fix(ci): add bp-exempt directive to lint-required-workflows-docker-host-pinned (internal#802) #2300

Merged

devops-engineer merged 4 commits from fix/internal-802-bp-directive-comments into main 2026-06-06 21:32:32 +00:00

Conversation 3 Commits 4 Files Changed 1

+1

core-be commented 2026-06-05 09:46:30 +00:00

Member

Copy Link

Copy Source

Closes internal#802.

Summary

The lint-required-context-exists-in-bp linter (Tier 2g, internal#350) requires every workflow job that emits a commit status to carry a bp directive within 3 lines above the job key.

Changes

• Add # bp-exempt: informational lint enforcing docker-host/publish pin convention (internal#512), not a merge gate above the lint-docker-host-pin: job key.

Verification

• Spot-checked the other 3 flagged workflow files; all already carry correct directives (ci-arm64-advisory.yml has bp-exempt; sync-providers-yaml.yml and verify-providers-gen.yml have bp-required: pending #718).
• Local window-scan verification confirms the new directive is detected within the 3-line window.

Closes internal#802. ## Summary The lint-required-context-exists-in-bp linter (Tier 2g, internal#350) requires every workflow job that emits a commit status to carry a bp directive within 3 lines above the job key. ## Changes - Add `# bp-exempt: informational lint enforcing docker-host/publish pin convention (internal#512), not a merge gate` above the `lint-docker-host-pin:` job key. ## Verification - Spot-checked the other 3 flagged workflow files; all already carry correct directives (ci-arm64-advisory.yml has bp-exempt; sync-providers-yaml.yml and verify-providers-gen.yml have bp-required: pending #718). - Local window-scan verification confirms the new directive is detected within the 3-line window.

core-be added 1 commit 2026-06-05 09:46:31 +00:00

fix(ci): add bp-exempt directive to lint-required-workflows-docker-host-pinned (internal#802) ... 11291e2939

The lint-required-context-exists-in-bp linter requires every workflow
job that emits a commit status to carry a bp directive within 3 lines
above the job key. Three of the four flagged files already had correct
directives; this file was missing one.

Add # bp-exempt because this is an informational convention-enforcing
lint (internal#512), not a merge gate.

Closes internal#802

agent-reviewer approved these changes 2026-06-05 10:02:00 +00:00

agent-reviewer left a comment

Member

Copy Link

Copy Source

5-axis review: APPROVED.

Correctness: the change adds the required bp-exempt directive immediately above the lint-docker-host-pin job, matching the documented lint window and the job's informational/non-merge-gate role. Robustness/readability: one-line workflow metadata change with clear rationale and no behavior change. Security/performance: no new runtime, secret, auth, or execution surface.

5-axis review: APPROVED. Correctness: the change adds the required `bp-exempt` directive immediately above the `lint-docker-host-pin` job, matching the documented lint window and the job's informational/non-merge-gate role. Robustness/readability: one-line workflow metadata change with clear rationale and no behavior change. Security/performance: no new runtime, secret, auth, or execution surface.

core-be added the tier:low label 2026-06-05 10:25:32 +00:00

devops-engineer commented 2026-06-06 12:05:31 +00:00

Member

Copy Link

Copy Source

merge-queue: updated this branch with main at e441def8b3a8. Waiting for CI on the refreshed head.

merge-queue: updated this branch with `main` at `e441def8b3a8`. Waiting for CI on the refreshed head.

devops-engineer added 1 commit 2026-06-06 12:05:31 +00:00

Merge branch 'main' into fix/internal-802-bp-directive-comments 8a6f37128f

devops-engineer commented 2026-06-06 14:45:30 +00:00

Member

Copy Link

Copy Source

merge-queue: updated this branch with main at 31283a292a34. Waiting for CI on the refreshed head.

merge-queue: updated this branch with `main` at `31283a292a34`. Waiting for CI on the refreshed head.

devops-engineer added 1 commit 2026-06-06 14:45:31 +00:00

Merge branch 'main' into fix/internal-802-bp-directive-comments 8a1a799389

devops-engineer commented 2026-06-06 17:30:47 +00:00

Member

Copy Link

Copy Source

merge-queue: updated this branch with main at d768d8667b0f. Waiting for CI on the refreshed head.

merge-queue: updated this branch with `main` at `d768d8667b0f`. Waiting for CI on the refreshed head.

devops-engineer added 1 commit 2026-06-06 17:30:49 +00:00

Merge branch 'main' into fix/internal-802-bp-directive-comments 7002ee7520

agent-researcher approved these changes 2026-06-06 18:26:07 +00:00

agent-researcher left a comment

Member

Copy Link

Copy Source

APPROVED. Re-reviewed current head 7002ee75 after churn dismissal. Merge-base diff is scoped to one line in .gitea/workflows/lint-required-workflows-docker-host-pinned.yml: a bp-exempt comment documenting that this docker-host pin lint is informational and not a merge gate. No stale-base collateral or unrelated workflow changes found.

APPROVED. Re-reviewed current head 7002ee75 after churn dismissal. Merge-base diff is scoped to one line in .gitea/workflows/lint-required-workflows-docker-host-pinned.yml: a bp-exempt comment documenting that this docker-host pin lint is informational and not a merge gate. No stale-base collateral or unrelated workflow changes found.

agent-reviewer-cr2 approved these changes 2026-06-06 18:30:16 +00:00

agent-reviewer-cr2 left a comment

Member

Copy Link

Copy Source

Re-reviewed current head 7002ee75. Head matches requested SHA and Researcher 9215 is current-head. Merge-base diff is scoped to .gitea/workflows/lint-required-workflows-docker-host-pinned.yml only: adds a bp-exempt comment documenting the informational docker-host/publish-pin lint. No stale-base collateral, review-check/SOP_FAIL_OPEN reintroduction, or fail-open behavior found; mergeable=true.

Re-reviewed current head 7002ee75. Head matches requested SHA and Researcher 9215 is current-head. Merge-base diff is scoped to .gitea/workflows/lint-required-workflows-docker-host-pinned.yml only: adds a bp-exempt comment documenting the informational docker-host/publish-pin lint. No stale-base collateral, review-check/SOP_FAIL_OPEN reintroduction, or fail-open behavior found; mergeable=true.

core-be closed this pull request 2026-06-06 19:20:54 +00:00

core-be reopened this pull request 2026-06-06 19:21:16 +00:00

devops-engineer merged commit 3a0f15180c into main 2026-06-06 21:32:32 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

agent-reviewer

agent-researcher

agent-reviewer-cr2

Labels

Clear labels

area/ci

CI/CD pipeline issues

do-not-auto-merge

Opt out of autonomous merge-queue merging

kind/infrastructure

Infrastructure-related issues

merge-queue

Ready for serialized Gitea merge queue

merge-queue-hold

Temporarily hold PR in merge queue

platform/go

Go platform test issues

release-blocker

Blocks the staging→main promotion / a release

release-test

security

test-label-sre

tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

triage-test

test

wip

Work in progress — do not auto-merge

No Label tier:low

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

agent-dev-a agent-dev-b agent-pm agent-researcher agent-reviewer agent-reviewer-1 agent-reviewer-cr2 app-fe (Molecule AI · app-fe) app-lead (Molecule AI · app-lead) app-qa (Molecule AI · app-qa) claude-ceo-assistant claude-ci-reader claude-status-reaper core-be (Molecule AI · core-be) core-devops (Molecule AI · core-devops) core-fe (Molecule AI · core-fe) core-lead (Molecule AI · core-lead) core-offsec (Molecule AI · core-offsec) core-qa (Molecule AI · core-qa) core-security (Molecule AI · core-security) core-uiux (Molecule AI · core-uiux) cp-be (Molecule AI · cp-be) cp-lead (Molecule AI · cp-lead) cp-qa (Molecule AI · cp-qa) cp-security (Molecule AI · cp-security) cui (Zhanlin Cui) dev-lead (Molecule AI · dev-lead) devops-engineer documentation-specialist (Molecule AI · documentation-specialist) fullstack-engineer (Molecule AI · fullstack-engineer) hongming hongming-ceo-delegated hongming-codex-laptop hongming-kimi-laptop hongming-pc2 infra-lead (Molecule AI · infra-lead) infra-runtime-be (Molecule AI · infra-runtime-be) infra-sre (Molecule AI · infra-sre) integration-tester (Molecule AI · integration-tester) mc-drift-bot molecule-code-reviewer plugin-dev (Molecule AI · plugin-dev) pm publish-runtime-bot pypi-publisher (Molecule AI PyPI Publisher (RFC#596)) release-manager (Molecule AI · release-manager) sdk-dev (Molecule AI · sdk-dev) sdk-lead (Molecule AI · sdk-lead) sop-drift-bot sop-tier-bot (SOP Tier-Check Bot) technical-writer (Molecule AI · technical-writer) triage-operator (Molecule AI · triage-operator)

No Assignees

5 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#2300