Skip to content

CI/packaging cleanup: pages.yml allowlist + x-maintenance-intent - #5

Merged
jonahbeckford merged 2 commits into
mainfrom
ci-packaging-cleanup
Aug 5, 2026
Merged

CI/packaging cleanup: pages.yml allowlist + x-maintenance-intent#5
jonahbeckford merged 2 commits into
mainfrom
ci-packaging-cleanup

Conversation

@jonahbeckford

Copy link
Copy Markdown
Contributor

Two small follow-ups after the 4.0.0 release.

pages.yml — fit the Actions allowlist

The GitHub Pages (odoc) workflow startup-failed once Actions was enabled,
because its actions aren't on the repository's curated allowlist. Pinned
them to SHA and bumped the stale checkout/setup-ocaml.

Requires three new allowlist entries (Settings > Actions > General;
SHA-pinned per repo convention) before it can run green on main:

actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d
actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9
actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

(pages.yml triggers only on push to main, so it does not run on this PR.)

x-maintenance-intent — use the (latest) placeholder

The source template used the bare latest rather than the (latest)
placeholder that opam expects (and that the published dkml-c-probe.3.2.0
already uses). Regenerated dkml-c-probe.opam accordingly.

The GitHub Pages workflow referenced actions that are not on the
repository's curated Actions allowlist (and stale checkout/setup-ocaml
versions), so it failed at startup once Actions was enabled.

+ pin actions/configure-pages to v6.0.0 (SHA)
+ pin actions/upload-pages-artifact to v5.0.0 (SHA)
+ pin actions/deploy-pages to v5.0.0 (SHA)
+ bump actions/checkout to the allowlisted @v6
+ pin ocaml/setup-ocaml to the allowlisted v3 SHA

Signed-off-by: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
The opam maintenance-intent placeholder for "the newest version" is
`(latest)` (parenthesized), matching the form already published for
dkml-c-probe.3.2.0 in opam-repository. The bare `latest` was a literal
version string rather than the placeholder.

Signed-off-by: Jonah Beckford <9566106-jonahbeckford@users.noreply.gitlab.com>
@jonahbeckford
jonahbeckford merged commit b8b13a4 into main Aug 5, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant