Skip to content

cherry pick 28368#28535

Merged
tommasini merged 3 commits into
release/7.73.0from
chore/cherry-pick-pr-28368
Apr 8, 2026
Merged

cherry pick 28368#28535
tommasini merged 3 commits into
release/7.73.0from
chore/cherry-pick-pr-28368

Conversation

@tommasini

@tommasini tommasini commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

Description

Cherry pick #28368

Changelog

CHANGELOG entry:

Related issues

Fixes:

Manual testing steps

Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Medium Risk
Changes release automation control flow for OTA updates and production tag creation; misconfiguration could block or mis-trigger OTA deployments in CI.

Overview
Updates runway-ota-build-core.yml to invoke the OTA publisher as a job-level reusable workflow (uses: ./.github/workflows/push-eas-update.yml) instead of an invalid step-level call.

Adds a validate-ota-pr gate that hard-fails OTA runs when no PR number can be resolved, and simplifies production tag creation to use decide.outputs.ota_version directly (removing the prior release_tag output wiring).

Reviewed by Cursor Bugbot for commit 179c16b. Bugbot is set up for automated code reviews on this repo. Configure here.

@tommasini tommasini requested a review from a team as a code owner April 8, 2026 14:00
@github-actions

github-actions Bot commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@metamaskbot metamaskbot added the team-mobile-platform Mobile Platform team label Apr 8, 2026
@github-actions github-actions Bot added risk-low Low testing needed · Low bug introduction risk size-S and removed risk-low Low testing needed · Low bug introduction risk labels Apr 8, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit e97b59a. Configure here.

message: ${{ needs.decide.outputs.ota_version }}
channel: ${{ inputs.ota_channel }}
platform: ${{ inputs.platform }}
secrets: inherit

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reusable workflow call targets workflow lacking workflow_call trigger

High Severity

The trigger-ota job calls push-eas-update.yml as a reusable workflow via job-level uses:, but that workflow only defines on: workflow_dispatch: — it has no workflow_call trigger. GitHub Actions requires reusable workflows to declare on: workflow_call: with matching inputs. Without it, the job will fail at workflow resolution time, completely breaking the OTA update pipeline. The previous approach dispatched the workflow via actions/github-script (createWorkflowDispatch), which targeted workflow_dispatch and worked fine.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit e97b59a. Configure here.

@github-actions github-actions Bot added risk-low Low testing needed · Low bug introduction risk and removed risk-low Low testing needed · Low bug introduction risk labels Apr 8, 2026
@sonarqubecloud

sonarqubecloud Bot commented Apr 8, 2026

Copy link
Copy Markdown

@tommasini tommasini merged commit f177282 into release/7.73.0 Apr 8, 2026
30 of 38 checks passed
@github-actions github-actions Bot added risk-low Low testing needed · Low bug introduction risk and removed risk-low Low testing needed · Low bug introduction risk labels Apr 8, 2026
@github-actions

github-actions Bot commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

🔍 Smart E2E Test Selection

  • Selected E2E tags: None (no tests recommended)
  • Selected Performance tags: None (no tests recommended)
  • Risk Level: low
  • AI Confidence: 95%
click to see 🤖 AI reasoning details

E2E Test Selection:
The change is a pure CI/CD workflow refactoring in .github/workflows/runway-ota-build-core.yml. It fixes a GitHub Actions bug where a reusable workflow was incorrectly called inside a step (which is not supported - reusable workflows must be at the job level). The fix:

  1. Splits the old trigger-ota job into two jobs: validate-ota-pr (handles PR validation) and trigger-ota (now correctly uses uses: at the job level)
  2. Updates create-ota-production-tag to get tag_name from needs.decide.outputs.ota_version instead of the removed output from the old job
  3. Adds secrets: inherit to the trigger-ota job

This change has zero impact on:

  • Application source code
  • E2E test infrastructure or test files
  • Any user-facing functionality
  • Any controller, engine, or core module

It only affects the OTA (Over-The-Air) build/release pipeline workflow. No E2E tests need to run to validate this CI-only change.

Performance Test Selection:
This is a pure CI/CD workflow fix with no impact on application code, rendering, data loading, or any performance-sensitive paths. No performance tests are needed.

View GitHub Actions results

@tommasini tommasini deleted the chore/cherry-pick-pr-28368 branch April 8, 2026 17:05
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 8, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

risk-low Low testing needed · Low bug introduction risk size-S team-mobile-platform Mobile Platform team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants