{"entries":[{"lastCommit":{"author":{"email":"paul@myitcv.io","name":"Paul Jolly","when":"2026-02-03T02:03:46.000000Z"},"committer":{"email":"paul@myitcv.io","name":"Paul Jolly","when":"2026-02-03T13:45:51.000000Z"},"hash":"839f03d23da0129ad2289cf2a14c8a2991507825","message":"internal/ci: allow steps to influence job permissions\n\nAllow steps declared in a job to set permissions on that job. This is\nimportant when steps are reused between jobs. In particular, the new\nregistry-login-action step, which requires a certain permission to be\nset on the containing job. We corresponding update loginCentralRegistry\nto use this new capability and remove the manual setting of the\npermission within the two jobs that use this reusable step.\n\nWe bump the nested CUE module's version in order to use explicit open.\n\nSigned-off-by: Paul Jolly \nChange-Id: Ifb363e0bffe01e3198b966c7de78e777c604320a\nReviewed-on: https://cue.gerrithub.io/c/cue-lang/cue/+/1230270\nTryBot-Result: CUEcueckoo \nReviewed-by: Daniel Martí \n","tree":"83fdc5735720a327b8148a071e77876de1be7c28"},"mode":"0100644","name":"release.cue","size":3126},{"lastCommit":{"author":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-07-17T11:41:30.000000+01:00"},"committer":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-07-17T11:12:37.000000Z"},"hash":"17177e96d37f6d504138ff7588cea9157779f687","message":"internal/ci: carve out into a separate module to be published\n\nWe leave the root cuelang.org/go CUE module, as that is still useful\nto be able to develop the various CUE packages such as\ninternal/filetypes and the standard library under \"pkg\".\n\nThe githubactions dependency is now inside the internal/ci module.\n\nFinally, the new module is named after github.com/cue-lang/tmp,\nas this is the first time we publish this internal CI module\nand we don't want to make it sound too official just yet.\n\nSigned-off-by: Daniel Martí \nChange-Id: Ica37d7bac91adeff7971860f434558da7631c685\nReviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1218676\nTryBot-Result: CUEcueckoo \nUnity-Result: CUE porcuepine \nReviewed-by: Paul Jolly \n","tree":"9728c0f70a3a785ba32d77d903a7da7d9e760865"},"mode":"0100644","name":"repo.cue","size":1121},{"lastCommit":{"author":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-08-05T13:47:59.000000+01:00"},"committer":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-08-05T13:12:51.000000Z"},"hash":"d7a0e58385dc8e5de27e87135405bfdd40ea14c6","message":"internal/ci: have the dispatch and trigger workflows use a separate cache\n\nNamespace has very fast caching via bind-mounted volumes.\nHowever, their cache system is not linear; a workflow run is not\nguaranteed to get the latest cache write that happened within the same\nrepository and runner profile. Their system is distributed and scalable,\nand they assume that eventual cache consistency is OK, so instead\na workflow run is most likely to get a recently-updated cache volume.\n\nThis works well for one workflow which reads and writes a set of files\nto the cache volume. However, when it comes to repositories like \"cue\"\nwhich have the full trybot setup, each push to a CL or master triggers\na few workflows at once, such as \"trybot dispatch\" to run CI on a CL.\n\nGiven that the use of cache volumes is enabled for an entire runner\nprofile on Namespace, all of these workflows use caching, even though\nthese dispatch workflows are rather light. We could have them use\nentirely different runner profiles without caching, but that is not\nideal given that they still benefit from a bit of caching,\nsuch as fetching the used actions like setup-qemu-action.\n\nThankfully, as part of the \"runs-on\" label, Namespace allows a workflow\nto override the cache tag, which defines which set of workflow runs\nshould share the same set of volume caches. By default, this tag joins\nthe names of the runner profile, the repository, and the workflow, like:\n\n github-namespace-profile-linux-amd64-cue-lang-cuelang.org-trybot\n\nThis is fine for workflows like the \"trybot\" workflow; we don't want\nthese to be shared across runner profiles (Windows and Linux produce\nentirely different GOCACHE contents) nor across repositories\n(each repository has its own set of dependencies and tests).\n\nHowever, for the dispatch or trigger workflows, use a global tag\nwhich allows all of them to be entirely separate, as well as shared\nacross all runners and repositories. Given that they tend to just cache\nbits which are independent of OS and repository, such as actions,\nit's fine to share this much. This also avoids doubling the cache\nstorage cost on a per-repository and per-runner basis.\n\nSigned-off-by: Daniel Martí \nChange-Id: Ica64db266ec6a3a1d5f087d784c297d7fab149d0\nReviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1219841\nUnity-Result: CUE porcuepine \nTryBot-Result: CUEcueckoo \nReviewed-by: Paul Jolly \n","tree":"3a136b684457aaf885b2582982fec6697b3a085f"},"mode":"0100644","name":"tip_triggers.cue","size":2100},{"lastCommit":{"author":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2026-05-27T18:13:47.000000+01:00"},"committer":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2026-05-28T09:21:00.000000Z"},"hash":"0e2745d9330c7e9fac7850e4135873386eb18791","message":"internal/ci: set GORACE in the base config\n\nAs I am seeing exactly the same issue in our other repos using -race,\nand having to remember to copy this line from trybot.cue is not great.\n\nThis is done via $GITHUB_ENV rather than globally setting the env var\nfor all bash workflows, because this is only needed when using Go,\nand this way it's also set alongside all other Go env vars.\n\nNote that we cannot use `go env -w` for this variable,\nbecause it's a Go runtime variable rather than a cmd/go one.\n\nWhile here, update to the latest githubactions version.\n\nSigned-off-by: Daniel Martí \nChange-Id: I553cbe83abc69906dc95b53a781866846860e3cf\nReviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1238067\nReviewed-by: Marcel van Lohuizen \nTryBot-Result: CUEcueckoo \nUnity-Result: CUE porcuepine \n","tree":"98b81c9c54c517f416f29f757c18263570a6d3ac"},"mode":"0100644","name":"trybot.cue","size":8445},{"lastCommit":{"author":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-07-29T14:03:22.000000+01:00"},"committer":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2025-08-05T13:10:41.000000Z"},"hash":"de5c77eb942fb4964dd609b73ad930c6dee3b549","message":"internal/ci: require that workflow names be unique\n\nI added an extra \"another_trybot\" workflow with the same name \"TryBot\"\nand verified that this caught the mistake:\n\n $ go generate ./internal/ci\n workflows._uniqueWorkflowNames.TryBot: conflicting values \"another\" and \"trybot\":\n ./base/write.cue:42:3\n\nWhile here, move the use of trybot.name to trybotWorkflows.\n\nSigned-off-by: Daniel Martí \nChange-Id: Icbedd0494245aad33195d1a454741cc0e7c1a3af\nReviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1219414\nReviewed-by: Paul Jolly \nUnity-Result: CUE porcuepine \nTryBot-Result: CUEcueckoo \n","tree":"58808a371f72bc6735a784e9313c91fd82c3a315"},"mode":"0100644","name":"workflows.cue","size":1794}],"lastCommit":{"author":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2026-05-27T18:13:47.000000+01:00"},"committer":{"email":"mvdan@mvdan.cc","name":"Daniel Martí","when":"2026-05-28T09:21:00.000000Z"},"hash":"0e2745d9330c7e9fac7850e4135873386eb18791","message":"internal/ci: set GORACE in the base config\n\nAs I am seeing exactly the same issue in our other repos using -race,\nand having to remember to copy this line from trybot.cue is not great.\n\nThis is done via $GITHUB_ENV rather than globally setting the env var\nfor all bash workflows, because this is only needed when using Go,\nand this way it's also set alongside all other Go env vars.\n\nNote that we cannot use `go env -w` for this variable,\nbecause it's a Go runtime variable rather than a cmd/go one.\n\nWhile here, update to the latest githubactions version.\n\nSigned-off-by: Daniel Martí \nChange-Id: I553cbe83abc69906dc95b53a781866846860e3cf\nReviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1238067\nReviewed-by: Marcel van Lohuizen \nTryBot-Result: CUEcueckoo \nUnity-Result: CUE porcuepine \n","tree":"98b81c9c54c517f416f29f757c18263570a6d3ac"}}