ci: make compat-matrix engine-job failures fail the run #560
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Wheels Bot — Update Docs | |
| # Phase 4 (auto-fire): runs on pull_request opened from wheels-bot[bot] | |
| # head refs (after propose-fix opens its draft PR). workflow_dispatch is | |
| # preserved for manual reruns. | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| pr-number: | |
| description: 'PR number to add doc updates to' | |
| required: true | |
| type: string | |
| pull_request: | |
| types: [opened] | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: wheels-bot-update-docs-${{ github.event.pull_request.number || inputs.pr-number }} | |
| cancel-in-progress: false | |
| jobs: | |
| update-docs: | |
| name: Update docs | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| # Auto-fire only for the bot's own PRs. The bot-identity check is | |
| # load-bearing: prevents human PRs from triggering this stage and | |
| # adding bot-authored doc commits to in-flight branches. | |
| # Skips docs/bot-* branches — those are write-docs's own PRs, which | |
| # are docs-only by construction. Running update-docs on them would | |
| # be redundant work. | |
| if: | | |
| vars.WHEELS_BOT_ENABLED == 'true' | |
| && ( | |
| github.event_name == 'workflow_dispatch' | |
| || (github.event_name == 'pull_request' | |
| && github.event.pull_request.user.login == 'wheels-bot[bot]' | |
| && !startsWith(github.event.pull_request.head.ref, 'docs/bot-')) | |
| ) | |
| env: | |
| PR_NUMBER: ${{ github.event.pull_request.number || inputs.pr-number }} | |
| WHEELS_CI: "true" | |
| steps: | |
| - name: Generate App token | |
| id: app-token | |
| uses: actions/create-github-app-token@v2 | |
| with: | |
| app-id: ${{ secrets.WHEELS_BOT_APP_ID }} | |
| private-key: ${{ secrets.WHEELS_BOT_PRIVATE_KEY }} | |
| - name: Resolve PR head ref | |
| id: pr | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| run: | | |
| # Validate input is numeric to short-circuit any injection vectors | |
| # before passing it to gh. | |
| if ! [[ "$PR_NUMBER" =~ ^[0-9]+$ ]]; then | |
| echo "::error::pr-number must be numeric, got: $PR_NUMBER" | |
| exit 1 | |
| fi | |
| ref=$(gh pr view "$PR_NUMBER" --repo wheels-dev/wheels --json headRefName -q '.headRefName') | |
| if [ -z "$ref" ]; then | |
| echo "::error::Could not resolve PR head ref for #$PR_NUMBER" | |
| exit 1 | |
| fi | |
| echo "head=$ref" >> "$GITHUB_OUTPUT" | |
| - name: Checkout PR branch | |
| uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ steps.pr.outputs.head }} | |
| fetch-depth: 0 | |
| token: ${{ steps.app-token.outputs.token }} | |
| - name: Skip check | |
| id: gate | |
| uses: ./.github/actions/wheels-bot-skip-check | |
| with: | |
| target-type: pr | |
| target-number: ${{ env.PR_NUMBER }} | |
| marker-pattern: 'wheels-bot:update-docs:${{ env.PR_NUMBER }}' | |
| github-token: ${{ steps.app-token.outputs.token }} | |
| - name: Configure git | |
| if: steps.gate.outputs.skip == 'false' | |
| run: | | |
| git config user.name "wheels-bot[bot]" | |
| git config user.email "wheels-bot[bot]@users.noreply.github.com" | |
| - name: Run Update Docs | |
| if: steps.gate.outputs.skip == 'false' | |
| uses: anthropics/claude-code-action@v1 | |
| with: | |
| allowed_bots: 'wheels-bot[bot],github-actions[bot]' | |
| anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} | |
| github_token: ${{ steps.app-token.outputs.token }} | |
| prompt: | | |
| /update-docs ${{ env.PR_NUMBER }} | |
| claude_args: | | |
| --model claude-sonnet-4-6 | |
| --max-turns 30 | |
| --allowedTools "Bash(gh:*),Bash(git status),Bash(git log:*),Bash(git diff:*),Bash(git show:*),Bash(git grep:*),Bash(git add:*),Bash(git commit:*),Read,Edit,Write,Grep,Glob" | |
| - name: Push doc commits | |
| if: steps.gate.outputs.skip == 'false' | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| run: | | |
| # Only push if new commits exist beyond what's already on the | |
| # remote branch tip. | |
| if [ -z "$(git log @{u}..HEAD --oneline 2>/dev/null)" ]; then | |
| echo "No new commits — nothing to push." | |
| exit 0 | |
| fi | |
| git push origin HEAD |