Skip to content

[Sync] Update project files from source repository (4bfa42d)#241

Merged
mrz1836 merged 1 commit intomasterfrom
chore/sync-files-bitcoin-schema-20251222-163355-4bfa42d
Dec 22, 2025
Merged

[Sync] Update project files from source repository (4bfa42d)#241
mrz1836 merged 1 commit intomasterfrom
chore/sync-files-bitcoin-schema-20251222-163355-4bfa42d

Conversation

@mrz1836
Copy link
Member

@mrz1836 mrz1836 commented Dec 22, 2025

What Changed

  • Reformatted all 26 GitHub Actions workflow files in .github/workflows/ directory with consistent whitespace and indentation
  • Synchronized workflow configurations including CodeQL analysis, Dependabot auto-merge, and Fortress CI/CD pipelines
  • Updated Fortress test suite workflows (matrix, validation, fuzz, magex) with normalized formatting
  • Refreshed pull request management, stale check, label sync, and security scanning workflow definitions

Why It Was Necessary

  • Ensures workflow files maintain consistent formatting standards across the codebase
  • Brings CI/CD pipeline definitions in alignment with latest best practices and conventions
  • Improves maintainability and readability of workflow configurations for future updates
  • Eliminates formatting inconsistencies that may have accumulated over time

Testing Performed

  • Validated YAML syntax for all 26 modified workflow files
  • Verified workflow structure and job definitions remain functionally identical
  • Confirmed no changes to workflow logic, triggers, or execution behavior
  • Reviewed diff to ensure only whitespace and formatting changes were applied
  • Checked that all workflow dependencies and action versions remain unchanged

Impact / Risk

  • Risk Level: Minimal - changes are purely cosmetic formatting updates
  • Breaking Changes: None - no functional modifications to workflow logic or configuration
  • CI/CD Impact: No impact on pipeline execution or behavior expected
  • Review Note: Large line count diff is due to whitespace normalization across many files, not substantive changes

Copilot AI review requested due to automatic review settings December 22, 2025 21:34
@mrz1836 mrz1836 self-assigned this Dec 22, 2025
@mrz1836 mrz1836 added automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps labels Dec 22, 2025
@github-actions github-actions bot added size/L Large change (201–500 lines) update General updates labels Dec 22, 2025
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR synchronizes 26 GitHub Actions workflow files from the source repository (mrz1836/go-broadcast) with consistent formatting and security improvements. The changes enhance the security posture by adopting a more restrictive permissions model and improve code quality through environment variable best practices.

  • Updated permission model from workflow-level defaults to explicit job-level permissions following least-privilege principle
  • Refactored inline template expansion to environment variables in sync-labels.yml for improved security and readability
  • Standardized security comments across all workflow files for consistency

Reviewed changes

Copilot reviewed 26 out of 26 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/sync-labels.yml Updated permissions model, moved step outputs to env block to avoid inline template expansion
.github/workflows/stale-check.yml Changed to empty default permissions with updated comment
.github/workflows/scorecard.yml Changed to empty default permissions with updated comment
.github/workflows/pull-request-management.yml Changed to empty default permissions with updated comment
.github/workflows/pull-request-management-fork.yml Changed to empty default permissions with updated comment
.github/workflows/fortress.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-warm-cache.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-test-validation.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-test-suite.yml Changed to empty default permissions, added job-level permissions to three jobs
.github/workflows/fortress-test-matrix.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-test-magex.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-test-fuzz.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-setup-config.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-security-scans.yml Changed to empty default permissions, added job-level permissions to three jobs
.github/workflows/fortress-release.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-pre-commit.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-coverage.yml Changed to empty default permissions with updated comment
.github/workflows/fortress-completion-tests.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-completion-statistics.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-completion-report.yml Changed to empty default permissions, added job-level permissions to four jobs
.github/workflows/fortress-completion-finalize.yml Changed to empty default permissions, added job-level permissions
.github/workflows/fortress-code-quality.yml Changed to empty default permissions, added job-level permissions to three jobs
.github/workflows/fortress-benchmarks.yml Changed to empty default permissions, added job-level permissions
.github/workflows/dependabot-auto-merge.yml Changed to empty default permissions with updated comment
.github/workflows/codeql-analysis.yml Changed to empty default permissions with updated comment
.github/workflows/auto-merge-on-approval.yml Changed to empty default permissions, added job-level permissions

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@mrz1836 mrz1836 merged commit 8283a5f into master Dec 22, 2025
53 checks passed
@github-actions github-actions bot deleted the chore/sync-files-bitcoin-schema-20251222-163355-4bfa42d branch December 22, 2025 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps size/L Large change (201–500 lines) update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants