hermes-agent/.github/workflows
Teknium 887ba1fb03
ci: reject PRs with no common ancestor on main (#26611)
Catches the failure mode that produced #25045: a contributor PR whose
branch had been disconnected from main's history (likely an accidental
'git checkout --orphan' or '.git/' re-init).  GitHub's merge UI does
not refuse merges of unrelated histories, so the PR landed cleanly
with its intended one-file change but its parent-less root commit
(413990c94) got grafted into main as a second root.  The merge
resolution itself was correct — main's content won for every
conflicting file — but ~1500 files' worth of git blame collapsed
onto that single commit.

Implementation: 'git merge-base origin/main HEAD' exits non-zero and
prints nothing when the two commits share no ancestor.  Check both
conditions and fail with a clear message + recovery steps.

Verified: against the historic state of PR #25045 (base 5d90386ba,
head 1149e75db), 'git merge-base' returns empty with exit 1, so the
new check would have rejected it.
2026-05-15 14:47:30 -07:00
..
contributor-check.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
deploy-site.yml docs: publish llms.txt and llms-full.txt for agent-friendly ingestion (#18276) 2026-04-30 23:17:14 -07:00
docker-publish.yml ci(docker): split :latest (releases only) from :main (main HEAD) 2026-05-13 10:30:42 -04:00
docs-site-checks.yml docs(website): dedicated page per bundled + optional skill (#14929) 2026-04-23 22:22:11 -07:00
history-check.yml ci: reject PRs with no common ancestor on main (#26611) 2026-05-15 14:47:30 -07:00
lint.yml ci: skip lint comment on fork PRs 2026-05-10 13:19:41 -07:00
nix-lockfile-fix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
nix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
osv-scanner.yml chore(security): add OSV-Scanner CI + Dependabot for github-actions only (#20037) 2026-05-04 20:58:21 -07:00
skills-index.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
supply-chain-audit.yml security(deps): add upper bounds to 5 loose deps + document supply chain policy (#24226) 2026-05-15 01:33:08 -07:00
tests.yml fix(ci): bump e2e job timeout to 15 minutes 2026-05-12 17:10:57 -07:00
upload_to_pypi.yml chore(ci): pin actions/setup-node to SHA for supply-chain consistency 2026-05-15 14:45:43 -07:00
uv-lockfile-check.yml ci: add blocking uv.lock check 2026-05-08 18:47:07 -04:00