Skip to content

ci(v37-dev): add v37-dev to pull_request allowlists so v37-dev Drops get the real matrix - #1070

Merged
frstrtr merged 2 commits into
v37-devfrom
ci-steward/v37-dev-ci-allowlist
Aug 4, 2026
Merged

ci(v37-dev): add v37-dev to pull_request allowlists so v37-dev Drops get the real matrix#1070
frstrtr merged 2 commits into
v37-devfrom
ci-steward/v37-dev-ci-allowlist

Conversation

@frstrtr

@frstrtr frstrtr commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Fixes the shared-infra CI-trigger defect (routed from v37-dev-steward via integrator, verified on v37-dev HEAD 86c46bb).

For pull_request events GitHub runs the workflow file from the BASE branch. v37-dev was in none of the CI allowlists, so any PR based on v37-dev (Drop-3 #1068 and every prior v37-dev Drop) got only attribution-gate + the automerge evaluate no-op — no aggregate / path-filter / platform-coverage / coin-matrix / CodeQL / platform builds. Structurally impossible to get the matrix, not a per-SHA hollow-green.

Change (mechanism (a) — edit the copies ON v37-dev so the fix is immediately effective for v37-dev-based PRs; no master merge-down dependency):

  • build.yml on.pull_request.branches += v37-dev
  • coin-matrix.yml on.pull_request.branches += v37-dev (runs the full 6-coin matrix: ltc doge dash btc dgb bch)
  • codeql-analysis.yml push + pull_request branches += v37-dev

CI contract set to the master bar: v37-dev Drops now get full 6-coin coverage + CodeQL, so a v37-dev->master merge cannot surprise master with red or unscanned code.

safe-cosmetic-automerge.yml intentionally untouched — its BASE_REQUIRED=master guard already no-ops on non-master bases.

Not self-merging — integrator/operator gate.

frstrtr added 2 commits August 3, 2026 23:29
PRs based on v37-dev previously matched no CI allowlist, so GitHub ran
only attribution-gate + automerge evaluate no-op from the base-branch
workflow files (pull_request uses the BASE ref workflow). Add v37-dev to
on.pull_request.branches in build.yml, coin-matrix.yml (full 6-coin
matrix), and codeql-analysis.yml so every v37-dev Drop gets the same
aggregate / path-filter / platform-coverage / coin-matrix / CodeQL /
platform-build coverage as master before it can merge up.
The Windows x86_64 Verify/Package steps hardcoded Copy-Item of
libsecp256k1-6.dll. Upstream unpinned secp256k1 bumped the SONAME 6->7,
so the runner emits libsecp256k1-7.dll and every copy exit-1s, failing
the Windows leg of this v37-dev allowlist PR for a reason already fixed
on master (#1069). Glob all three copies so any SONAME bump is copied.
build.yml only; release.yml is not exercised by pull_request checks.
@frstrtr
frstrtr merged commit 0db0102 into v37-dev Aug 4, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant