From 1273bee25fcafabbfe0b8582b4ae74e48b0a0980 Mon Sep 17 00:00:00 2001 From: hyperpolymath Date: Sun, 17 May 2026 06:04:22 +0100 Subject: [PATCH] ci: pin just@1.34.0 in build-gossamer-gui (Tooling Version Integrity) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Unversioned `tool: just` resolves via taiki-e/install-action's bundled manifest, which can ship an old just (<1.19.0). The Justfile uses `import? "contractile.just"` (just >= 1.19.0), so an old just dies with `error: Unknown start of token` and the build silently breaks — the exact root cause of the dead Elixir gate in burble#39, here armed in another repo. Estate Tooling Version Integrity policy: never install a rhyming-family tool unversioned. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/build-gossamer-gui.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index 7c0f377d..8dfa384f 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -152,7 +152,13 @@ jobs: - name: Install just uses: taiki-e/install-action@184183c2401be73c3bf42c2e61268aa5855379c1 # v2.78.1 with: - tool: just + # Pin an explicit modern just: the Justfile uses `import?` + # (optional import, just >= 1.19.0). Unversioned `tool: just` + # resolves via this action's bundled manifest, which can ship + # an old just (e.g. 1.14.0) -> `error: Unknown start of token` + # at `import? "contractile.just"`, silently breaking the build. + # Estate Tooling Version Integrity policy (root cause: burble#39). + tool: just@1.34.0 - name: Cache Ephapax build id: cache-ephapax