chore(ci): Maximize CI/CD values (Dependabot & Permissions)#1
Merged
Conversation
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
hyperpolymath
added a commit
that referenced
this pull request
May 14, 2026
Adding Cliodynamics/Causals/ZeroProb one-at-a-time failed: each Pkg.add re-resolves the whole project, and on call #1 the other two unregistered deps still cause check_registered to error out before the URL we just supplied is considered. Bundling all three PackageSpecs into one Pkg.add gives the resolver every git source up-front. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hyperpolymath
added a commit
that referenced
this pull request
May 14, 2026
Adding Cliodynamics/Causals/ZeroProb one-at-a-time failed: each Pkg.add re-resolves the whole project, and on call #1 the other two unregistered deps still cause check_registered to error out before the URL we just supplied is considered. Bundling all three PackageSpecs into one Pkg.add gives the resolver every git source up-front. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hyperpolymath
added a commit
that referenced
this pull request
May 14, 2026
* fix(ci): three workflow root-causes blocking Dependabot PRs
1. ci.yml — Pkg.instantiate() failed with `expected package
Cliodynamics [...] to be registered`. The project depends on
hyperpolymath-internal packages (Cliodynamics, Causals, ZeroProb)
that live in hyperpolymath/julia-ecosystem's General registry, not
the public Julia General. Add a step that clones the meta-repo and
copies registries/General into ~/.julia/registries/HyperpolymathGeneral
before instantiate. (Pkg can't add a registry from a subdir directly,
so we install it manually.) Also force-add upstream General as a
fallback for cold caches.
2. codeql.yml — language matrix was `javascript-typescript` on a
Julia-only repo; CodeQL exited with a configuration error every
run. Switch to `actions` (matches the fix already shipped to
JuliaKids.jl#7 and PRComms.jl#7 in this org).
3. hypatia-scan.yml — used `working-directory: ${{ env.HOME }}/hypatia`
which evaluated to `/hypatia` (env.HOME is not a GHA context — only
shell $HOME is). Replaced with the current canonical workflow from
hyperpolymath/hypatia which uses `cd "$HOME/hypatia"` inside the run
script and builds a fresh escript when needed.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): use Pkg.Registry.add(path=…) to install hyperpolymath subdir registry
Julia 1.11 ignores raw directory drops into ~/.julia/registries (it uses
the compressed-registry format with <name>.toml + tarball). Switch to
the documented Pkg.Registry.add(RegistrySpec(path=…)) approach. Init the
subdir as its own git repo so Pkg treats it as a bare-clone source.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): install hyperpolymath-internal Julia deps from git URLs
The 'General' registry at hyperpolymath/julia-ecosystem/registries/General
is just a mirror of upstream JuliaRegistries/General — it has the same
name+UUID+repo URL and does NOT contain Cliodynamics, Causals, or
ZeroProb. So pointing Pkg at it changes nothing; the path-based add we
had collapsed into the existing General registry on dedup.
Switch to direct Pkg.add(url=…) for each internal dep. The packages
each have a Project.toml with the matching name+UUID, so Pkg resolves
them cleanly without registry support.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): batch internal-dep Pkg.add into single call
Adding Cliodynamics/Causals/ZeroProb one-at-a-time failed: each Pkg.add
re-resolves the whole project, and on call #1 the other two unregistered
deps still cause check_registered to error out before the URL we just
supplied is considered. Bundling all three PackageSpecs into one
Pkg.add gives the resolver every git source up-front.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): also Pkg.add AcceleratorGate.jl (transitive via Causals + ZeroProb)
Causals and ZeroProb both list AcceleratorGate in their [deps].
AcceleratorGate isn't registered either, so without its URL the
resolver aborts with 'Unsatisfiable requirements detected'.
Note: this still depends on hyperpolymath/Causals.jl#4 landing first
(removes 9 fictional hardware-accelerator weakdeps with placeholder
UUIDs that no resolver can find).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(deps): declare StringDistances dependency
src/parsers.jl line 12 does `using StringDistances` but the package was
missing from Project.toml [deps]. Julia 1.11 precompile failed with:
ArgumentError: Package InvestigativeJournalist does not have
StringDistances in its dependencies
StringDistances is a registered package (uuid 88034a9c-...). Add it to
[deps] and constrain to compat = "0.11" (current major).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hyperpolymath
added a commit
that referenced
this pull request
May 20, 2026
* fix(ci): three workflow root-causes blocking Dependabot PRs
1. ci.yml — Pkg.instantiate() failed with `expected package
Cliodynamics [...] to be registered`. The project depends on
hyperpolymath-internal packages (Cliodynamics, Causals, ZeroProb)
that live in hyperpolymath/julia-ecosystem's General registry, not
the public Julia General. Add a step that clones the meta-repo and
copies registries/General into ~/.julia/registries/HyperpolymathGeneral
before instantiate. (Pkg can't add a registry from a subdir directly,
so we install it manually.) Also force-add upstream General as a
fallback for cold caches.
2. codeql.yml — language matrix was `javascript-typescript` on a
Julia-only repo; CodeQL exited with a configuration error every
run. Switch to `actions` (matches the fix already shipped to
JuliaKids.jl#7 and PRComms.jl#7 in this org).
3. hypatia-scan.yml — used `working-directory: ${{ env.HOME }}/hypatia`
which evaluated to `/hypatia` (env.HOME is not a GHA context — only
shell $HOME is). Replaced with the current canonical workflow from
hyperpolymath/hypatia which uses `cd "$HOME/hypatia"` inside the run
script and builds a fresh escript when needed.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): use Pkg.Registry.add(path=…) to install hyperpolymath subdir registry
Julia 1.11 ignores raw directory drops into ~/.julia/registries (it uses
the compressed-registry format with <name>.toml + tarball). Switch to
the documented Pkg.Registry.add(RegistrySpec(path=…)) approach. Init the
subdir as its own git repo so Pkg treats it as a bare-clone source.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): install hyperpolymath-internal Julia deps from git URLs
The 'General' registry at hyperpolymath/julia-ecosystem/registries/General
is just a mirror of upstream JuliaRegistries/General — it has the same
name+UUID+repo URL and does NOT contain Cliodynamics, Causals, or
ZeroProb. So pointing Pkg at it changes nothing; the path-based add we
had collapsed into the existing General registry on dedup.
Switch to direct Pkg.add(url=…) for each internal dep. The packages
each have a Project.toml with the matching name+UUID, so Pkg resolves
them cleanly without registry support.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): batch internal-dep Pkg.add into single call
Adding Cliodynamics/Causals/ZeroProb one-at-a-time failed: each Pkg.add
re-resolves the whole project, and on call #1 the other two unregistered
deps still cause check_registered to error out before the URL we just
supplied is considered. Bundling all three PackageSpecs into one
Pkg.add gives the resolver every git source up-front.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(ci): also Pkg.add AcceleratorGate.jl (transitive via Causals + ZeroProb)
Causals and ZeroProb both list AcceleratorGate in their [deps].
AcceleratorGate isn't registered either, so without its URL the
resolver aborts with 'Unsatisfiable requirements detected'.
Note: this still depends on hyperpolymath/Causals.jl#4 landing first
(removes 9 fictional hardware-accelerator weakdeps with placeholder
UUIDs that no resolver can find).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(deps): declare StringDistances dependency
src/parsers.jl line 12 does `using StringDistances` but the package was
missing from Project.toml [deps]. Julia 1.11 precompile failed with:
ArgumentError: Package InvestigativeJournalist does not have
StringDistances in its dependencies
StringDistances is a registered package (uuid 88034a9c-...). Add it to
[deps] and constrain to compat = "0.11" (current major).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
* fix(deps): declare Statistics stdlib so 1.10+ precompile succeeds
The macos rebased CI run failed with:
ArgumentError: Package InvestigativeJournalist does not have
Statistics in its dependencies
Julia 1.10+ requires stdlibs to be explicitly listed in [deps] even
when they ship with the runtime. Statistics is used transitively but
not declared. Add it.
Sister to hyperpolymath/PRComms.jl#6 which made the same fix there.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This automated PR updates your CI/CD configurations to maximize value and security.
github-actionsis monitored for updates.permissions: read-allto workflows missing explicit permissions.