agent-tools: Hermes-reviewed bump pipeline (05:00/17:00 Prague) #1

Open
infra-nix wants to merge 1 commit from infra-nix/pipeline-scaffold into master
Collaborator

What

Scaffold the locked agent-tools update pipeline on donach/agent-tools (ex grok-build-nix).

Changes

  • update.yml: cron 05:00 / 17:00 Europe/Prague (UTC 0 3 / 0 15 under CEST)
  • No more direct master push + tags from CI
  • On bump: verify build → push bump/grok-$ver → open PR → request @hermes + comment
  • PIPELINE.md + README rename notes
  • flake description updated; package outputs still .#grok for consumers

Follow-up (not this PR)

  • nixos-llm: retarget grok-build input URL to donach/agent-tools + daily 06:00 Prague pin/deploy job
  • Extra tools (Claude, …) as additional packages sharing this PR gate

Review

@hermes — please review workflow security (token use, no master push) + schedule.

## What Scaffold the locked agent-tools update pipeline on `donach/agent-tools` (ex `grok-build-nix`). ## Changes - `update.yml`: cron **05:00 / 17:00 Europe/Prague** (UTC `0 3` / `0 15` under CEST) - No more direct `master` push + tags from CI - On bump: verify build → push `bump/grok-$ver` → open PR → request **@hermes** + comment - `PIPELINE.md` + README rename notes - flake description updated; package outputs still `.#grok` for consumers ## Follow-up (not this PR) - nixos-llm: retarget `grok-build` input URL to `donach/agent-tools` + daily **06:00 Prague** pin/deploy job - Extra tools (Claude, …) as additional packages sharing this PR gate ## Review @hermes — please review workflow security (token use, no master push) + schedule.
agent-tools: Hermes-reviewed bump pipeline (05:00/17:00 Prague)
All checks were successful
CI / build (x86_64-linux) (pull_request) Successful in 15s
39afd404eb
Stop auto-pushing master from the updater. Twice daily (and on
workflow_dispatch) check/build/smoke, then open a bump PR and request
@hermes for the malicious-pin gate. Document the locked cadence in
PIPELINE.md; nixos-llm 06:00 pin/deploy stays a separate follow-up.
Author
Collaborator

@hermes please review this pipeline scaffold (malicious-pin gate: bump PRs only; no CI push to master).

@hermes please review this pipeline scaffold (malicious-pin gate: bump PRs only; no CI push to master).
All checks were successful
CI / build (x86_64-linux) (pull_request) Successful in 15s
This pull request has changes conflicting with the target branch.
  • .forgejo/workflows/update.yml
  • PIPELINE.md
  • flake.nix
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin infra-nix/pipeline-scaffold:infra-nix/pipeline-scaffold
git switch infra-nix/pipeline-scaffold

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff infra-nix/pipeline-scaffold
git switch infra-nix/pipeline-scaffold
git rebase master
git switch master
git merge --ff-only infra-nix/pipeline-scaffold
git switch infra-nix/pipeline-scaffold
git rebase master
git switch master
git merge --no-ff infra-nix/pipeline-scaffold
git switch master
git merge --squash infra-nix/pipeline-scaffold
git switch master
git merge --ff-only infra-nix/pipeline-scaffold
git switch master
git merge infra-nix/pipeline-scaffold
git push origin master
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
donach/agent-tools!1
No description provided.