mengw15 commented on issue #8377: URL: https://github.com/apache/texera/issues/8377#issuecomment-5757065412
Reopening: #8379 did not take effect. **The ruleset was never created.** asfyaml has rejected it on every push to main since #8379 merged — 38 mails to `commits@`, the first 49 seconds after the merge, the most recent 2026-09-21 06:01 UTC: ``` Validation failed while creating ruleset 'Merge Queue (release)': ['Actor GitHub Actions integration must be part of the ruleset source or owner organization'] ``` ([the first one](https://lists.apache.org/thread/5mo9sppzkv3pqyyys5vpm37hfvh6qtbo).) `GET /repos/apache/texera/rulesets` still returns the four rulesets from before #8379, with `Merge Queue` still covering `release/v1.1`, `v1.2` and `v1.3` and `updated_at` at 2026-09-01. The fail-safe ordering held and nothing was left uncovered — but the abort takes the whole `github:` feature of `.asf.yaml` with it, so none of it has been applied since 2026-09-11. **One line of this issue is no longer true.** It says "It is not silent: the job goes red, a comment lands on the original PR." That stopped on 2026-09-11: #8379 narrowed the `push-backports` job to `actions`, `contents`, `issues` and `statuses`, and commenting on a pull request is scoped by `pull-requests`, not `issues`. The annotation step now takes four 403s and gives up with a warning, leaving the step green. It shows in the record — the 2026-09-03 failures commented ("Backport to `release/v1.3` failed. See job log."); #8432, #8494 and #8562 did not, and went unnoticed until the v1.3 audit. **Lost since this was filed**, all `release/v1.3`: | source | merged | run | | --- | --- | --- | | #8343 | 09-03 | [33705892851](https://github.com/apache/texera/actions/runs/33705892851) | | #8347 | 09-03 | [33706287941](https://github.com/apache/texera/actions/runs/33706287941) | | #8432 | 09-17 | [35187408300](https://github.com/apache/texera/actions/runs/35187408300) | | #8494 | 09-18 | [35293784997](https://github.com/apache/texera/actions/runs/35293784997) — CVE-2026-88057 | | #8562 | 09-18 | [35305278774](https://github.com/apache/texera/actions/runs/35305278774) | Each was verified absent by reverse-applying its patch against `release/v1.3`, not by grepping commit messages — a message grep gives false positives, e.g. #8550's body mentions "e.g. #8432". Backport PRs are now open for all five: #8619, #8620, #8621, #8622, #8623. **In flight.** #8624 reverts #8379. #8626 routes a clean backport through a pull request instead, the way the conflicted ones already go — #8378 proposed the same thing with the workflow performing the close/reopen and arming auto-merge itself; those are the parts that can only be proven in production, so #8626 leaves them to the release manager's own click. This issue stays open until #8626 lands. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
