fix(push): pin gateway tag creation contract

Co-authored-by: npub1tquskdu6yc4h8l7xxtceculxw600grekeq0xg2ukqfrwl7vrzg3quz3gmp <58390b379a262b73ffc632f19c73e6769ef40f36c81e642b960246eff9831222@buzz.block.builderlab.xyz>
Signed-off-by: npub1tquskdu6yc4h8l7xxtceculxw600grekeq0xg2ukqfrwl7vrzg3quz3gmp <58390b379a262b73ffc632f19c73e6769ef40f36c81e642b960246eff9831222@buzz.block.builderlab.xyz>
This commit is contained in:
npub1tquskdu6yc4h8l7xxtceculxw600grekeq0xg2ukqfrwl7vrzg3quz3gmp
2026-07-30 18:22:51 -07:00
parent 10d5a26414
commit 9548fc7604
@@ -8,16 +8,18 @@ auto_path = Path('.github/workflows/auto-tag-on-release-pr-merge.yml')
publish_path = Path('.github/workflows/push-gateway-helm-chart.yml')
auto_text = auto_path.read_text()
publish_text = publish_path.read_text()
# Parse first, then pin the cross-workflow strings whose agreement makes this a
# reachable lane rather than an orphan publisher.
# Parse first, then pin the tag producer and consumer strings whose agreement
# makes this a reachable lane rather than an orphan publisher.
yaml.safe_load(auto_text)
yaml.safe_load(publish_text)
for needle in (
'push-chart-release/*)',
'VERSION="${BRANCH#push-chart-release/}"',
'TAG_PREFIX="push-chart-v"',
'DISPATCH="push-gateway-helm-chart"',
'push-gateway-helm-chart) WORKFLOW="push-gateway-helm-chart.yml"',
'- name: Create and push tag',
'TAG: ${{ steps.release.outputs.tag }}',
'refs/tags/$TAG',
'-f sha="$TARGET_SHA"',
):
assert needle in auto_text, f'missing auto-tag gateway chart contract: {needle}'
for needle in (