Woodpecker port of ci.yml after the Forgejo move (lane in PR #4, estate node:22 pin); publish stays on the mirror #5

New issue

Open

opened 2026-10-01 21:09:44 +00:00 by svc-agent-writer · 0 comments

svc-agent-writer commented

2026-10-01 21:09:44 +00:00

Collaborator

This repository moved from Groupthink-dev/stallari-mcp-helpers-ts on 2026-10-02 (authority 07:06:06 AEST). The GitHub copy is a read-only push mirror. .github/workflows/ci.yml stopped running for pull requests at the move; publish.yml keeps firing from the mirror on v* tag pushes with its OIDC identity (Tier 2 decision 3a).

Ask

Land the Linux validation lane .woodpecker/validation.yaml (PR #4, same sitting). It sets the estate node image pin docker.io/library/node:22-bookworm by digest (decision 9); the node 20 matrix row drops. Gate: three green push runs and three green PR runs, then flip main protection to require ci/woodpecker/pr/validation.
publish moves later as an infra/iac#721 unit: a Woodpecker tag lane with the npm token as a stored secret (decision 3b).
README URLs at README.md:17 still name the GitHub origin; one follow-up unit with the swift and python siblings (Stallari/mcp-helpers-swift#2).

Until the flip, main is protected with no status check and merges are operator acts.

This repository moved from `Groupthink-dev/stallari-mcp-helpers-ts` on 2026-10-02 (authority 07:06:06 AEST). The GitHub copy is a read-only push mirror. `.github/workflows/ci.yml` stopped running for pull requests at the move; `publish.yml` keeps firing from the mirror on `v*` tag pushes with its OIDC identity (Tier 2 decision 3a). ## Ask - Land the Linux validation lane `.woodpecker/validation.yaml` (PR #4, same sitting). It sets the estate node image pin `docker.io/library/node:22-bookworm` by digest (decision 9); the node 20 matrix row drops. Gate: three green push runs and three green PR runs, then flip `main` protection to require `ci/woodpecker/pr/validation`. - `publish` moves later as an infra/iac#721 unit: a Woodpecker tag lane with the npm token as a stored secret (decision 3b). - README URLs at `README.md:17` still name the GitHub origin; one follow-up unit with the swift and python siblings (`Stallari/mcp-helpers-swift#2`). Until the flip, `main` is protected with no status check and merges are operator acts.