chore: Narrow shared release input triggers#1476
Conversation
Whitelist common package inputs by the dispatcher and project-runner dependency sets so dispatcher-only common changes no longer force project-runner release triggers.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (3)
🚧 Files skipped from review as they are similar to previous changes (1)
📝 WalkthroughWalkthroughRelease trigger detection now separates shared common inputs from dispatcher-only common inputs, and the stamping logic, tests, and stored hash outputs were updated to match the new split. ChangesShared vs Dispatcher-Only Common Input Handling
Estimated code review effort: 3 (Moderate) | ~25 minutes Possibly related PRs
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
scripts/stamp-release-inputs.sh (1)
66-67: 📐 Maintainability & Code Quality | 🔵 Trivial | 💤 Low valueConsider renaming
common_hashfor clarity.Now that inputs are split into shared vs. dispatcher-only,
common_hash(shared-only) could be renamed e.g.shared_common_hashto avoid ambiguity with the newlist_dispatcher_only_common_inputs.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@scripts/stamp-release-inputs.sh` around lines 66 - 67, Rename the `common_hash` variable in `stamp-release-inputs.sh` to a clearer name like `shared_common_hash`, since it now represents only `list_shared_common_inputs` and can be confused with `list_dispatcher_only_common_inputs`; update the assignment and any later references in the same script so the naming matches the new shared-vs-dispatcher split.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@scripts/stamp-release-inputs.sh`:
- Around line 66-67: Rename the `common_hash` variable in
`stamp-release-inputs.sh` to a clearer name like `shared_common_hash`, since it
now represents only `list_shared_common_inputs` and can be confused with
`list_dispatcher_only_common_inputs`; update the assignment and any later
references in the same script so the naming matches the new shared-vs-dispatcher
split.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 90b323d5-c13d-4389-8160-7f45102fa47f
📒 Files selected for processing (6)
cli/dispatcher/shared-inputs-stamp.jsoncli/project-runner/shared-inputs-stamp.jsoncli/release-automation/internal/automation/release_trigger_guard.gocli/release-automation/internal/automation/release_trigger_guard_test.goscripts/stamp-release-inputs.shscripts/test-stamp-release-inputs.sh
There was a problem hiding this comment.
3 issues found across 6 files
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="cli/release-automation/internal/automation/release_trigger_guard.go">
<violation number="1" location="cli/release-automation/internal/automation/release_trigger_guard.go:171">
P2: Release-trigger coverage can silently drift when new `cli/common` packages are added, because shared input detection is whitelist-only. This can let real binary input changes bypass release stamp requirements until someone manually updates `sharedCommonPackageRoots`; consider adding an automated dependency-equivalence test or a safe default classification for unknown common packages.</violation>
</file>
Reply with feedback, questions, or to request a fix.
Re-trigger cubic
Align stamp generation with the release trigger guard's package-root matching and add dependency-based tests so common package whitelists cannot silently drift from shipped binary imports.
Summary
User Impact
Changes
Verification