From 60544f690215570438655434cc81cffbda40dfe0 Mon Sep 17 00:00:00 2001 From: Yash Datta Date: Thu, 23 Jul 2026 16:21:11 +0800 Subject: [PATCH] devops: drop self-hosted Gemini review workflow; pin CI runners MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit AI review is now the org-level highflame-oracle + gemini-code-assist apps (+ Socket Security), matching the other Highflame repos, so the self-hosted `gemini-review.yml` is redundant. Removed. Pins the CI + release-plz runners to `ubuntu-24.04`. The native-binary build matrix in release.yml is left on `ubuntu-latest` on purpose — bumping the linux builder would raise the glibc floor of the published `codeoid-tui` binary. Keeps the OSS-native Rust pipeline (fmt/clippy/nextest+llvm-cov, release-plz + crates.io). Deliberately not adopting the private k8s shared workflow. Co-authored-by: Claude Opus 4.8 (1M context) --- .github/workflows/ci.yml | 2 +- .github/workflows/gemini-review.yml | 42 ----------------------------- .github/workflows/release-plz.yml | 4 +-- 3 files changed, 3 insertions(+), 45 deletions(-) delete mode 100644 .github/workflows/gemini-review.yml diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4083717..a6bfda3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ env: jobs: build-test: name: build-test - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 diff --git a/.github/workflows/gemini-review.yml b/.github/workflows/gemini-review.yml deleted file mode 100644 index 9cb5f87..0000000 --- a/.github/workflows/gemini-review.yml +++ /dev/null @@ -1,42 +0,0 @@ -name: Gemini code review - -on: - pull_request: - types: [opened] - issue_comment: - types: [created] - -permissions: - contents: read - pull-requests: write - -# One review in flight per PR; a newer request supersedes a stale run. -concurrency: - group: gemini-review-${{ github.event.pull_request.number || github.event.issue.number }} - cancel-in-progress: true - -jobs: - review: - # Run on PR open, or on a PR comment containing the re-review command. - if: > - github.event_name == 'pull_request' || - (github.event_name == 'issue_comment' && - github.event.issue.pull_request && - startsWith(github.event.comment.body, '/gemini-review')) - runs-on: ubuntu-latest - # Guards runner minutes if the Gemini API or action ever hangs. - timeout-minutes: 10 - steps: - - uses: actions/checkout@v4 - # Pinned to v1.3.0 — bump deliberately, this action receives the API key. - - uses: jgunnink/gemini-review-bot@37b292a16543cd97f443416bf803dd863583c53b # v1.3.0 - with: - gemini_api_key: ${{ secrets.GEMINI_API_KEY }} - # No `model:` override — inherits the action's own default, - # gemini-flash-latest. That's a ROLLING alias (not a pinned - # snapshot like gemini-2.5-flash): Google repoints it to their - # current best free-tier flash model, and it's the exact id the - # action's PRD calls out as "cheapest/fastest; fits free-tier - # quota" and the one its own spike-test workflow verifies against. - # Pin an explicit model here only if you need reproducible - # review behavior across time more than you need it current. diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index b0f2607..c5c96b9 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -12,7 +12,7 @@ jobs: # then creates the git tag + GitHub Release for the binary crate. release-plz-release: name: release-plz release - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 permissions: contents: write # push tags + create the GitHub Release # Serialize: `release` does non-idempotent external writes (publish/tag), @@ -40,7 +40,7 @@ jobs: # CHANGELOG based on the Conventional Commits since the last release. release-plz-pr: name: release-plz PR - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 permissions: contents: write # push the release-PR branch pull-requests: write # open / update the release PR