From 00d873612af02822483cc0c95d801ce8271109bb Mon Sep 17 00:00:00 2001 From: NagyVikt Date: Fri, 8 May 2026 23:50:37 +0200 Subject: [PATCH] Keep release cleanup and PR creation unblocked The release job can reach teardown with an examples/agentic-flow gitlink, but the repository had no .gitmodules entry for that path. GitHub checkout cleanup then runs git submodule foreach and fails before the job can finish cleanly. The changesets action also needs a token that is allowed to create pull requests when repository GITHUB_TOKEN policy denies that operation. Constraint: examples/agentic-flow is a documented research source and is tracked as a gitlink at f31065cabd423b53748fd94a86f9e2b919ee070b. Constraint: release.yml already grants pull-requests: write, so the PR creation failure is token policy or repository Actions setting, not job-level permissions. Rejected: Remove the gitlink | docs/agentic-bridge.md cites files inside examples/agentic-flow as research evidence. Rejected: Rely only on repository Actions settings | using CHANGESETS_TOKEN keeps the workflow repairable without weakening global repo policy. Confidence: high Scope-risk: narrow Directive: If CHANGESETS_TOKEN is not configured, either add a PAT secret with PR creation rights or enable GitHub Actions PR creation for the repository. Tested: git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"; git config --file .gitmodules --get-regexp '^submodule\..*\.(path|url)$'; git submodule status --recursive; git diff --check Co-authored-by: OmX --- .github/workflows/release.yml | 2 +- .gitmodules | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 .gitmodules diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 91479ef5..c06665c3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,6 +47,6 @@ jobs: publish: pnpm release version: pnpm changeset version env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.CHANGESETS_TOKEN || secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} diff --git a/.gitmodules b/.gitmodules new file mode 100644 index 00000000..8a6c87c3 --- /dev/null +++ b/.gitmodules @@ -0,0 +1,3 @@ +[submodule "examples/agentic-flow"] + path = examples/agentic-flow + url = https://github.com/ruvnet/agentic-flow.git