Skip to content

Clean up now that the theme is public - #17

Merged
impuls42 merged 5 commits into
mainfrom
chore/drop-octo-sts-policy
Sep 29, 2026
Merged

impuls42 merged 5 commits into
mainfrom
chore/drop-octo-sts-policy

Conversation

@impuls42

@impuls42 impuls42 commented Sep 29, 2026 •

Copy link
Copy Markdown
Member

The repo is public now, so a site can pull the theme with no credentials at all. This removes what was only there for the private days, plus a few docs that were wrong for this repo.

  • Deletes .github/chainguard/alex-cv-pages.sts.yaml. It was a trust policy for the public Octo STS App, which is no longer installed on the org, so nothing reads it. The one site that used it (alex-cv) stops minting a token in its own PR.
  • README: the Quick Start loses the private-repo warning and the Octo STS walkthrough. Both install options work as written, and the example pins move from v1.1.0 to v1.3.0.
  • README: drops the "CI/CD pipeline" and "automatic version management and releases" feature bullets. CI here only builds the demo site, and versions are bumped by hand.
  • The demo About page links to this repo's README instead of upstream's, and its old "Created by" line is gone (the README and LICENSE carry the credit).
  • README: says right under the intro that this is a fork of smirnoffmg/harvard-style-cv-theme by Maksim Smirnov. The Attribution section now lists everything the fork adds (it stopped at 1.1.0) and points at the CHANGELOG.
  • Removes CONSTITUTION.md, the AI-agent guide inherited from upstream. Almost every concrete rule in it is wrong here (workflows that don't exist, a develop branch, Ruby 3.2, "no JavaScript" next to the print button). It's a separate commit, so it's easy to leave out.
  • CHANGELOG gets an Unreleased entry for the two removals.

No theme files change, so there's no version bump, and the gem still packs the same file list.

v1.3.0 isn't tagged yet, though VERSION and the CHANGELOG on main already say 1.3.0. The README pins assume the tag lands with the #16 rollout.

Checked by building the demo site (--config _config.demo.yml) and running gem build in a clean ruby:3.4.9 container. The About page now renders the new link.

Sites can fetch the theme without credentials now. Remove the Octo STS trust
policy, which nothing reads anymore (the public octo-sts App is no longer
installed on the org), and the README section that walked a consuming site
through minting a token. The README's example pins move from v1.1.0 to v1.3.0,
the version on main.
The README listed a CI/CD pipeline with automated testing and deployment, and
automatic versioning and releases. CI here builds the demo site and nothing
more, and versions are bumped by hand in the PR that ships them. The demo
About page sent readers to the upstream README, whose setup steps are for
smirnoffmg's theme rather than this one.
It came over from upstream as a guide for AI agents, and nearly every concrete
rule in it is wrong for this repository: release.yml and pages.yml workflows
that don't exist, a develop branch, Ruby 3.2, remote_theme pointing at
smirnoffmg's repo, and "no JavaScript" next to a print button that calls
window.print(). An agent following it would be misled, and nothing references
the file.
Credit smirnoffmg/harvard-style-cv-theme by Maksim Smirnov right under the
intro rather than only at the bottom. The Attribution section's list of what
this fork adds stopped at 1.1.0; it now covers the print layout work, the
print button and the Calendly link, and points at the CHANGELOG.
The demo About page ended with "Created by Maksim Smirnov". Credit for the
original theme lives in the README (under the intro and in Attribution) and
in LICENSE, so the demo page doesn't need its own line.
@impuls42
impuls42 merged commit 2efc2d9 into main Sep 29, 2026
1 check passed
@impuls42
impuls42 deleted the chore/drop-octo-sts-policy branch September 29, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant