Skip to content

build(deps): bump igorjs/gh-actions-clean-workflow from 3 to 8 - #4

Open
dependabot[bot] wants to merge 9 commits into
hubv3-6.6.yfrom
dependabot/github_actions/igorjs/gh-actions-clean-workflow-6
Open

build(deps): bump igorjs/gh-actions-clean-workflow from 3 to 8#4
dependabot[bot] wants to merge 9 commits into
hubv3-6.6.yfrom
dependabot/github_actions/igorjs/gh-actions-clean-workflow-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 1, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps igorjs/gh-actions-clean-workflow from 3 to 8.

Release notes

Sourced from igorjs/gh-actions-clean-workflow's releases.

v8

Breaking

  • Removed the deprecated days_old input. It had been silently ignored since v7.0.1 (the action always used runs_older_than). Use runs_older_than instead.
  • Removed the deprecated result output. It had never been written since v7.0.1; the metrics output has always been runs-deleted. Use runs-deleted instead.

Fixed

  • A bare 403 now fails fast with an actionable message instead of retrying for up to four minutes. Only a 403 carrying a Retry-After header (GitHub's secondary rate limit signal) is treated as a rate limit.
  • Confirmed token validation handles GitHub's new stateless ghs_ installation token format.

Added

  • A second, non-coverage-gated E2E/stress test suite (test/e2e/) that spawns the real compiled dist/index.js against a local mock GitHub API server, proving pagination, retry, and circuit-breaker logic survive esbuild bundling. A new e2e-tests CI job runs it on every push/PR (not yet a required check, pending a soak-in period).

See CHANGELOG.md for the full "Upgrading from v7 to v8" guide.

Full Changelog: igorjs/gh-actions-clean-workflow@v7.0.1...v8

v7.0.1

Fixed

  • Token validation now accepts ghs_ installation tokens in the new JWT stateless format (dots and dashes in token body), rolled out by GitHub on 2026-04-27. Validation now checks only the token prefix per GitHub's 2026-04-24 guidance, treating the body as opaque.
  • Corrected documented rate-limit delay from 100ms to 350ms to match actual behaviour.
  • Workflow name validation now accepts dots, allowing names like Node.js CI or ci.build.

v7

v7.0.1 is available — see the v7.0.1 release for fixes included in this major version line.

Added

  • Workflow Filtering: new workflow_names parameter to filter deletions by specific workflow names (comma-separated)
  • Dry Run Mode: new dry_run parameter to preview deletions without deleting runs
  • Metrics Outputs: 9 new action outputs for monitoring and alerting (total-runs-found, runs-deleted, runs-failed, total-api-requests, successful-requests, failed-requests, retry-attempts, rate-limit-hits, circuit-breaker-trips)
  • Circuit Breaker Pattern: opens after 5 consecutive failures, recovers after 60 seconds, transitions through CLOSED/OPEN/HALF_OPEN states
  • Automatic Retry Logic: exponential backoff for transient failures

v6

BREAKING CHANGES:

What's Changed

... (truncated)

Changelog

Sourced from igorjs/gh-actions-clean-workflow's changelog.

[8] - 2026-08-29

Fixed

  • A 403 response is no longer always treated as a rate limit. Only a 403 carrying a Retry-After header (GitHub's secondary rate limit signal) is retried; a bare 403 (typically a missing actions: write scope) now fails fast with an actionable message instead of retrying for up to four minutes.
  • Confirmed token validation is ready for GitHub's new stateless installation token format (ghs_-prefixed JWT, ~520 characters, two dots), rolled out via the X-GitHub-Stateless-S2S-Token override header per GitHub's 2026-05-15 changelog. Removed the unused MIN_TOKEN_LENGTH constant, which was dead code left over from before validation became prefix-only, and added a regression test pinning acceptance of a token at the new length and dot count.

Removed

  • Breaking: Removed the deprecated days_old input. It had been silently ignored since v7.0.1 (the action always used runs_older_than); GitHub Actions now warns on the undeclared input instead of accepting it silently. Use runs_older_than instead.
  • Breaking: Removed the deprecated result output. It had never been written since v7.0.1; the metrics output has always been runs-deleted. Use runs-deleted instead.

[7.0.1] - 2026-06-25

Fixed

  • Token validation now accepts ghs_ installation tokens in the new JWT stateless format (dots and dashes in token body), rolled out by GitHub on 2026-04-27. Validation now checks only the token prefix per GitHub's 2026-04-24 guidance, treating the body as opaque.
  • Corrected documented rate-limit delay from 100ms to 350ms to match actual behaviour.
  • Workflow name validation now accepts dots, allowing names like Node.js CI or ci.build.
Commits
  • b910eb3 chore(release): add v8 changelog and upgrade guide (#336)
  • 45be35e fix(ci): allow api.github.com in e2e harden-runner egress (#335)
  • 65648a4 ci: add non-blocking e2e-tests job and document suites (#334)
  • 36740c8 test(e2e): add subprocess smoke test for dist build (#333)
  • 9bf6295 feat(e2e): add local mock GitHub API server for e2e tests (#332)
  • c78091a test: add sustained stress scenarios for retry, circuit breaker (#331)
  • b6a9317 test(api): add boundary and stress test scenarios (#330)
  • eac7219 test: add stress-test helpers, exclude e2e from vitest run (#329)
  • 6d7f8be refactor: convert CircuitState enum to erasable union type (#328)
  • a129e8a chore: remove dead HTTP_STATUS.NOT_FOUND, harden index-signature access, use ...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 1, 2025
liuguoping1024 and others added 9 commits September 30, 2026 18:38
@liuguoping1024
feat(wifi): Update the W155S1 WiFi driver to v1.8.3.3
645202c 
Replace the vendored Amlogic W1 driver in jethome-0004, v1.6.3_20240426
-> v1.8.3.3_20260310 (driver:888ce88b817c15e731df70f+612585+643887+589776).
The BT sdio driver is unchanged; the aml_sdio exports it links against and
the shared w1_sdio.h structures are identical.

Local changes carried over from the 1.6.3 tree:
  - in-tree kbuild include paths ($(src)) in vmac/Makefile
  - WIFIMAC_PATH and WIFI_CONF_PATH under /usr/lib/firmware/w1
  - rssi/reg dump paths under /lib/firmware/w1
  - pairwise key dump in vm_cfg80211_add_key() commented out; it sits in
    the default AML_DEBUG_CFG80211 mask and would log the key
  - sha256_* renamed to sha256_*_i, crc32() prototype dropped (clash with
    kernel exports)
  - static print_version.c (create_version_file.pl is not run in-tree)

New for 1.8.3.3:
  - include <linux/upstream_version.h> only if present (vendor kernels only)
  - drop the opt_all.h block that remapped every pr_debug() to pr_info();
    its #ifndef was malformed and it made ~1000 debug prints unconditional

Drop jethome-0010: 1.8.3.3 fixes the RSN-parse failure path itself. 1.6.3
did memcmp(se, oldse) with oldse == NULL on new entries, which is the
wifi_mac_scan_rx+0x59c Oops seen in the field right after
"RSN mcast/akm cipher wrong"; the vendor now frees new entries directly
and unlinks listed ones under the caller's st_lock before freeing.

RF txt files are installed from packages/bsp and are not touched.

Build-tested on v6.6.129 (Image, modules, dtbs; all module symbols
resolve). Not yet boot tested on hardware.
@liuguoping1024
feat(uboot): Use ThirdReality FIP for trhubv3
92b55b6 
Sign trhubv3 u-boot with thirdreality/amlogic-boot-fip branch hubv3
(Amlogic SDK 2025r1 bl2/bl30/bl31, HubV3 DDR4 acs.bin). Other trhub
boards still use jethub-j100.
@liuguoping1024
feat(burn): Use own SDK 2025r1 USB loaders for hubv3
f567455 
Replace bins/hubv3 DDR.USB/UBOOT.USB with u-boot.bin.usb.bl2/.usb.tpl
built from Amlogic SDK 2025r1 board axg_hubv3_v1 (HubV3 DDR4 acs,
bl30 v1.1.3545, bl31 v1.3.2), drop the JetHome .default copies, rename
amlogic-dt-id to axg_hubv3_v1 and point convert.sh v3 at bins/hubv3.
v3a/v3b still use bins/j100.
@liuguoping1024
feat(board): Add ThirdReality HubV3L (trhubv3l)
94dcacd 
HubV3L (LinuxBox-Lite MB0.5) has the HubV3 pinout and software; only RAM
differs (2x DDR3, 2 ranks, 1GB).

- config/boards/trhubv3l.conf, BOOTCONFIG trhub_v3l_defconfig,
  BOOT_FDT_FILE meson-axg-thirdreality-trhub-v3l.dtb
- u-boot board_trhubv3l: board_trhubv3 patches + v3l DTS/defconfig
- kernel dt/meson-axg-thirdreality-trhub-v3l.dts: v3 with /memory = 1GB
- FIP thirdreality-hubv3l (DDR3 2-rank acs.bin)
- burn: bins/hubv3l from SDK 2025r1 axg_hubv3l_v1, dt-id axg_hubv3l_v1,
  convert.sh v3l
- release info, factory-reset, supervisor prefix and BSP same as trhubv3
- make-armbian-build-release.sh -b hubv3l
@liuguoping1024
fix(firstrun): Enable W155S1 WiFi/BT services on TRHub-V3L
b1448f4 
armbian-firstrun only enabled amlogicw1 and amlogicw1-bt for V3, V3B
and V3A, so V3L booted with both services disabled and no wlan0.
@liuguoping1024
feat(burn): Move v3a/v3b off JetHub FIP and loaders, drop JetHub burn…
0b4f281 
… files

- v3b = v3 hardware: FIP thirdreality-hubv3, bins/hubv3, dt-id axg_hubv3_v1
- v3a = v3l RAM (2x DDR3, 2 ranks, 1GB): FIP thirdreality-hubv3l,
  bins/hubv3l, dt-id axg_hubv3l_v1. Its u-boot DTS hardcoded 2GB via
  trhub_v3_defconfig; add trhub_v3a_defconfig + 1GB v3a DTS (0013) and
  make board_trhubv3a a copy of board_trhubv3l instead of a symlink to v3
- fix 1GB /memory in the v3a and v3l burn DTS
- remove bins/j100 j80 j200 magicbox, JetHub DTS, non-axg dtsi/headers,
  convert.sh d1/d2/h1/cma and the jethubj* release cases; rewrite README
- linuxbox board keeps jethub-j100 FIP (no SDK board for it)
@liuguoping1024
chore(burn): Fail convert.sh on errors, document loaders, credit JetHome
cea14a0 
- convert.sh: usage/unknown variant/partition/missing input now exit 1
- remove unused bins/hubv3*/image.*.cfg (convert uses bins/image.*.cfg)
- README: partition layout, how to regenerate DDR.USB/UBOOT.USB from the
  SDK, origin
- CREDITS.md: JetHome / Vyacheslav Bocharov and jethome-tools
@liuguoping1024
feat(burn): Use amlogic-boot-tools for FIP and burn image, drop amlog…
5fce653 
…ic-tools.repo

FIP blobs and the USB burn converter now live in one repo,
thirdreality/amlogic-boot-tools (branch hubv3), fetched to
cache/sources/amlogic-boot-tools:

  fip/hubv3, fip/hubv3l  used by uboot_custom_postprocess
  burn/convert.sh        run by make-armbian-build-release.sh in .tmp/burn

convert.sh failures now abort the release build.

Verified on HubV3: USB burn with the SDK 2025r1 loaders, first boot,
WiFi and BT up.
@dependabot
build(deps): bump igorjs/gh-actions-clean-workflow from 3 to 8
475a8cc 
Bumps [igorjs/gh-actions-clean-workflow](https://github.com/igorjs/gh-actions-clean-workflow) from 3 to 8.
- [Release notes](https://github.com/igorjs/gh-actions-clean-workflow/releases)
- [Changelog](https://github.com/igorjs/gh-actions-clean-workflow/blob/main/CHANGELOG.md)
- [Commits](igorjs/gh-actions-clean-workflow@v3...v8)

---
updated-dependencies:
- dependency-name: igorjs/gh-actions-clean-workflow
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from hubv3 to hubv3-6.6.y October 12, 2026 06:59
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/igorjs/gh-actions-clean-workflow-6 branch from bd5b956 to 475a8cc Compare October 12, 2026 06:59
@dependabot dependabot Bot changed the title Bump igorjs/gh-actions-clean-workflow from 3 to 6 build(deps): bump igorjs/gh-actions-clean-workflow from 3 to 8 Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code Software ⛓️

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@liuguoping1024