From fd9a65fbc355d55e4a782ff991d0ae4c591fca38 Mon Sep 17 00:00:00 2001 From: tudormatei Date: Wed, 2 Sep 2026 14:24:12 +0300 Subject: [PATCH] ci: exempt first-party packages from the Safe Chain age gate in CD `lint.yml`, `test.yml` and `publish-dev.yml` all set SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS, but `cd.yml` never got it, and CD builds in its own inline job. The post-merge run for 0.16.15 resolved fine and then died downloading uipath-langchain-client 1.18.3, published an hour earlier, so the release did not reach PyPI. Skips only the age gate; malware scanning and the other Safe Chain checks still run. The list is copied from the other three workflows unchanged. --- .github/workflows/cd.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 7cee7e4ec..60a4034d3 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -9,6 +9,9 @@ on: paths: - pyproject.toml +env: + SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS: uipath,uipath-core,uipath-dev,uipath-langchain,uipath-langchain-client,uipath-llm-client,uipath-platform,uipath-robot,uipath-runtime,jsonschema-pydantic-converter + jobs: lint: uses: ./.github/workflows/lint.yml