From 583bfe49217135db48fa55309d45448d82b20210 Mon Sep 17 00:00:00 2001 From: "Molecule AI Dev Engineer A (Kimi)" Date: Fri, 12 Jun 2026 17:20:35 +0000 Subject: [PATCH] =?UTF-8?q?ci(workflows):=20renew=20continue-on-error=20tr?= =?UTF-8?q?acker=20mc#1982=20=E2=86=92=20mc#2654?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit mc#1982 reached its 14-day renewal cap. Renew the forced-renewal tracker by creating mc#2654 and updating all job-level mask comments. Affected: 24 workflow files with continue-on-error: true directives. Next renewal due: 2026-06-25. Fixes #2654 Refs: mc#1982, feedback_chained_defects_in_never_tested_workflows Co-Authored-By: Claude --- .gitea/workflows/ci.yml | 2 +- .gitea/workflows/continuous-synth-e2e.yml | 2 +- .gitea/workflows/e2e-chat.yml | 4 ++-- .gitea/workflows/e2e-staging-canvas.yml | 4 ++-- .gitea/workflows/e2e-staging-external.yml | 2 +- .gitea/workflows/e2e-staging-reconciler.yml | 2 +- .gitea/workflows/e2e-staging-saas.yml | 10 +++++----- .gitea/workflows/e2e-staging-sanity.yml | 2 +- .gitea/workflows/gate-check-v3.yml | 2 +- .gitea/workflows/harness-replays.yml | 4 ++-- .gitea/workflows/lint-continue-on-error-tracking.yml | 4 ++-- .gitea/workflows/lint-mask-pr-atomicity.yml | 4 ++-- .gitea/workflows/lint-workflow-yaml.yml | 2 +- .gitea/workflows/publish-canvas-image.yml | 4 ++-- .gitea/workflows/publish-workspace-server-image.yml | 2 +- .gitea/workflows/railway-pin-audit.yml | 2 +- .gitea/workflows/redeploy-tenants-on-main.yml | 2 +- .gitea/workflows/redeploy-tenants-on-staging.yml | 2 +- .gitea/workflows/secret-pattern-drift.yml | 2 +- .gitea/workflows/staging-verify.yml | 4 ++-- .gitea/workflows/sweep-cf-orphans.yml | 2 +- .gitea/workflows/sweep-cf-tunnels.yml | 2 +- .gitea/workflows/test-ops-scripts.yml | 2 +- .gitea/workflows/weekly-platform-go.yml | 2 +- 24 files changed, 35 insertions(+), 35 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 6c2da716..d846abd0 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -172,7 +172,7 @@ jobs: echo "::group::pendinguploads exit=$pu_exit (last 100 lines)" tail -100 /tmp/test-pu.log echo "::endgroup::" - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true - if: ${{ needs.changes.outputs.platform == 'true' }} name: Run tests with coverage (blocking gate) diff --git a/.gitea/workflows/continuous-synth-e2e.yml b/.gitea/workflows/continuous-synth-e2e.yml index 48a00ec2..def0ceb8 100644 --- a/.gitea/workflows/continuous-synth-e2e.yml +++ b/.gitea/workflows/continuous-synth-e2e.yml @@ -102,7 +102,7 @@ jobs: name: Synthetic E2E against staging runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # Bumped from 12 → 20 (2026-05-04). Tenant user-data install phase # (apt-get update + install docker.io/jq/awscli/caddy + snap install diff --git a/.gitea/workflows/e2e-chat.yml b/.gitea/workflows/e2e-chat.yml index 19704e24..ebda5ab6 100644 --- a/.gitea/workflows/e2e-chat.yml +++ b/.gitea/workflows/e2e-chat.yml @@ -48,7 +48,7 @@ jobs: # defect. runs-on: docker-host # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true outputs: chat: ${{ steps.decide.outputs.chat }} @@ -135,7 +135,7 @@ jobs: # paths-filter skip, but a required gate needs it to be a neutral # check, not a green "success", so a skipped heavy lane can't be # mistaken for a passed one. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 15 env: diff --git a/.gitea/workflows/e2e-staging-canvas.yml b/.gitea/workflows/e2e-staging-canvas.yml index 801334c7..c5d46ddf 100644 --- a/.gitea/workflows/e2e-staging-canvas.yml +++ b/.gitea/workflows/e2e-staging-canvas.yml @@ -92,7 +92,7 @@ jobs: detect-changes: runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true outputs: canvas: ${{ steps.decide.outputs.canvas }} @@ -161,7 +161,7 @@ jobs: name: Canvas tabs E2E runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 40 diff --git a/.gitea/workflows/e2e-staging-external.yml b/.gitea/workflows/e2e-staging-external.yml index c92dcf5a..3e740e46 100644 --- a/.gitea/workflows/e2e-staging-external.yml +++ b/.gitea/workflows/e2e-staging-external.yml @@ -104,7 +104,7 @@ jobs: # - "CP unhealthy → exit 1" currently looks identical to a real # failure on the run page; required-gate would need it demoted to # a neutral/skip so staging flakiness can't block merges. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 25 diff --git a/.gitea/workflows/e2e-staging-reconciler.yml b/.gitea/workflows/e2e-staging-reconciler.yml index 13dc0484..ddf129e9 100644 --- a/.gitea/workflows/e2e-staging-reconciler.yml +++ b/.gitea/workflows/e2e-staging-reconciler.yml @@ -82,7 +82,7 @@ jobs: runs-on: ubuntu-latest # NOT required yet — surface failures without blocking merges. Flip to # false + add to branch protection once green on main for a de-flake - # window (see the header note). mc#1982: do not renew this mask silently. + # window (see the header note). mc#2654: do not renew this mask silently. continue-on-error: true timeout-minutes: 60 permissions: diff --git a/.gitea/workflows/e2e-staging-saas.yml b/.gitea/workflows/e2e-staging-saas.yml index 174dcb15..3beab59e 100644 --- a/.gitea/workflows/e2e-staging-saas.yml +++ b/.gitea/workflows/e2e-staging-saas.yml @@ -112,20 +112,20 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 1 - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: "3.11" - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true - name: YAML validation (best-effort) run: | echo "e2e-staging-saas.yml — PR validation: workflow YAML is valid." echo "E2E step runs only when provisioning-critical files change." - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # Actual E2E: runs on trunk pushes and PRs that touch provisioning-critical @@ -136,7 +136,7 @@ jobs: name: E2E Staging SaaS runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # Raised 45→75: step 10b now exercises pause→resume→online + # hibernate→wake→online, each of which RE-PROVISIONS the parent (CP @@ -386,7 +386,7 @@ jobs: name: E2E Staging Platform Boot runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface without blocking until the de-flake window - # closes. mc#1982: do NOT renew this mask silently — the gate-making plan + # closes. mc#2654: do NOT renew this mask silently — the gate-making plan # tracks the flip to false under #2187. continue-on-error: true timeout-minutes: 45 diff --git a/.gitea/workflows/e2e-staging-sanity.yml b/.gitea/workflows/e2e-staging-sanity.yml index 8ca05f74..116a4ccb 100644 --- a/.gitea/workflows/e2e-staging-sanity.yml +++ b/.gitea/workflows/e2e-staging-sanity.yml @@ -37,7 +37,7 @@ jobs: name: Intentional-failure teardown sanity runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 20 diff --git a/.gitea/workflows/gate-check-v3.yml b/.gitea/workflows/gate-check-v3.yml index 88b31566..9efaedd3 100644 --- a/.gitea/workflows/gate-check-v3.yml +++ b/.gitea/workflows/gate-check-v3.yml @@ -73,7 +73,7 @@ jobs: # over a stuck Python tick. Does NOT fix a QUEUED-never-picked-up # orphan (operator-side run-clearing needed for that). timeout-minutes: 10 - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # Never block on our own detector failing steps: - name: Check out BASE ref (never PR-head under pull_request_target) diff --git a/.gitea/workflows/harness-replays.yml b/.gitea/workflows/harness-replays.yml index 580ee27a..095d8a43 100644 --- a/.gitea/workflows/harness-replays.yml +++ b/.gitea/workflows/harness-replays.yml @@ -70,7 +70,7 @@ jobs: # of mc#1543; see internal#512 for class defect. runs-on: docker-host # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true outputs: run: ${{ steps.decide.outputs.run }} @@ -172,7 +172,7 @@ jobs: # beta containers. Must run on operator-host Linux (docker-host). runs-on: docker-host # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 30 steps: diff --git a/.gitea/workflows/lint-continue-on-error-tracking.yml b/.gitea/workflows/lint-continue-on-error-tracking.yml index 6f59b62f..bf2c48d9 100644 --- a/.gitea/workflows/lint-continue-on-error-tracking.yml +++ b/.gitea/workflows/lint-continue-on-error-tracking.yml @@ -97,8 +97,8 @@ jobs: # Phase 3 (RFC #219 §1): surface masked defects without blocking # PRs. Pre-existing continue-on-error: true directives on main # all violate this lint at first — intentional. Flip to false - # follow-up after main is clean for 3 days. mc#1982. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # follow-up after main is clean for 3 days. mc#2654. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # internal#837 Phase 3 mask — 14d forced-renewal cadence steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 diff --git a/.gitea/workflows/lint-mask-pr-atomicity.yml b/.gitea/workflows/lint-mask-pr-atomicity.yml index 3a6f916e..32730085 100644 --- a/.gitea/workflows/lint-mask-pr-atomicity.yml +++ b/.gitea/workflows/lint-mask-pr-atomicity.yml @@ -92,8 +92,8 @@ jobs: # Phase 3 (RFC #219 §1): surface broken shapes without blocking # PRs. Follow-up PR flips this to `false` once recent runs on main # are confirmed clean (eat-our-own-dogfood discipline mirrors - # PR#673's same-shape comment). Tracking: mc#1982. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # PR#673's same-shape comment). Tracking: mc#2654. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true steps: - name: Check out PR head with full history (need base SHA blobs) diff --git a/.gitea/workflows/lint-workflow-yaml.yml b/.gitea/workflows/lint-workflow-yaml.yml index 29307525..7dac1c57 100644 --- a/.gitea/workflows/lint-workflow-yaml.yml +++ b/.gitea/workflows/lint-workflow-yaml.yml @@ -55,7 +55,7 @@ jobs: # Phase 3 (RFC #219 §1): surface broken shapes without blocking PRs. # Follow-up PR flips this off after the 4 existing-on-main rule-2 # (workflow_run) violations are migrated to a supported trigger. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 diff --git a/.gitea/workflows/publish-canvas-image.yml b/.gitea/workflows/publish-canvas-image.yml index 5833d665..76fac5e1 100644 --- a/.gitea/workflows/publish-canvas-image.yml +++ b/.gitea/workflows/publish-canvas-image.yml @@ -95,7 +95,7 @@ jobs: # in this rollout (internal#462) so the precondition holds. runs-on: publish # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true outputs: # Exposed so promote-canvas re-points :latest to the EXACT per-commit tag @@ -238,7 +238,7 @@ jobs: # Only on a real main push — workflow_dispatch / non-main never promotes. if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }} # Side-effect deploy only; the image publish above is the durable artifact. - # mc#1982: do NOT renew this mask silently — it mirrors deploy-production's + # mc#2654: do NOT renew this mask silently — it mirrors deploy-production's # contract (a flaky promote must not red the ship lane), tracked in core#2226. continue-on-error: true runs-on: publish diff --git a/.gitea/workflows/publish-workspace-server-image.yml b/.gitea/workflows/publish-workspace-server-image.yml index 39aff667..44ed8c88 100644 --- a/.gitea/workflows/publish-workspace-server-image.yml +++ b/.gitea/workflows/publish-workspace-server-image.yml @@ -317,7 +317,7 @@ jobs: name: Production auto-deploy needs: build-and-push if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }} - # Side-effect deploy only; image publish success is the durable artifact. mc#1982 + # Side-effect deploy only; image publish success is the durable artifact. mc#2654 continue-on-error: true # Publish/release lane (internal#462) — production deploy of a merged # fix; reserved capacity, never queued behind PR-CI. diff --git a/.gitea/workflows/railway-pin-audit.yml b/.gitea/workflows/railway-pin-audit.yml index 569fa7d4..3f7a4c79 100644 --- a/.gitea/workflows/railway-pin-audit.yml +++ b/.gitea/workflows/railway-pin-audit.yml @@ -51,7 +51,7 @@ jobs: name: Audit Railway env vars for drift-prone pins runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 10 diff --git a/.gitea/workflows/redeploy-tenants-on-main.yml b/.gitea/workflows/redeploy-tenants-on-main.yml index 1d6f76e6..54a66865 100644 --- a/.gitea/workflows/redeploy-tenants-on-main.yml +++ b/.gitea/workflows/redeploy-tenants-on-main.yml @@ -73,7 +73,7 @@ jobs: # it never queues behind PR-CI. `publish` -> molecule-runner-publish-*. runs-on: publish # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 25 env: diff --git a/.gitea/workflows/redeploy-tenants-on-staging.yml b/.gitea/workflows/redeploy-tenants-on-staging.yml index 0960c556..5e07eaaf 100644 --- a/.gitea/workflows/redeploy-tenants-on-staging.yml +++ b/.gitea/workflows/redeploy-tenants-on-staging.yml @@ -80,7 +80,7 @@ jobs: # `publish` -> molecule-runner-publish-* sub-pool. runs-on: publish # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 25 steps: diff --git a/.gitea/workflows/secret-pattern-drift.yml b/.gitea/workflows/secret-pattern-drift.yml index 723b7bb3..ae51dd21 100644 --- a/.gitea/workflows/secret-pattern-drift.yml +++ b/.gitea/workflows/secret-pattern-drift.yml @@ -57,7 +57,7 @@ jobs: name: Detect SECRET_PATTERNS drift runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true timeout-minutes: 5 steps: diff --git a/.gitea/workflows/staging-verify.yml b/.gitea/workflows/staging-verify.yml index 1f2578e4..68499b28 100644 --- a/.gitea/workflows/staging-verify.yml +++ b/.gitea/workflows/staging-verify.yml @@ -90,7 +90,7 @@ jobs: staging-smoke: runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true outputs: sha: ${{ steps.compute.outputs.sha }} @@ -212,7 +212,7 @@ jobs: if: ${{ needs.staging-smoke.result == 'success' && needs.staging-smoke.outputs.smoke_ran == 'true' }} runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true env: SHA: ${{ needs.staging-smoke.outputs.sha }} diff --git a/.gitea/workflows/sweep-cf-orphans.yml b/.gitea/workflows/sweep-cf-orphans.yml index e5fd2e34..a8d5cb75 100644 --- a/.gitea/workflows/sweep-cf-orphans.yml +++ b/.gitea/workflows/sweep-cf-orphans.yml @@ -73,7 +73,7 @@ jobs: name: Sweep CF orphans runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # 3 min surfaces hangs (CF API stall, AWS describe-instances stuck) # within one cron interval instead of burning a full tick. Realistic diff --git a/.gitea/workflows/sweep-cf-tunnels.yml b/.gitea/workflows/sweep-cf-tunnels.yml index 4ce8f6d9..854ac8ca 100644 --- a/.gitea/workflows/sweep-cf-tunnels.yml +++ b/.gitea/workflows/sweep-cf-tunnels.yml @@ -57,7 +57,7 @@ jobs: name: Sweep CF tunnels runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true # 30 min cap. Was 5 min on the theory that the only thing that # could take >5min is a CF-API hang — but on 2026-05-02 a backlog diff --git a/.gitea/workflows/test-ops-scripts.yml b/.gitea/workflows/test-ops-scripts.yml index 3cac9d93..5f766eea 100644 --- a/.gitea/workflows/test-ops-scripts.yml +++ b/.gitea/workflows/test-ops-scripts.yml @@ -49,7 +49,7 @@ jobs: name: Ops scripts (unittest) runs-on: ubuntu-latest # Phase 3 (RFC #219 §1): surface broken workflows without blocking. - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 diff --git a/.gitea/workflows/weekly-platform-go.yml b/.gitea/workflows/weekly-platform-go.yml index d19e6632..f05e966f 100644 --- a/.gitea/workflows/weekly-platform-go.yml +++ b/.gitea/workflows/weekly-platform-go.yml @@ -31,7 +31,7 @@ jobs: name: Weekly Platform-Go Surface runs-on: ubuntu-latest # continue-on-error: surface only, never block - # mc#1982: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. + # mc#2654: pre-existing continue-on-error mask; root-fix and remove, do not renew silently. continue-on-error: true defaults: run: -- 2.52.0