Skip to content

Automate toolchain source updates - #113

Merged
itsfuad merged 1 commit into
mainfrom
feature/toolchain-update-automation
Aug 30, 2026
Merged

itsfuad merged 1 commit into
mainfrom
feature/toolchain-update-automation

Conversation

@itsfuad

@itsfuad itsfuad commented Aug 30, 2026

Copy link
Copy Markdown
Member

Summary

  • move workflow-owned source and finished toolchain locks to toolchains/
  • add weekly activity-gated stable LLVM, musl, and llvm-mingw update discovery
  • open reviewable source-lock PRs with verified upstream URL, size, and SHA-256 metadata
  • suppress native producers when desired immutable identity is already selected
  • preserve affected-only mapping, including LLVM source dependency for Linux arm64

Validation

  • GOCACHE=/tmp/peeper-go-cache CCACHE_DISABLE=1 go test ./...
  • focused updater and planner regression tests
  • bash -n for all changed shell scripts
  • six finished-lock lookups and fingerprint calculations
  • git diff --check
  • live GitHub Releases API metadata check for LLVM and llvm-mingw

actionlint was not installed. Local live musl archive verification was blocked by repeated upstream connection resets; fixture-driven successful-upgrade validation passed, and updater fails closed without writing unverified metadata.

Relates to #102.

@itsfuad
itsfuad force-pushed the feature/toolchain-update-automation branch from 89de63d to 9ca9edc Compare August 30, 2026 16:45
@itsfuad
itsfuad force-pushed the feature/toolchain-update-automation branch from 9ca9edc to ba418e6 Compare August 30, 2026 16:49
@itsfuad
itsfuad force-pushed the feature/toolchain-update-automation branch from ba418e6 to 8956f7b Compare August 30, 2026 17:42
@itsfuad

itsfuad commented Aug 30, 2026

Copy link
Copy Markdown
Member Author

Recovered all six real toolchain records from successful run 33316758497 without rebuilding any toolchain. Root cause was actions/download-artifact merging six same-name toolchain-record.json files into one directory. Commit 8956f7b now preserves per-artifact directories, recursively feeds records into the canonical lock merger, and adds a regression for this exact layout. Recovered records were checked against persistent GitHub Release asset name, byte size, and SHA-256 digest. CI run 33326029222 passed.

@itsfuad
itsfuad merged commit cf107a6 into main Aug 30, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant