ci(fork): validate and package provider on Forgejo runners #2

Merged

Andreas merged 4 commits from feat/forgejo-provider-ci into main 2026-10-02 11:54:11 +00:00

Conversation 2 Commits 4 Files changed 10 +344 -9

Andreas commented 2026-10-02 11:43:38 +00:00

Owner

Copy link

Downstream-only CI, based on the focused PSK fix in PR #1. Replace GitHub-workflow fallback with one bounded image-s job, checksum-pinned Go/Terraform, exact deployed OpenTofu engine, full mock tests on both engines, generated docs, pinned lint and vulnerability checks. Build a clean-tree, commit-pinned linux_amd64 provider mirror candidate and verify offline schema/install before uploading a 14-day Actions artifact. No credentials, signing keys, automatic publishing, or network deployment. Archive is explicitly unsigned and not yet a production release. Merge PR #1 first once this combined validation proves it; keep the upstream GitHub patch unchanged.

Downstream-only CI, based on the focused PSK fix in PR #1. Replace GitHub-workflow fallback with one bounded image-s job, checksum-pinned Go/Terraform, exact deployed OpenTofu engine, full mock tests on both engines, generated docs, pinned lint and vulnerability checks. Build a clean-tree, commit-pinned linux_amd64 provider mirror candidate and verify offline schema/install before uploading a 14-day Actions artifact. No credentials, signing keys, automatic publishing, or network deployment. Archive is explicitly unsigned and not yet a production release. Merge PR #1 first once this combined validation proves it; keep the upstream GitHub patch unchanged.

Andreas added 2 commits 2026-10-02 11:43:39 +00:00

fix(wireless): support write-only PSK rotation revisions 7d6d1f2fb3

ci(fork): validate and package provider on Forgejo runners d2c0212110

Andreas added 1 commit 2026-10-02 11:47:06 +00:00

fix(ci): restrict formatting checks to tracked Go sources 3fcce6c810

Andreas added 1 commit 2026-10-02 11:48:45 +00:00

fix(packaging): verify source revision stays unchanged 379670fac7

Andreas referenced this pull request 2026-10-02 11:51:17 +00:00

feat(site): prove safe bootstrap and adoption before retiring the legacy site writer #3

Andreas commented 2026-10-02 11:53:49 +00:00

Author

Owner

Copy link

Local validation passes with Go 1.26.8: complete Terraform 1.16.4 and OpenTofu 1.12.1 mock acceptance suites, go vet, pinned golangci-lint 2.12.2, govulncheck 1.1.4 (no reachable vulnerabilities), generated docs. Packaging offline-installs the revised provider and two builds of revision 379670fac7 produced the same SHA-256: 4e11255066ba22c7f7d109a041717b528f38890861b0d81b1f5905ed72657269. Initial hosted failure was format scanning downloaded Go compiler fixtures; the fix limits checks to tracked Go files. Waiting for hosted run #7 before merging. Site bootstrap is tracked separately in issue #3; production remains unchanged.

Local validation passes with Go 1.26.8: complete Terraform 1.16.4 and OpenTofu 1.12.1 mock acceptance suites, go vet, pinned golangci-lint 2.12.2, govulncheck 1.1.4 (no reachable vulnerabilities), generated docs. Packaging offline-installs the revised provider and two builds of revision 379670fac794e36db4c285a6c9c3e532ea2d55bc produced the same SHA-256: 4e11255066ba22c7f7d109a041717b528f38890861b0d81b1f5905ed72657269. Initial hosted failure was format scanning downloaded Go compiler fixtures; the fix limits checks to tracked Go files. Waiting for hosted run #7 before merging. Site bootstrap is tracked separately in issue #3; production remains unchanged.

Andreas merged commit 379670fac7 into main 2026-10-02 11:54:11 +00:00

Andreas referenced this pull request 2026-10-02 11:54:11 +00:00

fix(wireless): support write-only PSK rotation revisions #1

Andreas commented 2026-10-02 11:58:49 +00:00

Author

Owner

Copy link

Merged using the configured default merge method after hosted run #7 passed. Published the exact hosted artifact as prerelease v0.13.1-homelab.1 (archive SHA-256 11bcf52e77dff6710e2aff334b1ab63fcf859618dbcce1df4d92bf06391f684b), then independently downloaded it from the release URL, verified that pin, offline-installed it with OpenTofu 1.12.1, and read the revised schema with both OpenTofu and Terraform 1.16.4 using the same read-only provider lock. Archive is explicitly unsigned; local Nix-built artifact has a different checksum, so only the hosted archive pin should be used for this prerelease. Source tag/main points to 379670fac7. No production provider changes or controller writes.

Merged using the configured default merge method after hosted run #7 passed. Published the exact hosted artifact as prerelease v0.13.1-homelab.1 (archive SHA-256 11bcf52e77dff6710e2aff334b1ab63fcf859618dbcce1df4d92bf06391f684b), then independently downloaded it from the release URL, verified that pin, offline-installed it with OpenTofu 1.12.1, and read the revised schema with both OpenTofu and Terraform 1.16.4 using the same read-only provider lock. Archive is explicitly unsigned; local Nix-built artifact has a different checksum, so only the hosted archive pin should be used for this prerelease. Source tag/main points to 379670fac794e36db4c285a6c9c3e532ea2d55bc. No production provider changes or controller writes.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Andreas/terraform-provider-omada!2

No description provided.