qwen-code/.github/workflows
qwen-code-dev-bot 65c2bb01c0
fix(ci): narrow serve-ab's self-hosted wipe to the A/B checkout dirs (#9228)
* fix(ci): narrow serve-ab's self-hosted wipe to the A/B checkout dirs

'Wipe stale workspace before checkout' deleted the whole shared workspace
including the root .git, forcing the next job on that runner (e.g. a
fetch-depth: 0 review job) to re-download the full ~900 MB of history from
github.com. On the ECS pool's slow link that stalls checkouts for 20+
minutes and the fetches drop mid-pack often enough to read as hung runners
(2026-08-15: 20 orphaned tmp_pack files, ~6 GB, across 10 runners; one
checkout re-downloaded 890 MB in 19m45s).

serve-ab only builds inside its own head/ and base/ checkouts and never
reads the workspace root, so removing just those two dirs keeps the
anti-bleed guarantee without destroying the shared object store. The
ci-runner-routing pin now asserts the narrow scope and fails on a
whole-workspace wipe regression.

* test(ci): derive serve-ab wipe pin from the checkout paths (#9228)

Address review suggestions: the wipe targets are now derived from the
actions/checkout steps, and the wipe must be exactly one executed
(non-comment) rm line covering exactly those paths. Renamed checkout
paths, appended whole-workspace wipes, and commented-out or echo'd rms
now all fail the suite, while the reverted find-form still does.

* test(ci): pin the serve-ab wipe's full executed script and step order (#9228)

* fix(ci): match serve-ab's wipe step name and pin to its narrowed scope (#9228)

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(ci): exclude the shared root .git from serve-ab's self-hosted wipe (#9228)

Replace the head/base-only rm with the exclusion-based find suggested by the R5-3 review: everything is wiped except the shared root .git, which closes the recurring materializer-coverage class (R4-4/R5-1/R5-2/R5-3) at the layer that owns it — anything landed outside .git is removed by the next run's wipe, no matter how it was materialized. This removes a strict subset of what main's whole-workspace wipe removes, so it cannot regress base behavior, while keeping the .git whose destruction forced ~900 MB re-fetches on the ECS pool's slow link. The pin now also locks the execution chain (shell wrapper, no continue-on-error, no BASH_ENV at step/job/workflow level) per R5-4, and the obsolete clone-coverage scan is deleted.

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

* fix(ci): keep only a real .git and scrub its exec state in serve-ab wipe (#9228)

* fix(ci): follow a symlinked workspace root in the serve-ab wipe (#9228)

* fix(ci): defang the worktreeConfig bypass and anchor the serve-ab wipe scrub (#9228)

The kept-.git wipe tail had two measured holes: extensions.worktreeConfig
activates .git/config.worktree, a second local file that git config --local
neither lists nor unsets, so a planted core.hooksPath survived the allowlist
sweep; and after the heal unlinks a symlinked workspace root the step's CWD
still is the link's target, so the CWD-discovered scrub wrote outside the
workspace. Add qwen-triage's hardened defang pair (delete config.worktree,
unset the extension) and anchor every git call to $WS/.git. Both findings
reproduced locally before the fix; both suites pin the new lines and are
mutation-tested.

---------

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
2026-08-24 13:27:38 +00:00
..
.size-baseline feat(computer-use): replace built-in tools with bundled skill (#9856) 2026-08-24 11:05:23 +00:00
assign-issue-owner.yml feat(ci): auto-assign issues to area owners from labels (#8668) 2026-08-08 23:01:03 +00:00
audio-capture-prebuilds.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
auto-minimize-spam.yml fix(ci): minimize new spam comments on creation (#9266) 2026-08-17 05:12:04 +00:00
build-and-publish-image.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
cd-cua-driver.yml feat(computer-use): replace built-in tools with bundled skill (#9856) 2026-08-24 11:05:23 +00:00
cd-mobile-mcp.yml chore(ci): Drop NPM_TOKEN in favor of npm Trusted Publishing (#9552) 2026-08-20 08:31:41 +00:00
ci.yml fix(ci): move undeletable workspace residue aside instead of leaving it (#9868) 2026-08-24 08:58:16 +00:00
codeql.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
comment-attachment-guard.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
desktop-release.yml fix(desktop): bridge Electron users on Windows and Linux (#9079) 2026-08-13 15:42:31 +00:00
docs-page-action.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
dsw-swe-verified-release.yml feat: chain Terminal-Bench release evaluation (#9120) 2026-08-17 05:53:06 +00:00
e2e.yml chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard (#9008) 2026-08-14 01:22:53 +00:00
finalize-release.yml chore(ci): Disable install scripts in release CI and guard security-checks workflow (#9577) 2026-08-21 03:48:03 +00:00
live-host-release.yml fix(ci): restore Live Host release mirroring (#8917) 2026-08-11 07:08:26 +00:00
live-host.yml refactor(cli): Generalize the Conversations runtime foundation (#8890) 2026-08-14 02:33:24 +00:00
main-ci-failure-issue.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
npm-cache.yml fix(ci): avoid root-owned npm cache workspace files (#8669) 2026-08-07 07:08:34 +00:00
pr-force-push-reminder.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
pr-self-report-label.yml feat(autofix): escalate stopped takeover PRs and age out unanswered pauses (#8960) 2026-08-15 17:32:23 +00:00
qwen-autofix-fork-bridge.yml feat(autofix): bridge fork-PR reviews into the credentialed review lane (#8676) 2026-08-07 16:11:48 +00:00
qwen-autofix-fork-signal.yml fix(ci): gate the fork signal on fields the review payload delivers (#9469) 2026-08-22 18:47:00 +00:00
qwen-autofix-round-seed.md docs(autofix): correct the round-seed guide on leading whitespace (#9663) 2026-08-21 16:06:48 +00:00
qwen-autofix.md chore(ci): migrate autofix prose to the design record and ratchet growth (#9677) 2026-08-22 16:31:56 +00:00
qwen-autofix.yml fix(autofix): give the repair pass a budget it can finish in (#9691) 2026-08-23 00:32:36 +00:00
qwen-ci-flaky-rerun.yml ci: bump qwen-code-action to 05f8171 (skip redundant install, surface install errors) (#8444) 2026-08-03 08:41:46 +00:00
qwen-code-pr-review.yml fix(review): repair permissions before giving up on worktree cleanup (#9748) 2026-08-23 14:27:46 +00:00
qwen-fleet-shepherd.yml fix(ci): stop counting wedged queued runs as in-flight in the shepherd (#9518) 2026-08-20 13:37:22 +00:00
qwen-issue-followup-bot.yml fix(ci): stop dropping agent settings in resolve and follow-up workflows (#9252) 2026-08-16 03:27:00 +00:00
qwen-pr-safety-precheck.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
qwen-triage-finalize.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
qwen-triage.yml docs(ci): the ECS pool does run containers — correct two comments that say it does not (#9575) 2026-08-21 06:38:43 +00:00
release-sdk-java.yml fix(sdk-java): Harden daemon transport reliability (#7603) 2026-07-24 04:22:05 +00:00
release-sdk-python.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
release-sdk.yml chore(ci): Drop NPM_TOKEN in favor of npm Trusted Publishing (#9552) 2026-08-20 08:31:41 +00:00
release-vscode-companion.yml ci(vscode): gate sync publish on RELEASE_VSCODE_SYNC_PUBLISH variable (#9132) 2026-08-14 06:32:59 +00:00
release.yml chore(ci): Disable install scripts in release CI and guard security-checks workflow (#9577) 2026-08-21 03:48:03 +00:00
repo-hygiene.yml fix(ci): route workflow label mutations through REST (#8761) 2026-08-09 15:05:15 +00:00
scorecard-monthly.yml chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard (#9008) 2026-08-14 01:22:53 +00:00
sdk-java.yml refactor: centralize approval mode contracts (#9796) 2026-08-24 07:46:50 +00:00
sdk-python.yml refactor: centralize approval mode contracts (#9796) 2026-08-24 07:46:50 +00:00
security-checks.yml chore(deps): Clear high-severity CVE baseline and harden the security gate (#9584) 2026-08-21 07:43:32 +00:00
serve-ab-publish.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
serve-ab.yml fix(ci): narrow serve-ab's self-hosted wipe to the A/B checkout dirs (#9228) 2026-08-24 13:27:38 +00:00
stale.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
sync-desktop-to-oss.yml fix(desktop): harden release pipeline (#9009) 2026-08-12 16:38:12 +00:00
sync-live-host-to-oss.yml fix(ci): restore Live Host release mirroring (#8917) 2026-08-11 07:08:26 +00:00
sync-release-to-oss.yml Upgrade GitHub Actions for Node 24 compatibility (#5157) 2026-07-07 12:17:22 +00:00
update-ecs-runner-qwen.yml ci: add hk ECS runners to update matrix (#8599) 2026-08-05 16:57:08 +00:00
web-shell-visuals-cleanup.yml ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502) 2026-08-04 03:48:24 +00:00
web-shell-visuals-publish.yml fix(ci): don't let one failing scenario sink the whole visual preview (#7511) 2026-07-23 02:34:07 +00:00
web-shell-visuals.yml fix(ci): don't let one failing scenario sink the whole visual preview (#7511) 2026-07-23 02:34:07 +00:00
windows-runner-smoke.yml ci: run Windows merge queue tests on ECS (#8386) 2026-08-05 12:14:42 +00:00