From 7cb016e214bebd3a6c34dd91187c851e59e3b40d Mon Sep 17 00:00:00 2001 From: "Ronald A. Richardson" Date: Wed, 14 Oct 2026 15:58:14 +0800 Subject: [PATCH] ci: track the shared API contract workflow on main The contract caller pinned fleetbase/fleetbase at a commit from before the run-order fixes that the Fleetbase API collection now needs (tracking deletes ahead of the order delete, the self-terminating activity cycle). Storefront's caller is deliberately unpinned for the same reason; this matches it. Each run still records the image digest it resolved. --- .github/workflows/postman.yml | 16 +++++++++++----- 1 file changed, 11 insertions(+), 5 deletions(-) diff --git a/.github/workflows/postman.yml b/.github/workflows/postman.yml index d58143299..157d770b0 100644 --- a/.github/workflows/postman.yml +++ b/.github/workflows/postman.yml @@ -5,9 +5,16 @@ name: API Contract (Postman) # fleetbase/fleetbase. Requires org secrets POSTMAN_API_KEY + _GITHUB_AUTH_TOKEN # (inherited); no-ops until POSTMAN_API_KEY is set. # -# Pin the workflow and host checkout together so branch installation resolves the -# required published Core release before migrating and exercising this module. -# The workflow records the API image digest and resolved dependencies for traceability. +# Deliberately unpinned, like storefront's. The reusable workflow defaults to booting +# fleetbase/fleetbase@main against fleetbase/fleetbase-api:latest, so every release and +# every fix to the run order (scripts/ci/order-collection-requests.py) is picked up +# automatically, with no ref here to remember to bump. Each run records the image digest +# it actually resolved in its job summary, so a result stays traceable. To reproduce an +# older run: +# +# with: +# fleetbase-ref: v0.7.53 +# api-image: fleetbase/fleetbase-api:v0.7.53 on: push: @@ -20,9 +27,8 @@ permissions: jobs: contract: - uses: fleetbase/fleetbase/.github/workflows/api-contract.yml@880c7392c67c93e3a65f01916d7a04036c098935 + uses: fleetbase/fleetbase/.github/workflows/api-contract.yml@main with: - fleetbase-ref: 880c7392c67c93e3a65f01916d7a04036c098935 collections: "Fleetbase API" build-from-source: false # Without this the run tests the version of fleetbase/fleetops-api baked into the