Skip to content

CI: make the Windows build a real gate - #6

Merged
Kevofehr merged 1 commit into
mainfrom
ci/picogk-real-build-gate
Jul 29, 2026
Merged

CI: make the Windows build a real gate#6
Kevofehr merged 1 commit into
mainfrom
ci/picogk-real-build-gate

Conversation

@Kevofehr

Copy link
Copy Markdown
Contributor

The build (windows, .NET 9) job has never actually run. It failed on every run, but the job carried continue-on-error: true, so the workflow still reported success and the CI badge only ever meant static checks passed.

Two causes, both fixed here:

  1. ref: 3725be3 is a short SHA. actions/checkout only treats a ref as a commit when it is the full 40 characters; anything shorter is resolved as a branch or tag name. The log shows it fetching +refs/heads/3725be3*:..., matching nothing, and failing with a bare exit code 1. Now pinned to the full SHA 3725be3aa88af97b12a4a531a4a93be0d8e1eeb6.
  2. The PicoGK fork was private, so the checkout leaned on secrets.PICOGK_TOKEN. It is public now, so the default GITHUB_TOKEN suffices and the token: line is gone. This is also what unblocks Dependabot and fork PRs, which are never handed repo secrets.

With both fixed the job can stand on its own, so continue-on-error comes off and a broken build fails CI from now on. The guard step keeps its early, readable failure, upgraded from ::notice to ::error with a message that matches reality.

This PR is the test. A green build (windows, .NET 9) check here is the first time that job has ever passed, and is the only evidence that removing continue-on-error is safe.

Follow-up, not in this PR: the four open Dependabot PRs (#1, #2, #3, #5) are all red for this same reason, not on their own merits. They want a rebase once this lands.

🤖 Generated with Claude Code

The build job has never actually run. Two things kept it down, and the
job carried continue-on-error, so every run still reported success and
the badge only ever meant "static checks passed".

1. `ref: 3725be3` is a SHORT SHA. actions/checkout only treats a ref as a
   commit when it is the full 40 characters; anything shorter resolves as
   a branch or tag, so it fetched refs/heads/3725be3* , matched nothing
   and failed. Pinned to the full SHA.
2. The PicoGK fork was private, so the checkout needed PICOGK_TOKEN. It
   is public now, so the default GITHUB_TOKEN is enough and the token
   line is gone. That is also what unblocks Dependabot and fork PRs,
   which are never handed repo secrets.

With both fixed the job can stand on its own, so continue-on-error comes
off and a broken build now fails CI. The guard step keeps its early,
readable failure but is an ::error rather than a ::notice.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Signed-off-by: Kevo <kevofehr@gmail.com>
@Kevofehr
Kevofehr merged commit 1daa744 into main Jul 29, 2026
2 checks passed
@Kevofehr
Kevofehr deleted the ci/picogk-real-build-gate branch July 29, 2026 02:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant