Skip to content

PLUGINAPI-249 Keep build-number workaround local to sonar-plugin-api - #344

Closed
zglicz wants to merge 1 commit into
masterfrom
codex/local-build-number
Closed

zglicz wants to merge 1 commit into
masterfrom
codex/local-build-number

Conversation

@zglicz

@zglicz zglicz commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Replace the allocator pinned to the closed ci-github-actions#362 draft with a repository-local action. It runs the existing released v2 allocator script against the PR head, avoiding the reproduced HTTP 403 for synthetic merge commits, then passes the number to Build and Promote.

The allocator script is pinned to the same v2 commit used during the investigation. The local wrapper preserves legacy-property migration, same-run reuse and allocation locking, and removes its temporary files. The build continues to check out and analyse the merge commit.

Validation: actionlint, YAML parsing and ShellCheck; end-to-end CI pending.

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod Bot changed the title Keep build-number workaround local to sonar-plugin-api PLUGINAPI-249 Keep build-number workaround local to sonar-plugin-api Oct 20, 2026
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

PLUGINAPI-249

@zglicz zglicz closed this Oct 20, 2026
@sonarqube-next

Copy link
Copy Markdown

@gitar-bot

gitar-bot Bot commented Oct 20, 2026 •

Copy link
Copy Markdown
Code Review ✅ Approved

🟡 Medium risk · The local action changes build-number allocation to use the PR head; allocator or token failures could assign an incorrect number and affect promoted artifact versioning.

Replaces the build-number allocator with a repository-local action that runs the pinned v2 allocator script against the PR head, avoiding the HTTP 403 seen with synthetic merge commits, and passes the number to Build and Promote. No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected
Cross-PR 1 PR inspected 0 open impacts

PR #360: BUILD-12998 Fix build-number ref authorization for PR merge commits Inspected

Auto-approval Not enabled

Set up

For more verification details, comment gitar display:verbose.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant