Skip to content

ci: bump a2ml-validate-action to 6bff6ec (s-expression form support)#73

Merged
hyperpolymath merged 1 commit into
mainfrom
ci/bump-a2ml-validate-action-sexpr-support
Jun 1, 2026
Merged

ci: bump a2ml-validate-action to 6bff6ec (s-expression form support)#73
hyperpolymath merged 1 commit into
mainfrom
ci/bump-a2ml-validate-action-sexpr-support

Conversation

@hyperpolymath
Copy link
Copy Markdown
Owner

Bump hyperpolymath/a2ml-validate-action from 59145c7 to 6bff6ec.

Upstream PR: hyperpolymath/a2ml-validate-action#26 (merged 2026-06-01) — validator now recognises both TOML and s-expression identity/version dialects.

Real-world bite: panic-attack#94 hit this on docs/campaigns/2026-05-26.a2ml on 2026-06-01.

Estate sweep: 215 repos in the same wave. No behavioural change unless the repo carries an s-expression-form .a2ml file.

Validator PR #26 (merged 2026-06-01) taught the action to recognise
both TOML `name = "x"` AND s-expression `(name "x")` identity
and version forms. The pre-fix SHA only matched TOML, so any
`.a2ml` file using s-expression dialect (idiomatic in campaign
reports and audit registries) failed Dogfood Gate with
"Missing required identity field" even when the field was
structurally present.

Real-world bite: hyperpolymath/panic-attack#94 hit this on
docs/campaigns/2026-05-26.a2ml on 2026-06-01.

This bump is purely a workflow SHA refresh; no behavioural change
for repos that don't carry s-expression manifests.
@hyperpolymath hyperpolymath enabled auto-merge (squash) June 1, 2026 19:57
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Jun 1, 2026

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

🔍 Hypatia Security Scan

Findings: 108 issues detected

Severity Count
🔴 Critical 30
🟠 High 17
🟡 Medium 61

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Stale AI session file -- delete",
    "type": "stale",
    "file": "GEMINI.md",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in build-validation.yml",
    "type": "missing_timeout_minutes",
    "file": "build-validation.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath hyperpolymath merged commit a427071 into main Jun 1, 2026
17 of 24 checks passed
@hyperpolymath hyperpolymath deleted the ci/bump-a2ml-validate-action-sexpr-support branch June 1, 2026 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant