, bilingual manual steps for workflow hand-updates
  • .github/workflows/telar-tests.yml: user-site guard restored on both jobs
  • .github/dependabot.yml removed from the template (user sites should not carry it)
  • New tests: workflow installs the full manifest; every third-party import in scripts/ maps to a requirements.txt entry; guard presence; migration manifests ship the package pair; dependency-ensure unit tests
  • Version bumps: package.json + lock, _config.yml telar.version/release_date, README callouts
  • CHANGELOG entry

juancobo added 5 commits July 17, 2026 10:15
…pgrade.py, restore test guard, drop dependabot
Naive-pass findings: the pip subprocess was the only unguarded subprocess
in upgrade.py (a hung resolve would stall CI until the job timeout);
_REGENERATION_IMPORTS did not state import-name vs pip-name; the ensure
and regenerate helpers were linked only through main().
Copilot AI review requested due to automatic review settings July 17, 2026 18:00

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@juancobo
juancobo merged commit 299a9e2 into main Jul 17, 2026
2 checks passed
@juancobo
juancobo deleted the v1.6.2 branch July 17, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants