Skip to content

Harden CI sibling checkouts against force-pushes #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
avrabe merged 1 commit into from
May 23, 2026
Merged

Harden CI sibling checkouts against force-pushes #21

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 12 additions & 2 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,13 @@ env:
# pins, unpinned `main` of relay/rivet can change tool behavior on this
# workflow with zero wohl code change (see #8 for the concrete
# incident that motivated pinning).
RELAY_REF: 4d42acf4a23c56980091f943c966ae5e0223a79f
RIVET_REF: 335bb84be0bb1be3768438ecec109c945c6b6530
#
# IMPORTANT: every cross-repo checkout below uses `fetch-depth: 0`
# because relay/rivet are routinely force-pushed by the architect.
# Without a full fetch, an orphaned (rebased-away) SHA fails to
# resolve under actions/checkout's default shallow strategy.
RELAY_REF: 178ffd479ad863c91ece4f580379a9207c36a530
RIVET_REF: 78f001e23d595ba816f7a7be59282194dedfdc12

jobs:
lint:
Expand All @@ -32,6 +37,7 @@ jobs:
repository: pulseengine/relay
path: relay
ref: ${{ env.RELAY_REF }}
fetch-depth: 0
- uses: dtolnay/rust-toolchain@master
with:
toolchain: "1.85.0"
Expand Down Expand Up @@ -66,6 +72,7 @@ jobs:
repository: pulseengine/relay
path: relay
ref: ${{ env.RELAY_REF }}
fetch-depth: 0
- uses: dtolnay/rust-toolchain@master
with:
toolchain: "1.85.0"
Expand All @@ -88,6 +95,7 @@ jobs:
repository: pulseengine/relay
path: relay
ref: ${{ env.RELAY_REF }}
fetch-depth: 0
# Kani-verifier (the installer) needs newer Rust than our MSRV.
# Kani itself uses an internal nightly for the proofs.
- uses: dtolnay/rust-toolchain@stable
Expand Down Expand Up @@ -130,6 +138,7 @@ jobs:
repository: pulseengine/relay
path: relay
ref: ${{ env.RELAY_REF }}
fetch-depth: 0
- uses: dtolnay/rust-toolchain@master
with:
toolchain: nightly
Expand Down Expand Up @@ -161,6 +170,7 @@ jobs:
repository: pulseengine/rivet
path: rivet
ref: ${{ env.RIVET_REF }}
fetch-depth: 0
# rivet-cli's deps need Rust 1.89+; we don't care about MSRV for tooling.
- uses: dtolnay/rust-toolchain@stable
- uses: Swatinem/rust-cache@v2
Expand Down
Loading