hermes-agent/.github/workflows
Teknium 887ba1fb03
ci: reject PRs with no common ancestor on main (#26611)
Catches the failure mode that produced #25045: a contributor PR whose
branch had been disconnected from main's history (likely an accidental
'git checkout --orphan' or '.git/' re-init).  GitHub's merge UI does
not refuse merges of unrelated histories, so the PR landed cleanly
with its intended one-file change but its parent-less root commit
(413990c94) got grafted into main as a second root.  The merge
resolution itself was correct — main's content won for every
conflicting file — but ~1500 files' worth of git blame collapsed
onto that single commit.

Implementation: 'git merge-base origin/main HEAD' exits non-zero and
prints nothing when the two commits share no ancestor.  Check both
conditions and fail with a clear message + recovery steps.

Verified: against the historic state of PR #25045 (base 5d90386ba,
head 1149e75db), 'git merge-base' returns empty with exit 1, so the
new check would have rejected it.
2026-05-15 14:47:30 -07:00
..
contributor-check.yml
deploy-site.yml
docker-publish.yml
docs-site-checks.yml
history-check.yml ci: reject PRs with no common ancestor on main (#26611) 2026-05-15 14:47:30 -07:00
lint.yml
nix-lockfile-fix.yml
nix.yml
osv-scanner.yml
skills-index.yml
supply-chain-audit.yml security(deps): add upper bounds to 5 loose deps + document supply chain policy (#24226) 2026-05-15 01:33:08 -07:00
tests.yml
upload_to_pypi.yml chore(ci): pin actions/setup-node to SHA for supply-chain consistency 2026-05-15 14:45:43 -07:00
uv-lockfile-check.yml