ci: authenticate git for forge dependencies in workspace builds #134

Merged
mik-tf merged 2 commits from main_mik into main 2026-06-08 15:14:48 +00:00
Owner

The workspace build fails in CI because it pulls hero_theme transitively through hero_admin_lib and hero_website_framework, and that dependency's repository was moved so its old URL now redirects. Cloning a redirected repo needs git credentials, but the runners never wired the FORGE_TOKEN they already have into git, so cargo could not fetch it and the build died during cargo metadata. This adds the standard token insteadOf rewrite for forge.ourworld.tf before the build steps in test, lab-publish, and build-linux. Local builds were unaffected because a developer's global git config already carries the same rewrite.

The workspace build fails in CI because it pulls hero_theme transitively through hero_admin_lib and hero_website_framework, and that dependency's repository was moved so its old URL now redirects. Cloning a redirected repo needs git credentials, but the runners never wired the FORGE_TOKEN they already have into git, so cargo could not fetch it and the build died during cargo metadata. This adds the standard token insteadOf rewrite for forge.ourworld.tf before the build steps in test, lab-publish, and build-linux. Local builds were unaffected because a developer's global git config already carries the same rewrite.
ci: authenticate git for forge dependencies in workspace builds
Some checks failed
Test / test (pull_request) Failing after 8m39s
502a354dd9
The workspace pulls hero_theme transitively (my_compute_explorer_admin ->
hero_admin_lib -> hero_website_framework), and that repository was moved, so
its old URL now redirects. Resolving it requires git credentials, but the CI
runners never wired the FORGE_TOKEN they already have into git, so cargo could
not clone the redirected dependency and the build failed during cargo metadata.

Add a token-based insteadOf rewrite for forge.ourworld.tf before the build
steps in the three build workflows. This is the same rewrite a developer's
global git config carries, which is why local builds were unaffected.

Signed-by: mik-tf <mik-tf@noreply.invalid>
ci(test): generate codegen serially before the parallel workspace check
All checks were successful
Test / test (pull_request) Successful in 8m5s
0ebc5643ef
Several crates run the openrpc code generator in their build scripts and write
the shared docs/openrpc.json. When cargo runs those build scripts in parallel,
one crate's aggregate step can read a per-domain spec another crate is mid-write,
failing with "EOF while parsing a value at line 1 column 0".

Run the code-generating crates once with --jobs 1 so their build scripts emit
the shared docs without racing, then the normal parallel check reuses them
without re-running. Keeps the workspace on its current pinned dependencies.

Signed-by: mik-tf <mik-tf@noreply.invalid>
mik-tf merged commit b78d9f81a3 into main 2026-06-08 15:14:48 +00:00
mik-tf deleted branch main_mik 2026-06-08 15:14:48 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lhumina_code/hero_compute!134
No description provided.