Repository navigation
Exempt fork parent history from the range gate - #12
Merged
Merged
Conversation
A fork that merges its parent repository inherits commits whose identities, file sizes and contents it cannot change. In a GitHub fork the workflow now fetches the parent's branches into refs/upstream/* and the script excludes commits reachable from them (--upstream-ref). Identities and secrets are checked on the fork's own commits only. A (path, blob) pair introduced by a parent commit stays exempt where it reappears, for example in the fork's merge commit; any fork change to such a path, and any new path, is checked as before. On itpplasma/GPEC#10 (develop merged with PrincetonUniversity/GPEC develop) the gate previously failed on 57.6 MB of parent blobs and three parent identities; with the parent refs only the merge commit is checked, and it passes. The job timeout rises to 10 min for the parent fetch. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01H2kuiWu67fzfh8w4Fkby3P
This was referenced Nov 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A fork that merges its parent repository inherits commits whose
identities, file sizes and contents it cannot change. In a GitHub fork
the workflow now fetches the parent's branches into refs/upstream/* and
the script excludes commits reachable from them (--upstream-ref).
Identities and secrets are checked on the fork's own commits only. A
(path, blob) pair introduced by a parent commit stays exempt where it
reappears, for example in the fork's merge commit; any fork change to
such a path, and any new path, is checked as before.
On itpplasma/GPEC#10 (develop merged with PrincetonUniversity/GPEC
develop) the gate previously failed on 57.6 MB of parent blobs and three
parent identities; with the parent refs only the merge commit is
checked, and it passes. The job timeout rises to 10 min for the parent
fetch.
Testing: 19/19 unit tests; the patched script run on itpplasma/GPEC#10 with PrincetonUniversity/GPEC heads in refs/upstream/* checks only merge commit 236ab2cd and passes.
Chris&AI
Generated by Claude Code