Skip to content

fix(release): compare version bumps from branch base - #113

Merged
t3chn merged 1 commit into
mainfrom
codex/fix-version-bump-base-diff
May 16, 2026
Merged

fix(release): compare version bumps from branch base#113
t3chn merged 1 commit into
mainfrom
codex/fix-version-bump-base-diff

Conversation

@t3chn

@t3chn t3chn commented May 16, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Fixes the version-bump guard base selection found in Codex Review on chore(release): require version bumps for runtime changes #112.
  • Compares feature branches from the merge base instead of the base branch tip.
  • Uses the GitHub push event before SHA for push comparisons.
  • Adds regression coverage for base-only changes, multi-commit feature branches, and push-event diffs.
  • Bumps Signum plugin metadata and proofpack examples to 4.21.9.

Issue ID

Test plan

  • python3 -m py_compile scripts/check_version_bump.py
  • bash tests/test-version-bump-required.sh
  • bash tests/test-ci-workflow.sh
  • bash tests/test-metadata-consistency.sh
  • bash tests/test-codex-plugin-metadata.sh
  • bash tests/test-proofpack-validation.sh
  • bash tests/test-signum-command-renderer.sh
  • bash tests/test-signum-fragment-parity.sh
  • bash tests/test-claude-overlay-doc-mirror.sh
  • git diff --check
  • PATH=/opt/homebrew/bin:$PATH bash scripts/run-deterministic-tests.sh

Notes

  • Runtime scanner, policy catalog, Codex skill, CI wiring, and eval baselines are unchanged.
  • Push event behavior is covered with a local synthetic GitHub event payload; GitHub Actions will verify the live workflow path on this PR.

Why:
- Codex review found that the version-bump guard compared feature branches against the base tip and fell back to HEAD^, which could flag base-only changes or miss earlier sensitive commits in multi-commit branches.
- Push events on main also need to compare against the GitHub event before SHA instead of the already-updated default branch ref.

What changed:
- Resolve explicit, environment, and default branch comparisons through the merge base with HEAD.
- Resolve GitHub push-event comparisons through the event before SHA when available.
- Add deterministic report fields for base source and comparison mode.
- Extend version-bump regression coverage for base-only changes, multi-commit branches, and push-event diffs.
- Bump Signum plugin metadata and proofpack examples to 4.21.9.

Testing:
- python3 -m py_compile scripts/check_version_bump.py
- bash tests/test-version-bump-required.sh
- bash tests/test-ci-workflow.sh
- bash tests/test-metadata-consistency.sh
- bash tests/test-codex-plugin-metadata.sh
- bash tests/test-proofpack-validation.sh
- bash tests/test-signum-command-renderer.sh
- bash tests/test-signum-fragment-parity.sh
- bash tests/test-claude-overlay-doc-mirror.sh
- git diff --check
- PATH=/opt/homebrew/bin:/Users/vi/.codex/tmp/arg0/codex-arg0IyheAr:/opt/homebrew/opt/openjdk@17/libexec/openjdk.jdk/Contents/Home/bin:/Users/vi/Library/Android/sdk/platform-tools:/Users/vi/Library/Android/sdk/emulator:/Users/vi/.antigravity/antigravity/bin:/Users/vi/.agents/bin:/Users/vi/.opencode/bin:/Users/vi/.local/bin:/Users/vi/go/bin:/opt/homebrew/opt/libpq/bin:/Users/vi/.local/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pkg/env/active/bin:/opt/pmk/env/global/bin:/Library/Apple/usr/bin:/usr/local/go/bin:/Users/vi/.local/bin:/Users/vi/.cargo/bin:/Users/vi/Library/Application Support/JetBrains/Toolbox/scripts:/Applications/Codex.app/Contents/Resources bash scripts/run-deterministic-tests.sh

Not tested:
- GitHub Actions push event execution was simulated with a local event JSON fixture, not run in GitHub Actions before this commit.

Risk:
- narrow - the guard now relies on merge-base availability for branch comparisons and skips when no usable base can be resolved.

Signed-off-by: Vitaly D. <netmin@pm.me>
@github-actions github-actions Bot added the intake/pass PR intake passed label May 16, 2026
@t3chn
t3chn merged commit a72f118 into main May 16, 2026
3 checks passed
@t3chn
t3chn deleted the codex/fix-version-bump-base-diff branch May 16, 2026 12:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

intake/pass PR intake passed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant