Skip to content

fix: action.yml default meta-repo-ref must be floating major tag#40

Merged
TMHSDigital merged 1 commit intomainfrom
fix/action-yml-default-meta-repo-ref-floating
Apr 26, 2026
Merged

fix: action.yml default meta-repo-ref must be floating major tag#40
TMHSDigital merged 1 commit intomainfrom
fix/action-yml-default-meta-repo-ref-floating

Conversation

@TMHSDigital
Copy link
Copy Markdown
Owner

Fixes a stale hardcoded default in the drift-check composite action surfaced during the v1.9.0 ecosystem signal rollout.

The meta-repo-ref input defaulted to v1.7 which was never updated when 1.8/1.9 shipped. Tool repos consuming the action without explicit override would silently use v1.7 of the meta-repo's checker code, producing inverse-direction version-signal drift if tool signals moved past 1.7.0.

Fix: change default to v1 (auto-maintained MAJOR floating tag per DTD#14). Future MINORs auto-flow through.

Adds regression test guarding the floating-major pattern.

Will unblock the v1.9.0 ecosystem signal rollout (Home-Lab canary TMHSDigital/Home-Lab-Developer-Tools#18, batch to follow).

VERSION: 1.9.0 -> 1.9.1 (PATCH, default-behavior bug fix).

The `meta-repo-ref` default in .github/actions/drift-check/action.yml
was hardcoded to 'v1.7' and never updated when 1.8 and 1.9 shipped.
Tool repos consuming the action without explicit override would get
the meta-repo checked out at v1.7 regardless of which version of the
action they pinned, producing inverse-direction version-signal drift
if their signals ever moved past 1.7.0.

Fixes by changing the default to 'v1' (the auto-maintained MAJOR
floating tag per DTD#14). Future MINORs auto-flow through this
default without requiring action.yml edits.

Surfaced during the v1.7.0 -> v1.9.0 ecosystem signal rollout when
the Home-Lab canary's drift-check failed with 35 inverse-direction
warnings: tool signals at 1.9.0 vs action's hardcoded v1.7
meta-VERSION.

Adds regression test asserting the default matches floating-major
pattern (v[0-9]+) to prevent re-introduction.

Refs TMHSDigital/Home-Lab-Developer-Tools#18.

Signed-off-by: TMHSDigital <154358121+TMHSDigital@users.noreply.github.com>
Made-with: Cursor
@github-actions
Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@github-actions github-actions Bot added the ci label Apr 26, 2026
@TMHSDigital TMHSDigital merged commit e1f57e4 into main Apr 26, 2026
13 of 14 checks passed
@TMHSDigital TMHSDigital deleted the fix/action-yml-default-meta-repo-ref-floating branch April 26, 2026 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant