Keep docs builder and publisher pins synchronized - #10
Merged
Merged
Conversation
why: The docs checkout and reusable publisher must advance together. Bare commit pins are not enough for Renovate to discover branch updates. what: - Enable GitHub Actions updates and exact digest pinning - Extract the custom docs checkout ref and group it with the publisher - Keep automatic merges disabled and document the IAM review step Verification: Renovate 44.115.10 validates the config and resolves both pins into one update. Its replacement engine changes both references. The existing workflow test rejects a mismatched pair. Mid and outer checks pass in 8.01 and 36.02 seconds. Scheduled execution still needs Renovate enabled for this repository.
why: The docs builder and publisher need the current reviewed source revision while retaining exact commit pins. what: - Apply the paired update produced by Renovate 44.115.10 - Use bc037e77a78977a32de7a18890dcaed2188826e1 for both references - Preserve the main branch annotations for later digest updates The Renovate CLI resolved both dependencies into renovate/docs-publisher; its replacement engine produced this exact two-line update. The local outer gate passes in 35.42 seconds. Hosted documentation validation and publication remain required before merge.
tony
added a commit
that referenced
this pull request
Sep 30, 2026
what: - Group docs builder and publisher updates through Renovate - Refresh both pins to the reviewed docs revision - Keep automatic merges disabled and document IAM approval why: Paired updates keep rendered documentation and publication on the same reviewed revision. The docs build, preview publication, and compatibility matrix validate the coordinated update.
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The docs checkout and reusable publisher must use the same reviewed commit. Renovate now discovers both pins and groups their updates into one pull request. GitHub Actions references retain full SHA pins, and automatic merging is disabled. Contributor guidance explains the separate IAM approval required before a new publisher revision can publish.
The included pin update uses the current reviewed docs main revision. The publisher workflow and provenance validator match the previously approved bytes; the imported port catalog changes cover browser links and descriptions. Its IAM approval is committed in
tony/tf-config.Verification:
renovate/docs-publisher. Its replacement engine generated the exact two-line pin update.Scheduled maintenance still requires Renovate to be enabled for this repository. The local updater checks do not establish that a hosted bot opened a PR or that a recurring run succeeded. Hosted docs build and preview publication must pass before merge.
Hosted validation: the docs build and preview publication passed in run 36674893903. The compatibility run passed all 36 cells after retrying one unchanged macOS terminal-draw test that missed its 0.5-second deadline on the first attempt.