From e07553d2900f17998b063619eb8d61ecfe234101 Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 00:59:12 -0700 Subject: [PATCH 1/7] fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs Gitea is case-sensitive on owner slugs; canonical is lowercase `molecule-ai/...`. Mixed-case `Molecule-AI/...` refs fail-at-0s when the runner tries to resolve the cross-repo workflow / checkout. Same fix as molecule-controlplane#12. Mechanical case-correction; no behavior change beyond making CI resolve again. Refs: internal#46 Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c8fb9d3..26aeef0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -2,4 +2,4 @@ name: CI on: [push, pull_request] jobs: validate: - uses: Molecule-AI/molecule-ci/.github/workflows/validate-plugin.yml@main + uses: molecule-ai/molecule-ci/.github/workflows/validate-plugin.yml@main -- 2.45.2 From fb691bebdf0a7c6502898652edeca9436e2bc1f1 Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:11:31 -0700 Subject: [PATCH 2/7] ci: re-trigger after molecule-ci#1 merge Verifying the case-fix unblocks the validate-plugin reusable workflow resolution. Per orchestrator feedback_orchestrator_must_verify_before_declaring_fixed. Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2 From 663bf7278554de8fd757eac770c6869e81b16d1e Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:19:50 -0700 Subject: [PATCH 3/7] ci: re-trigger after molecule-ci flipped public Verify case-fix + public-clone now resolves end-to-end. Per orchestrator feedback_orchestrator_must_verify_before_declaring_fixed gate. Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2 From 648a3f042cd0c12bf3439e7c43d512f004a6bd41 Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:49:21 -0700 Subject: [PATCH 4/7] ci: re-trigger after runner config AGENT_TOOLSDIRECTORY fix Verify cycle 5 after Option A applied (AGENT_TOOLSDIRECTORY=/tmp/hostedtoolcache in act_runner config, all 16 runners restarted). Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2 From eedc7b054bcff82894bd3f96405f8e02ab4dbbea Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:51:24 -0700 Subject: [PATCH 5/7] ci: re-trigger after runner cache flush MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Runner cache for molecule-ai/molecule-ci@main was stale — it had the v2 token:'' version, not the v3 git-clone version. Cleared /root/.cache/act/molecule-ai-molecule-ci@main on all 16 runners. Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2 From d1d302015af284a869ccb1b286904bad0cabe639 Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:53:19 -0700 Subject: [PATCH 6/7] ci: re-trigger after RUNNER_TOOL_CACHE override Cycle 6 showed AGENT_TOOLSDIRECTORY didn't propagate as RUNNER_TOOL_CACHE. Added explicit RUNNER_TOOL_CACHE: /tmp/hostedtoolcache to runner.envs. Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2 From 44c23c3e11c5e38e2da702f5aceba1ad3f35e7cf Mon Sep 17 00:00:00 2001 From: security-auditor Date: Thu, 7 May 2026 01:58:58 -0700 Subject: [PATCH 7/7] ci: re-trigger after queue check (cycle 7 pickup stuck) Co-Authored-By: Claude Opus 4.7 (1M context) -- 2.45.2