.github/workflows/repl-artefacts-upload.yml:102

• patrickedqvist/wait-for-vercel-preview needs the PR head commit SHA to find the matching Vercel deployment. In a workflow_run-triggered job, github.sha does not reliably correspond to the PR head SHA, and no sha input is being passed here. As a result, the action may time out or never find the preview URL, and the comment with the Vercel preview link may stop being posted.

Consider explicitly forwarding the originating PR head SHA via the action's sha input, e.g. using ${{ github.event.workflow_run.head_sha }}.

      - name: Find Vercel preview URL
        uses: patrickedqvist/wait-for-vercel-preview@d7982701e6fcd3ae073bff929e408e004404d38d # v1.3.3
        id: waitForVercel
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/repl-artefacts-upload.yml:34

• Deriving the PR number from the artifact directory name with ls | sed is fragile: if actions/download-artifact ever places additional files (e.g. a README, hidden file) or its naming convention changes, the captured PR_NUMBER will silently become incorrect — which could lead to commenting on the wrong PR and/or removing the label from the wrong PR.

A more robust approach is to have the build workflow write the PR number into the artifact itself (or upload it as a separate small artifact), and then read that file here, rather than parsing it from the directory name.

      - name: Get PR number
        id: pr-number
        run: |
          # The artifact is named repl-artefacts-pr-<number>
          PR_NUMBER=$(ls repl-artefacts | sed 's/repl-artefacts-pr-//')
          echo "pr-number=$PR_NUMBER" >> "$GITHUB_OUTPUT"

.github/workflows/repl-artefacts-upload.yml:38

• Removing the label here runs on every successful build, including same-repo PRs that were never labeled (the build job triggers for any synchronize/opened event when head.repo.full_name == 'rollup/rollup'). gh pr edit --remove-label returns a non-zero exit code when the label is not present on the PR, which will fail the upload job and prevent the artefacts from ever being uploaded for ordinary internal PRs. Consider gating this step on the original event being a labeled action (e.g., by passing that info via the artifact) or by checking first whether the label is present.

      - name: Remove 'x⁸ ⚙️ build repl artefacts' label
        run: gh pr edit ${{ steps.pr-number.outputs.pr-number }} --remove-label 'x⁸ ⚙️ build repl artefacts'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/repl-artefacts-upload.yml:102

• patrickedqvist/wait-for-vercel-preview polls the GitHub deployments API for the SHA of the workflow event's checkout. Under workflow_run, the default GITHUB_REF/SHA is the default branch's HEAD, not the PR commit, so this action will not find the Vercel preview for the PR and the step will time out (or the if: steps.waitForVercel.outputs.url guard will silently skip the comment update). The SHA needs to be passed explicitly, e.g. via the action's sha input set to ${{ github.event.workflow_run.head_sha }}.

      - name: Find Vercel preview URL
        uses: patrickedqvist/wait-for-vercel-preview@d7982701e6fcd3ae073bff929e408e004404d38d # v1.3.3
        id: waitForVercel
        with:
          token: ${{ secrets.GITHUB_TOKEN }}