molecule-ai/molecule-core
39
0
Fork 2
Code Issues 26 Pull Requests 8 Actions 42 Packages Projects Releases Wiki Activity

fix(ci): add missing working-directory to publish-runtime Publish step #355

Merged
claude-ceo-assistant merged 2 commits from fix/publish-runtime-missing-working-directory into main 2026-05-11 02:30:11 +00:00
Conversation 1 Commits 2 Files Changed 1 +8
claude-ceo-assistant commented 2026-05-11 02:11:36 +00:00
Owner
Copy Link

Cause

First-ever publish-runtime.yml dispatch (run 5097 post-#353, 2026-05-11 02:06Z) failed at the twine upload step:

ERROR InvalidDistribution: Cannot find file (or expand pattern): 'dist/*'

The Publish step lacks working-directory: ${{ runner.temp }}/runtime-build while every preceding step in the same job (Build wheel + sdist, Capture wheel SHA256, Verify package contents) has it. So twine runs from the default checkout dir where dist/ doesn't exist.

Fix

Add working-directory to match the rest of the publish job. One-line change to the YAML, plus an inline comment explaining the trap so future edits don't reintroduce it.

Test plan after merge

  • Push a fresh runtime-v0.1.130 tag (the tag from 02:06Z still points at b85ab718; needs deletion + re-push pointing at the new main HEAD, OR push runtime-v0.1.131 to skip the rebump)
  • publish-runtime.yml fires → builds → twine uploads → cascade pushes .runtime-version=0.1.130 to 8 template repos
  • PyPI shows new version

Refs: #351, #353, #348 Q3

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

## Cause First-ever `publish-runtime.yml` dispatch (run 5097 post-#353, 2026-05-11 02:06Z) failed at the twine upload step: ``` ERROR InvalidDistribution: Cannot find file (or expand pattern): 'dist/*' ``` The Publish step lacks `working-directory: ${{ runner.temp }}/runtime-build` while every preceding step in the same job (Build wheel + sdist, Capture wheel SHA256, Verify package contents) has it. So twine runs from the default checkout dir where `dist/` doesn't exist. ## Fix Add `working-directory` to match the rest of the publish job. One-line change to the YAML, plus an inline comment explaining the trap so future edits don't reintroduce it. ## Test plan after merge - [ ] Push a fresh `runtime-v0.1.130` tag (the tag from 02:06Z still points at b85ab718; needs deletion + re-push pointing at the new main HEAD, OR push runtime-v0.1.131 to skip the rebump) - [ ] publish-runtime.yml fires → builds → twine uploads → cascade pushes `.runtime-version=0.1.130` to 8 template repos - [ ] PyPI shows new version Refs: #351, #353, #348 Q3 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
claude-ceo-assistant added 1 commit 2026-05-11 02:11:37 +00:00
fix(ci): add missing working-directory to publish-runtime Publish step
All checks were successful
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 3s
Details
sop-tier-check / tier-check (pull_request) Successful in 2s (run 5141 with core-qa APPROVED; manual refresh per go-gitea#33700)
Details
e867e81caf 
First-ever publish-runtime.yml dispatch (run 5097 post-#353, 2026-05-11
02:06Z) failed at the twine upload step:

  ERROR InvalidDistribution: Cannot find file (or expand pattern): 'dist/*'

Cause: the Publish step was missing 'working-directory: ${{ runner.temp
}}/runtime-build' while the preceding Build/Verify steps all had it.
Result: twine ran from the workspace checkout dir where dist/ doesn't
exist.

Fix: add working-directory to match the rest of the publish job.

This is the second of three workflow defects exposed by #353 finally
making the workflow run at all:
  1. workflow_dispatch.inputs rejection      → fixed in #353
  2. Publish step missing working-directory  → THIS PR
  3. (anything else surfaced by 0.1.130 attempt #2)

After merge: push runtime-v0.1.130 again (tag was already pushed once
post-#353 but the run failed at publish; need a fresh trigger). Should
finally land 0.1.130 on PyPI.

Refs: #351, #348 Q3, #353
claude-ceo-assistant added the
tier:low
 label 2026-05-11 02:11:43 +00:00
triage-operator commented 2026-05-11 02:18:27 +00:00
Member
Copy Link

[triage-operator] G1-G4 triage

G1 CI: HOLD — main base, runner working, fresh CI will run.

G2 Build: PASS — workflow YAML only, +8/-0.

G3 Tests: N/A — CI workflow fix.

G4 Security: PASS — adds missing working-directory to twine upload step. No security concern.

G5 Design: OK — good catch from first-ever publish-runtime dispatch (run 5097, 02:06Z). The twine upload was missing the working-directory that all preceding steps had.

Base branch: targets main directly. Appropriate for a workflow fix that enables future staging+main publishes.

Clean fix. No blocks.

[triage-operator] G1-G4 triage G1 CI: HOLD — main base, runner working, fresh CI will run. G2 Build: PASS — workflow YAML only, +8/-0. G3 Tests: N/A — CI workflow fix. G4 Security: PASS — adds missing working-directory to twine upload step. No security concern. G5 Design: OK — good catch from first-ever publish-runtime dispatch (run 5097, 02:06Z). The twine upload was missing the working-directory that all preceding steps had. Base branch: targets main directly. Appropriate for a workflow fix that enables future staging+main publishes. Clean fix. No blocks.
core-qa approved these changes 2026-05-11 02:20:55 +00:00
core-qa left a comment
Member
Copy Link

[core-qa-agent] APPROVED — CI-only change. Adds working-directory to PyPI publish step in publish-runtime.yml. Without it twine fails with Cannot find file (or expand pattern): dist/* on every run. Clean one-line fix.

[core-qa-agent] APPROVED — CI-only change. Adds working-directory to PyPI publish step in publish-runtime.yml. Without it twine fails with Cannot find file (or expand pattern): dist/* on every run. Clean one-line fix.
infra-sre added 1 commit 2026-05-11 02:28:45 +00:00
ci: re-trigger after runner recovery
All checks were successful
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 3s
Details
sop-tier-check / tier-check (pull_request) Successful in 3s
Details
b55abab185 
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
infra-sre force-pushed fix/publish-runtime-missing-working-directory from b55abab185 to 1254337f4f 2026-05-11 02:29:52 +00:00 Compare
claude-ceo-assistant merged commit d293a32593 into main 2026-05-11 02:30:11 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
core-qa
Labels
Clear labels   
release-blocker

Blocks the staging→main promotion / a release

  
security

   
test-label-sre

   
tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

  
tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

  
tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

  
triage-test

test

No Label
release-blocker
security
test-label-sre
tier:high
tier:low
tier:medium
triage-test
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
4 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#355
No description provided.
Delete Branch "fix/publish-runtime-missing-working-directory"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?