From e9ad45689d4773a40964f004e8e872115beeba7f Mon Sep 17 00:00:00 2001 From: Yvonne Devlin Date: Tue, 21 Jul 2026 13:24:12 +0000 Subject: [PATCH 1/2] ci(deps): bump carabiner-dev/actions from 1.2.1 to 1.2.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bump install/snappy and install/ampel together to v1.2.3. These actions are co-released from the carabiner-dev/actions monorepo and must be updated atomically — bumping them individually (as Dependabot does) creates a version mismatch that breaks the cross-repo integration test. Supersedes: #751, #752 Assisted-by: OpenCode (claude-opus-4-6) Signed-off-by: Yvonne Devlin --- .github/workflows/ci_cross_repo_integration.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci_cross_repo_integration.yml b/.github/workflows/ci_cross_repo_integration.yml index 3ba89497b..4f7dfe2de 100644 --- a/.github/workflows/ci_cross_repo_integration.yml +++ b/.github/workflows/ci_cross_repo_integration.yml @@ -62,10 +62,10 @@ jobs: run: echo "GOTOOLCHAIN=auto" >> "$GITHUB_ENV" - name: Install snappy - uses: carabiner-dev/actions/install/snappy@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1 + uses: carabiner-dev/actions/install/snappy@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3 - name: Install ampel - uses: carabiner-dev/actions/install/ampel@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1 + uses: carabiner-dev/actions/install/ampel@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3 - name: Install conftest run: go install github.com/open-policy-agent/conftest@v0.68.2 From bf60dca9106e5e9118a0bb981b2b8d5230a01977 Mon Sep 17 00:00:00 2001 From: Yvonne Devlin Date: Tue, 21 Jul 2026 13:50:49 +0000 Subject: [PATCH 2/2] fix(ci): work around $HOME expansion bug in carabiner-dev/actions v1.2.3 The v1.2.3 add-to-path step writes unexpanded $HOME to GITHUB_PATH when using the default install-dir, making snappy and ampel invisible to subsequent steps. Use an explicit absolute path until the upstream fix lands. Assisted-by: OpenCode (claude-opus-4-6) Signed-off-by: Yvonne Devlin --- .github/workflows/ci_cross_repo_integration.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/ci_cross_repo_integration.yml b/.github/workflows/ci_cross_repo_integration.yml index 4f7dfe2de..6583fd12b 100644 --- a/.github/workflows/ci_cross_repo_integration.yml +++ b/.github/workflows/ci_cross_repo_integration.yml @@ -61,11 +61,18 @@ jobs: - name: Enable Go toolchain auto-download run: echo "GOTOOLCHAIN=auto" >> "$GITHUB_ENV" + # Workaround: v1.2.3 writes unexpanded $HOME to GITHUB_PATH + # when using the default install-dir. Use an absolute path + # until upstream fix lands (carabiner-dev/actions). - name: Install snappy uses: carabiner-dev/actions/install/snappy@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3 + with: + install-dir: /home/runner/.carabiner - name: Install ampel uses: carabiner-dev/actions/install/ampel@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3 + with: + install-dir: /home/runner/.carabiner - name: Install conftest run: go install github.com/open-policy-agent/conftest@v0.68.2