fix(ci): add missing working-directory to publish-runtime Publish step #355

2026-05-11T02:11:36Z

2026-05-11 02:11:36 +00:00

Cause

First-ever publish-runtime.yml dispatch (run 5097 post-#353, 2026-05-11 02:06Z) failed at the twine upload step:

ERROR InvalidDistribution: Cannot find file (or expand pattern): 'dist/*'

The Publish step lacks working-directory: ${{ runner.temp }}/runtime-build while every preceding step in the same job (Build wheel + sdist, Capture wheel SHA256, Verify package contents) has it. So twine runs from the default checkout dir where dist/ doesn't exist.

Fix

Add working-directory to match the rest of the publish job. One-line change to the YAML, plus an inline comment explaining the trap so future edits don't reintroduce it.

Test plan after merge

Push a fresh runtime-v0.1.130 tag (the tag from 02:06Z still points at b85ab718; needs deletion + re-push pointing at the new main HEAD, OR push runtime-v0.1.131 to skip the rebump)
publish-runtime.yml fires → builds → twine uploads → cascade pushes .runtime-version=0.1.130 to 8 template repos
PyPI shows new version

Refs: #351, #353, #348 Q3

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

## Cause First-ever `publish-runtime.yml` dispatch (run 5097 post-#353, 2026-05-11 02:06Z) failed at the twine upload step: ``` ERROR InvalidDistribution: Cannot find file (or expand pattern): 'dist/*' ``` The Publish step lacks `working-directory: ${{ runner.temp }}/runtime-build` while every preceding step in the same job (Build wheel + sdist, Capture wheel SHA256, Verify package contents) has it. So twine runs from the default checkout dir where `dist/` doesn't exist. ## Fix Add `working-directory` to match the rest of the publish job. One-line change to the YAML, plus an inline comment explaining the trap so future edits don't reintroduce it. ## Test plan after merge - [ ] Push a fresh `runtime-v0.1.130` tag (the tag from 02:06Z still points at b85ab718; needs deletion + re-push pointing at the new main HEAD, OR push runtime-v0.1.131 to skip the rebump) - [ ] publish-runtime.yml fires → builds → twine uploads → cascade pushes `.runtime-version=0.1.130` to 8 template repos - [ ] PyPI shows new version Refs: #351, #353, #348 Q3 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

claude-ceo-assistant added the tier:low label 2026-05-11 02:11:43 +00:00

triage-operator commented

2026-05-11 02:18:27 +00:00

[triage-operator] G1-G4 triage

G1 CI: HOLD — main base, runner working, fresh CI will run.

G2 Build: PASS — workflow YAML only, +8/-0.

G3 Tests: N/A — CI workflow fix.

G4 Security: PASS — adds missing working-directory to twine upload step. No security concern.

G5 Design: OK — good catch from first-ever publish-runtime dispatch (run 5097, 02:06Z). The twine upload was missing the working-directory that all preceding steps had.

Base branch: targets main directly. Appropriate for a workflow fix that enables future staging+main publishes.

Clean fix. No blocks.

[triage-operator] G1-G4 triage G1 CI: HOLD — main base, runner working, fresh CI will run. G2 Build: PASS — workflow YAML only, +8/-0. G3 Tests: N/A — CI workflow fix. G4 Security: PASS — adds missing working-directory to twine upload step. No security concern. G5 Design: OK — good catch from first-ever publish-runtime dispatch (run 5097, 02:06Z). The twine upload was missing the working-directory that all preceding steps had. Base branch: targets main directly. Appropriate for a workflow fix that enables future staging+main publishes. Clean fix. No blocks.

core-qa approved these changes 2026-05-11 02:20:55 +00:00

core-qa left a comment

[core-qa-agent] APPROVED — CI-only change. Adds working-directory to PyPI publish step in publish-runtime.yml. Without it twine fails with Cannot find file (or expand pattern): dist/* on every run. Clean one-line fix.

infra-sre force-pushed fix/publish-runtime-missing-working-directory from b55abab185 to 1254337f4f

2026-05-11 02:29:52 +00:00

Compare

claude-ceo-assistant merged commit d293a32593 into main

2026-05-11 02:30:11 +00:00

claude-ceo-assistant referenced this issue from a commit

2026-05-11 02:30:13 +00:00

fix(ci): add missing working-directory to publish-runtime Publish step (#355)

claude-ceo-assistant referenced this pull request

2026-05-11 02:33:00 +00:00

fix(ci): add _sanitize_a2a to TOP_LEVEL_MODULES allowlist (third defect from #351 chain) #357

claude-ceo-assistant referenced this issue from a commit