Skip to content

fix(ci): use checkout persisted credentials for release tag push - #92

Merged
matheus-souza merged 2 commits into
developfrom
fix/release-pipeline-credentials
Aug 14, 2026
Merged

fix(ci): use checkout persisted credentials for release tag push#92
matheus-souza merged 2 commits into
developfrom
fix/release-pipeline-credentials

Conversation

@matheus-souza

@matheus-souza matheus-souza commented Aug 14, 2026

Copy link
Copy Markdown
Owner

Summary

  • Remove persist-credentials: false from checkout step so actions/checkout configures git auth via GITHUB_TOKEN automatically
  • Replace manual http.extraHeader Basic auth push with simple git push origin "$TAG"
  • Remove unused GH_TOKEN and GH_REPOSITORY env vars from the tag step

Root cause: persist-credentials: false stripped git credentials, and the manual http.extraHeader workaround was failing with Failed sending HTTP request on GitHub Actions runners — blocking all RC releases since rc.38.

Test plan

  • Merge this PR and verify the Release Pipeline creates v1.0.0-rc.40 automatically

Summary by CodeRabbit

  • Melhorias
    • O processo de publicação de novas versões foi aprimorado para tornar o envio de tags de release mais simples e confiável.
    • Essas mudanças ajudam a garantir maior consistência nas futuras disponibilizações do produto.

…ipeline

Remove persist-credentials: false so actions/checkout configures git auth
automatically via GITHUB_TOKEN. Replace manual http.extraHeader Basic auth
push with simple git push, fixing "Failed sending HTTP request" errors that
blocked all RC releases since rc.38.
@matheus-souza
matheus-souza enabled auto-merge (squash) August 14, 2026 00:10
@coderabbitai

coderabbitai Bot commented Aug 14, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

@matheus-souza, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 104 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 241bb9f5-c85a-425b-80e2-a097142d2998

📥 Commits

Reviewing files that changed from the base of the PR and between 8c58b32 and e6f5537.

📒 Files selected for processing (1)
  • backend/go.mod

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: af71bc58-019f-4303-8d11-34c1239085bf

📥 Commits

Reviewing files that changed from the base of the PR and between b410cd6 and 8c58b32.

📒 Files selected for processing (1)
  • .github/workflows/release.yml

Walkthrough

O workflow de release deixou de configurar autenticação manual para publicar tags. As etapas de publicação usam git push origin "$TAG" para as tags candidata e oficial.

Changes

Publicação de releases

Layer / File(s) Summary
Autenticação e publicação de tags
.github/workflows/release.yml
O checkout não desativa mais as credenciais persistidas. O workflow remove GH_TOKEN e GH_REPOSITORY e publica as tags com git push origin "$TAG".

Estimated code review effort: 1 (Trivial) | ~5 minutos

Mergeability Score: ⚪ Minimal · up to 8c58b

The change simplifies release-tag authentication in the CI workflow and removes the failing manual credential path; no actionable merge-blocking risk remains beyond normal checks.

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed O título descreve com clareza a alteração principal: usar credenciais persistidas do checkout para enviar tags de release.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/release-pipeline-credentials

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

📊 Code Coverage Summary Report

Package / Module Covered Lines Total Lines Coverage Status
internal/platform/crypto 29 36 80.6% 🟡
internal/platform/eventbus 45 55 81.8% 🟡
internal/platform/httputil 94 98 95.9% 🟢
internal/platform/logger 1 1 100.0% 🟢
internal/platform/netinfo 27 31 87.1% 🟢
internal/platform/sdk 10 11 90.9% 🟢
internal/platform/spa 45 45 100.0% 🟢
modules/audit 13 14 92.9% 🟢
modules/configuration 0 2 0.0% 🔴
modules/configuration/controller 25 25 100.0% 🟢
modules/configuration/dto 14 17 82.4% 🟡
modules/configuration/repository 0 72 0.0% 🔴
modules/configuration/usecase 25 29 86.2% 🟢
modules/credentials 4 4 100.0% 🟢
modules/credentials/controller 59 60 98.3% 🟢
modules/credentials/dto 11 11 100.0% 🟢
modules/credentials/repository 42 44 95.5% 🟢
modules/credentials/usecase 50 54 92.6% 🟢
modules/discovery 0 7 0.0% 🔴
modules/discovery/collectors 275 302 91.1% 🟢
modules/discovery/controller 75 75 100.0% 🟢
modules/discovery/dto 23 23 100.0% 🟢
modules/discovery/engine 250 265 94.3% 🟢
modules/discovery/repository 0 85 0.0% 🔴
modules/discovery/scheduler 148 157 94.3% 🟢
modules/discovery/usecase 172 191 90.1% 🟢
modules/identity 0 3 0.0% 🔴
modules/identity/controller 37 44 84.1% 🟡
modules/identity/dto 8 8 100.0% 🟢
modules/identity/repository 6 58 10.3% 🔴
modules/identity/usecase 74 86 86.0% 🟢
modules/integrations 2 2 100.0% 🟢
modules/integrations/controller 23 26 88.5% 🟢
modules/integrations/dto 5 5 100.0% 🟢
modules/integrations/providers/docker 64 73 87.7% 🟢
modules/integrations/providers/proxmox 67 78 85.9% 🟢
modules/integrations/registry 20 20 100.0% 🟢
modules/inventory 0 10 0.0% 🔴
modules/inventory/controller 123 124 99.2% 🟢
modules/inventory/dto 17 17 100.0% 🟢
modules/inventory/repository 0 87 0.0% 🔴
modules/inventory/usecase 174 181 96.1% 🟢
modules/realtime 1 1 100.0% 🟢
modules/realtime/controller 36 41 87.8% 🟢
modules/realtime/dto 3 3 100.0% 🟢
modules/realtime/gateway 71 78 91.0% 🟢
modules/topology 5 5 100.0% 🟢
modules/topology/controller 59 63 93.7% 🟢
modules/topology/dto 22 22 100.0% 🟢
modules/topology/repository 0 112 0.0% 🔴
modules/topology/usecase 82 93 88.2% 🟢

Note

Total Filtered Application Coverage: 79.1% (2336 / 2954 lines) 🟡

@codecov

codecov Bot commented Aug 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.92%. Comparing base (b410cd6) to head (e6f5537).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff            @@
##           develop      #92   +/-   ##
========================================
  Coverage    86.92%   86.92%           
========================================
  Files          146      146           
  Lines         5363     5363           
  Branches       227      227           
========================================
  Hits          4662     4662           
  Misses         505      505           
  Partials       196      196           
Flag Coverage Δ
backend 86.78% <ø> (ø)
frontend 87.20% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

govulncheck reports CVEs in net/url, crypto/tls, encoding/xml,
encoding/asn1, net/http fixed in go1.25.13.
@matheus-souza
matheus-souza merged commit d35109c into develop Aug 14, 2026
12 checks passed
@matheus-souza
matheus-souza deleted the fix/release-pipeline-credentials branch August 14, 2026 00:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant