safe-global / safe-config-service / 29094138876
98%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 101
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 97.691%. Remained the same
29094138876

push

github

web-flow 
ci: Harden deploy pipeline - roll-forward + staging gate + version-pol  (#1625)

*ci: migration-aware auto-rollback for production

Reverting the image across a forward DB migration mismatches code and
schema and breaks the service. Add an auto_rollback input to _deploy.yml
(default true, unchanged for other callers); production.yml now detects
whether the release adds migration files since the previous tag and only
enables rollback when it doesn't. Migration-bearing releases fail loudly
and are recovered forward.

*ci: roll-forward by default; drop migration auto-detection

Reverting the image across a forward-only/destructive DB migration breaks
the service, and auto-detecting 'safe to roll back' is fragile (baseline
mismatch + can't tell additive from destructive migrations). Release path
never auto-rolls-back (recover forward); auto_rollback stays opt-in via the
manual workflow_dispatch input.

*ci: gate prod on staging success + VPN-free /about/ version-poll

* ci: address PR review — fix stale rollback comments, harden version-poll, note workflow_run race

- production.yml/_deploy.yml headers no longer advertise auto-rollback on the
  release path (roll-forward by default; revert only when health_gate &&
  auto_rollback).
- Replace the misleading 'migration-aware rollback' comment (auto-detection was
  dropped) with the actual behavior: release hardcodes false, dispatch opts in.
- release-please.yml: document the narrow workflow_run race (default-branch HEAD
  at trigger time; cancel-in-progress makes it mostly self-correcting).
- Version-poll: guard empty image_tag + explicit curl/jq form (.version // '').

1523 of 1559 relevant lines covered (97.69%)

0.98 hits per line

Jobs
ID Job ID Ran Files Coverage
1 29094138876.1 101
97.69
 GitHub Action Run
Source Files on build 29094138876