Skip to content

chore(build)!: align toolchains and harden dependency updates - #281

Merged
bougyman merged 2 commits into
mainfrom
toolchain-dependency-guards
Sep 22, 2026
Merged

bougyman merged 2 commits into
mainfrom
toolchain-dependency-guards

Conversation

@bougyman

Copy link
Copy Markdown
Member

No description provided.

Copilot AI lite review requested due to automatic review settings September 22, 2026 21:02

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Three moderate findings and one nit remain unresolved.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 1 Low severity

Open (1)
What changed in this PR

Aligns local and CI Erlang/Elixir toolchains and strengthens dependency-update validation.

Changes:

  • Updates toolchain pins across mise.toml and GitHub workflows.
  • Adds workflow pin validation to CI.
  • Fetches dependencies during setup and runs full CI after updates.
File Summary
workflow.opus.yaml Fetches dependencies after setup. moderate (1 vote): ensure failed mix setup cannot be masked.
test/​mix/​tasks/​toolchain.check_test.exs Tests pin validation. moderate (1 vote): add fixtures covering the real YAML list-item structure.
test/​mix/​tasks/​appdeps.update_test.exs Tests the post-update CI gate.
mise.toml Updates pins and adds tasks. nit (2 votes): reconcile the toolchain pins with the referenced phase-8 decision.
lib/​mix/​tasks/​toolchain.check.ex Implements workflow pin validation. moderate (1 vote): parse each inline setup-beam step independently.
lib/​mix/​tasks/​ci.ex Runs toolchain validation in CI.
lib/​mix/​tasks/​appdeps.update.ex Runs the full CI gate after dependency updates.
.github/​workflows/​usage-rules-sync.yaml Updates workflow toolchain pins.
.github/​workflows/​main.yaml Updates release/build toolchain pins.
.github/​workflows/​ci.yaml Updates CI toolchain pins.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread mise.toml Outdated
@bougyman
bougyman merged commit f9dfdc0 into main Sep 22, 2026
3 checks passed
@bougyman
bougyman deleted the toolchain-dependency-guards branch September 22, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants