Skip to content

chore(main): release 6.10.0 - #476

Merged
sebastiancorrea81 merged 1 commit into
mainfrom
release-please--branches--main
Aug 7, 2026
Merged

chore(main): release 6.10.0#476
sebastiancorrea81 merged 1 commit into
mainfrom
release-please--branches--main

Conversation

@github-actions

@github-actions github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

🤖 I have created a release beep boop

6.10.0 (2026-08-07)

Features

  • service_definition: forward link spec fields from the template (#477) (2994e6b)

Bug Fixes

  • ci: compare release PR author against REST-style bot login (4e00860)
  • ci: compare release PR author against REST-style bot login (#481) (75a16ea)
  • ci: trigger release PR auto-merge via workflow_run instead of pull_request (e7eff48)
  • ci: trigger release PR auto-merge via workflow_run instead of pull_request (#479) (80738de)
  • eks: support an optional aws_profile for the kubernetes provider exec plugin (#471) (ccb2f5f)

This PR was generated with Release Please. See documentation.

sebastiancorrea81 added a commit that referenced this pull request Aug 7, 2026
…ll_request (#479)

## Problem

`auto-merge-release-pr` (triggered on `pull_request`) has been silently
broken for a while: the release-please PR is always opened by
`github-actions[bot]`, whose `author_association` on this repo is
`CONTRIBUTOR` (not `MEMBER`/`COLLABORATOR`). That's enough for GitHub's
"require approval for outside collaborators" gate to treat its
`pull_request`-triggered runs as needing manual approval — the same
mechanism used for fork PRs — even though this branch
(`release-please--branches--main`) lives in this repo, not a fork.

Evidence:
- Every recent release PR (#472/6.8.2, #464/6.8.1, #460/6.8.0,
#457/6.7.2, #453/6.7.1) was merged **by a human**, never by the bot.
- The last two `auto-merge-release-pr` runs on PR #476 (release 6.9.0)
completed with conclusion `action_required` and **zero jobs executed**.
- An earlier run on the same branch was stuck `queued` for >21h and
never ran.

## Fix

Switch the trigger from `pull_request` to `workflow_run` (on `"Release
Please"` completing). Runs triggered by `workflow_run` always use the
workflow file from the default branch with full permissions and aren't
subject to the outside-collaborator approval gate.

Since `workflow_run` doesn't carry PR context, a new `find-pr` job
resolves the open release PR itself (same lookup `generate-readmes`
already does in `release.yml`) and validates its author/label before
merging — this is exactly what the reusable workflow's existing
`pr_number` input was already built for (see its description in
`nullplatform/actions-nullplatform`), so **no changes needed there**.

This also removes the `concurrency`/`cancel-in-progress` workaround for
the `generate-readmes` follow-up commit race — `workflow_run` only fires
once the entire "Release Please" run (both jobs) has finished, so
there's nothing to race against anymore.

## Test plan

- [ ] Merge this PR.
- [ ] Merge (or wait for) the next normal feature/fix PR to `main`.
- [ ] Confirm in the Actions tab that `auto-merge-release-pr` now fires
via `workflow_run`, `find-pr` resolves the release PR, and `automerge`
completes successfully (no `action_required`/`queued`).
- [ ] Confirm the release PR gets merged by the bot without human
intervention, and the tag/GitHub Release is published automatically.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
@github-actions github-actions Bot changed the title chore(main): release 6.9.0 chore(main): release 6.9.1 Aug 7, 2026
@github-actions
github-actions Bot force-pushed the release-please--branches--main branch from 24d942a to b16ea7d Compare August 7, 2026 16:20
sebastiancorrea81 added a commit that referenced this pull request Aug 7, 2026
## Problem

Follow-up to #479. Confirmed live right after #479 merged: the new
`find-pr` job ran and correctly located PR #476, but skipped it with
"Open PR doesn't match expected author/label", leaving the release PR
un-merged.

Root cause: `gh pr list --json author` is GraphQL-backed and represents
`github-actions[bot]` as `"app/github-actions"`, not
`"github-actions[bot]"`. The comparison in `find-pr` (and the reusable
workflow's `release_pr_author` default, and the old
`pull_request`-triggered version's
`github.event.pull_request.user.login`) all expect the REST-style
`"github-actions[bot]"`.

## Fix

Switch the PR lookup from `gh pr list --json author` to `gh api
repos/{repo}/pulls?state=open&head={owner}:release-please--branches--main`
(REST), whose `user.login` is `"github-actions[bot]"` as expected.
Verified locally against the real PR #476 before pushing.

## Test plan

- [ ] Merge this PR.
- [ ] Confirm in Actions that the next `auto-merge-release-pr`
(workflow_run) run resolves `pr_number` for PR #476 and actually merges
it this time.
- [ ] Confirm the tag/GitHub Release gets published without human
intervention.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
@github-actions
github-actions Bot force-pushed the release-please--branches--main branch from 86655d1 to 94d0f2c Compare August 7, 2026 16:54
@github-actions github-actions Bot changed the title chore(main): release 6.9.1 chore(main): release 6.10.0 Aug 7, 2026
@github-actions
github-actions Bot force-pushed the release-please--branches--main branch from f14d219 to 3cf69c8 Compare August 7, 2026 17:42
@github-actions
github-actions Bot force-pushed the release-please--branches--main branch from 6644d8f to 1bd0eb9 Compare August 7, 2026 17:45
@sebastiancorrea81
sebastiancorrea81 merged commit 01dd296 into main Aug 7, 2026
1 check passed
@sebastiancorrea81
sebastiancorrea81 deleted the release-please--branches--main branch August 7, 2026 17:45
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

🤖 Created releases:

🌻

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant