Skip to content

Sync main with upstream + merge release/no_volumes - #34

Open
Longwt123 wants to merge 127 commits into
mainfrom
update-main-sync
Open

Sync main with upstream + merge release/no_volumes#34
Longwt123 wants to merge 127 commits into
mainfrom
update-main-sync

Conversation

@Longwt123

@Longwt123 Longwt123 commented Jul 23, 2026

Copy link
Copy Markdown
Collaborator

描述

  1. 重置 main 到官方上游 actions/runner-container-hooks:main()
  2. 合并 release/no_volumes 分支(72 个自定义提交)
  3. 保留上游最新依赖版本(js-yaml ^5.0.0, uuid ^14.0.0 等)

相关 Issue

resolve https://github.com/opensourceways/backlog/issues/1203

变更类型

  • Bug 修复
  • 新功能
  • 代码重构
  • 文档更新
  • 样式改进
  • 性能优化
  • 测试相关
  • 其他

nikola-jokic and others added 30 commits July 29, 2025 11:06
* Bump all dependencies

* build and reformat

* lint

* format
* Update codeowners

* Update CODEOWNERS

Co-authored-by: Rocio Montes <88550502+rociomontes@users.noreply.github.com>

---------

Co-authored-by: Rocio Montes <88550502+rociomontes@users.noreply.github.com>
Bumps [@eslint/plugin-kit](https://github.com/eslint/rewrite/tree/HEAD/packages/plugin-kit) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/plugin-kit/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/plugin-kit-v0.3.4/packages/plugin-kit)

---
updated-dependencies:
- dependency-name: "@eslint/plugin-kit"
  dependency-version: 0.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.3...v4.0.4)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Separate tests

* Update .github/workflows/build.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* bump actions

* experiment using init container to prepare working environment

* rm script before continuing

* fix

* Update packages/k8s/src/hooks/run-script-step.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* leverage exec stat instead of printf

* npm update

* document the new constraint

---------

Co-authored-by: DenisPalnitsky <DenisPalnitsky@users.noreply.github.com>
* Prepare 0.8.0 release and bump dependencies once more

* Update releaseNotes.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…s#263)

* Change command to copy externals instead of move

* fix: using only mv, remove sudo
* Sort 'find' output before hashing for consistency across different platforms

* fix style issues
* feat: check if required binaries are present

Previously the necessary binaries were copied over using the runner
container. This lead to issues in case your main container was using the
musl libc implementation.

Instead of copying over any binaries, the initContainer now checks if
the required binaries are present in the main container.

* feat: get rid of the init container

* fix: add _runner_file_commands

* fix: do not fail if _runner_file_commands does not exist

It seems that for container actions this directory does not exist.
* Allow non-root container

* format

* add lint:fix and fix lint errors

* fix tests and volume mounts
* fix: calculate hash again after failure

The hash from the source is calculated only once. The source hash is
checked with the destination hash, but if the destination hash does not
match, the destination match is calculated again.

The problem is that if the source hash is incorrect, the check will keep
failing because the source hash is never re-calculated.

Now, in the event that the hashes do not match, the hash of the source
and the destination are calculated again.

* fix: use size instead of block size

Previously the %b parameter was used with stat. This displays the block
size of the file. We noticed that in some cases the block size of the
source and the destination file could be slightly different. Since the
source and target run in different containers, they can have different
block sizes defined. If the block size did not match, the hash would also not match, even if
the file content would be exactly the same.

With this change, the block size is no longer used. Instead the actual
size in bytes of the file is listed.
…actions#283)

* Fix workingDir permissions issue by creating it within init container

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* rework init commands

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…olume mode (actions#287)

In run-script-step, the _temp directory was being copied to the workflow pod,
but the _github_home and _github_workflow directories were not being moved
from their temporary location to the /github directory structure where they
are expected by GitHub Actions.

This caused event.json to be missing at /github/workflow/event.json, breaking
actions that depend on GITHUB_EVENT_PATH.

The fix adds a setup step that copies _github_home and _github_workflow from
/__w/_temp/ to /github/ after copying the temp directory to the pod, matching
the behavior of run-container-step and prepareJobScript.

Uses cp -r instead of symlinks to avoid symlink validation errors when copying
files back from the pod to the runner.
Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* run script copies back only runner file commands

* wip

* fix

* fmt

* user volume mount

* try doing only file commands

* typo

* remove _temp_pre

* Update packages/k8s/src/hooks/run-script-step.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update packages/k8s/src/hooks/run-script-step.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* better escape

* no useless escapes

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Bump packages

* bump exec
…PodPhases timeout

Cover 20 lines flagged by the Jenkins diff-cover gate (71% < 80% threshold):

- formatError: k8s response.body.message (with/without reason), top-level
  body, plain-object .message, JSON.stringify, primitives/null/undefined
- execCpToPod/execCpFromPod: errStream reject paths + 30-attempt retry
- waitForPodPhases: backoff timeout message when pod stays in backoff
  phase past maxTimeSeconds

Mock sleep (retry loops) and tar-fs (no real filesystem) in
k8s-index.spec to keep tests fast and avoid async teardown races.
@opensourceways-bot

Copy link
Copy Markdown

CLA Signature Guide

@Longwt123 , thanks for your pull request.

The following commit(s) are not associated with a signed Contributor License Agreement (CLA).

Commit Reason
589414ea Bump all dependencies (#234) * ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
878781f9 docker: fix readOnly volumes in ... the email used in the commit is an invalid email!
please check all commits.
605551ff Bump @eslint/plugin-kit from 0.3... the email used in the commit is an invalid email!
please check all commits.
ea25fd1b Change command to remove sudo to... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
2934de33 Sort 'find' output before hashin... the email used in the commit is an invalid email!
please check all commits.
ad9cb43c feat: check if required binaries... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
0951cc73 Improve validation checks after ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
5f5708a2 Overwrite runnner file commands ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
ee5c48b9 Adding websocket heartbeat (#333... the email used in the commit is an invalid email!
please check all commits.
bcd95aee Fix error serialization in 4 cat... the email used in the commit is an invalid email!
please check all commits.
d170a93f fix(k8s): prevent circular-JSON ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
721a06a6 Fix misleading error/debug messa... the email used in the commit is an invalid email!
please check all commits.

To sign CLA, click here.

To check if your email is configured correctly, refer to the FAQs.

Once you've signed the CLA or updating your email, please comment /check-cla to revalidate CLA status.

@opensourceways-bot

Copy link
Copy Markdown
检查项 状态
敏感信息扫描
安全编码扫描
漏洞扫描
开源license合规扫描
UT测试覆盖率
开发阶段设计文档检查
流水线链接 点击跳转查看日志

vi.mock factory with require('stream') tripped
@typescript-eslint/no-require-imports in lint. Use async factory +
await import('stream') instead.
@opensourceways-bot

Copy link
Copy Markdown

CLA Signature Guide

@Longwt123 , thanks for your pull request.

The following commit(s) are not associated with a signed Contributor License Agreement (CLA).

Commit Reason
589414ea Bump all dependencies (#234) * ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
878781f9 docker: fix readOnly volumes in ... the email used in the commit is an invalid email!
please check all commits.
605551ff Bump @eslint/plugin-kit from 0.3... the email used in the commit is an invalid email!
please check all commits.
ea25fd1b Change command to remove sudo to... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
2934de33 Sort 'find' output before hashin... the email used in the commit is an invalid email!
please check all commits.
ad9cb43c feat: check if required binaries... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
0951cc73 Improve validation checks after ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
5f5708a2 Overwrite runnner file commands ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
ee5c48b9 Adding websocket heartbeat (#333... the email used in the commit is an invalid email!
please check all commits.
bcd95aee Fix error serialization in 4 cat... the email used in the commit is an invalid email!
please check all commits.
d170a93f fix(k8s): prevent circular-JSON ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
721a06a6 Fix misleading error/debug messa... the email used in the commit is an invalid email!
please check all commits.

To sign CLA, click here.

To check if your email is configured correctly, refer to the FAQs.

Once you've signed the CLA or updating your email, please comment /check-cla to revalidate CLA status.

@opensourceways-bot

Copy link
Copy Markdown
检查项 状态
敏感信息扫描
安全编码扫描
漏洞扫描
开源license合规扫描
UT测试覆盖率
开发阶段设计文档检查
流水线链接 点击跳转查看日志

Jenkins coverage installs vitest@2.0.2 when vite is not declared; loading
an ESM-syntax vitest.config.js as CJS loses the coverage block, so the v8
provider crashed on undefined reportsDirectory and no clover.xml was
generated (coverage reported N/A).

.mjs forces ESM module type, which vitest 2.x and 4.x both load
correctly. Verified: clover.xml generated under both vitest 2.0.2 and
4.1.10.
@opensourceways-bot

Copy link
Copy Markdown

CLA Signature Guide

@Longwt123 , thanks for your pull request.

The following commit(s) are not associated with a signed Contributor License Agreement (CLA).

Commit Reason
589414ea Bump all dependencies (#234) * ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
878781f9 docker: fix readOnly volumes in ... the email used in the commit is an invalid email!
please check all commits.
605551ff Bump @eslint/plugin-kit from 0.3... the email used in the commit is an invalid email!
please check all commits.
ea25fd1b Change command to remove sudo to... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
2934de33 Sort 'find' output before hashin... the email used in the commit is an invalid email!
please check all commits.
ad9cb43c feat: check if required binaries... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
0951cc73 Improve validation checks after ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
5f5708a2 Overwrite runnner file commands ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
ee5c48b9 Adding websocket heartbeat (#333... the email used in the commit is an invalid email!
please check all commits.
bcd95aee Fix error serialization in 4 cat... the email used in the commit is an invalid email!
please check all commits.
d170a93f fix(k8s): prevent circular-JSON ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
721a06a6 Fix misleading error/debug messa... the email used in the commit is an invalid email!
please check all commits.

To sign CLA, click here.

To check if your email is configured correctly, refer to the FAQs.

Once you've signed the CLA or updating your email, please comment /check-cla to revalidate CLA status.

@Longwt123

Copy link
Copy Markdown
Collaborator Author

/retest

@opensourceways-bot

Copy link
Copy Markdown
检查项 状态
敏感信息扫描
安全编码扫描
漏洞扫描
开源license合规扫描
UT测试覆盖率
开发阶段设计文档检查
流水线链接 点击跳转查看日志

@opensourceways-bot

Copy link
Copy Markdown
检查项 状态
敏感信息扫描
安全编码扫描
漏洞扫描
开源license合规扫描
UT测试覆盖率
开发阶段设计文档检查
流水线链接 点击跳转查看日志

vitest 2.0.2 (Jenkins) resolves 'import tar from tar-fs' differently:
- top-level { pack, extract } needed __esModule + default for interop
- shared PassThrough instance leaked stream state across tests; return a
  fresh one per call

Verified green under both vitest 2.0.2 (Jenkins) and 4.1.10 (local).
@opensourceways-bot

Copy link
Copy Markdown

CLA Signature Guide

@Longwt123 , thanks for your pull request.

The following commit(s) are not associated with a signed Contributor License Agreement (CLA).

Commit Reason
589414ea Bump all dependencies (#234) * ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
878781f9 docker: fix readOnly volumes in ... the email used in the commit is an invalid email!
please check all commits.
605551ff Bump @eslint/plugin-kit from 0.3... the email used in the commit is an invalid email!
please check all commits.
ea25fd1b Change command to remove sudo to... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
2934de33 Sort 'find' output before hashin... the email used in the commit is an invalid email!
please check all commits.
ad9cb43c feat: check if required binaries... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
0951cc73 Improve validation checks after ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
5f5708a2 Overwrite runnner file commands ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
ee5c48b9 Adding websocket heartbeat (#333... the email used in the commit is an invalid email!
please check all commits.
bcd95aee Fix error serialization in 4 cat... the email used in the commit is an invalid email!
please check all commits.
d170a93f fix(k8s): prevent circular-JSON ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
721a06a6 Fix misleading error/debug messa... the email used in the commit is an invalid email!
please check all commits.

To sign CLA, click here.

To check if your email is configured correctly, refer to the FAQs.

Once you've signed the CLA or updating your email, please comment /check-cla to revalidate CLA status.

@opensourceways-bot

Copy link
Copy Markdown
检查项 状态
敏感信息扫描
安全编码扫描
漏洞扫描
开源license合规扫描
UT覆盖率
开发阶段设计文档检查
流水线链接 点击跳转查看日志

@Longwt123

Copy link
Copy Markdown
Collaborator Author

/check-pr

@opensourceways-bot

Copy link
Copy Markdown

Merge Verification Failed

@Longwt123, this pr is not mergeable and the reasons are below:

Not Enough Labels
  • the pull request needs 1 opensourceways-cla/yes labels, but now gets 0.
  • the pull request needs 1 approved labels, but now gets 0.
  • the pull request needs 2 lgtm labels, but now gets 0.
Label Usage Tips
  • opensourceways-cla/yes: All contributor has signed the CLA.

@Longwt123

Copy link
Copy Markdown
Collaborator Author

/check-cla

@opensourceways-bot

Copy link
Copy Markdown

CLA Signature Guide

@Longwt123 , thanks for your pull request.

The following commit(s) are not associated with a signed Contributor License Agreement (CLA).

Commit Reason
589414ea Bump all dependencies (#234) * ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
878781f9 docker: fix readOnly volumes in ... the email used in the commit is an invalid email!
please check all commits.
605551ff Bump @eslint/plugin-kit from 0.3... the email used in the commit is an invalid email!
please check all commits.
ea25fd1b Change command to remove sudo to... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
2934de33 Sort 'find' output before hashin... the email used in the commit is an invalid email!
please check all commits.
ad9cb43c feat: check if required binaries... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
0951cc73 Improve validation checks after ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
5f5708a2 Overwrite runnner file commands ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
ee5c48b9 Adding websocket heartbeat (#333... the email used in the commit is an invalid email!
please check all commits.
bcd95aee Fix error serialization in 4 cat... the email used in the commit is an invalid email!
please check all commits.
d170a93f fix(k8s): prevent circular-JSON ... the email used in the commit is not linked to a signed CLA!
please verify that it matches the email you used when signing the CLA.
721a06a6 Fix misleading error/debug messa... the email used in the commit is an invalid email!
please check all commits.

To sign CLA, click here.

To check if your email is configured correctly, refer to the FAQs.

Once you've signed the CLA or updating your email, please comment /check-cla to revalidate CLA status.

@Longwt123

Copy link
Copy Markdown
Collaborator Author

由于上游部分提交的邮箱未签署CLA需要手动合入。

@KadenZhang3321

Copy link
Copy Markdown

/lgtm
/approve

@opensourceways-bot

Copy link
Copy Markdown

Review Code Feedback

  • The label lgtm-kadenzhang3321 was added to this pull request. It means that KadenZhang3321 reviewed the code changes. 👋
Tips
  • If this pull request is not merged while all conditions are met, comment /check-pr to try again. 😄

@opensourceways-bot

Copy link
Copy Markdown

Review Code Feedback

  • The label approved was added to this pull request. It means that KadenZhang3321 reviewed the code changes. 👋
Tips
  • If this pull request is not merged while all conditions are met, comment /check-pr to try again. 😄

@JavaPythonAIForBAT

Copy link
Copy Markdown

/lgtm

@opensourceways-bot

Copy link
Copy Markdown

Review Code Feedback

  • The label lgtm-javapythonaiforbat was added to this pull request. It means that JavaPythonAIForBAT reviewed the code changes. 👋
Tips
  • If this pull request is not merged while all conditions are met, comment /check-pr to try again. 😄

@Longwt123

Copy link
Copy Markdown
Collaborator Author

/check-pr

@opensourceways-bot

Copy link
Copy Markdown

Merge Verification Failed

@Longwt123, this pr is not mergeable and the reasons are below:

Not Enough Labels
  • the pull request needs 1 opensourceways-cla/yes labels, but now gets 0.
Label Usage Tips
  • opensourceways-cla/yes: All contributor has signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.