Skip to content

ci: skip hosted macOS jobs in the alexalok/opencodex fork - #19

Merged
jack-o-mania merged 3 commits into
devfrom
alex/disable-macos-ci
Nov 5, 2026
Merged

jack-o-mania merged 3 commits into
devfrom
alex/disable-macos-ci

Conversation

@jack-o-mania

@jack-o-mania jack-o-mania commented Nov 5, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Hosted macOS jobs never get a runner in alexalok/opencodex. On #18, queue helpers (macos-latest) sat in the queue until its 10-minute limit twice, with no runner assigned and no steps run, so the check failed without testing anything. This change stops the fork's automatic runs (pull requests, pushes and the nightly schedule) from requesting hosted macOS runners. A manual workflow_dispatch in the fork still runs every macOS job, so macOS validation remains available on demand. Upstream behavior stays the same.

Each macOS job or leg is gated on (github.repository != 'alexalok/opencodex' || github.event_name == 'workflow_dispatch'):

  • ci.yml: platform-macos (4 shards), macos-control and widget are skipped. The macOS legs of setup-action and remote-helper are dropped, and so are the macOS legs of the keyring-smoke and npm-global-smoke matrices that the changes job emits. The ci aggregate gate reads the same switch (MACOS_ENABLED) and expects not-requested for those jobs in the fork, so the nightly run does not demand jobs that were never scheduled.
  • codex-queue-helpers.yml: the matrix drops the macos-latest leg in the fork. This is the only macOS leg that ran on pull requests.
  • catalog-async-contracts.yml: the matrix drops the macOS leg after merge in the fork.
  • service-lifecycle.yml: macos-launchd is skipped in the fork.

release.yml and the self-hosted desktop-installed-gate.yml are unchanged, because the fork does not publish releases.

Verification

  • bun test tests/ci-workflows/: 1829 passed, 1 failed. The failure is bundledBunPath / durableBunPath > PATH-selected process provenance, which fails the same way on unmodified dev with the local Bun install.
  • Updated the pinned if: and matrix expectations. Added coverage showing that the fork's emitted smoke matrices have no macOS leg on push or the schedule and keep it on dispatch, that the aggregate gate expects the macOS jobs to be skipped in the fork outside dispatch, and that a fork push or schedule leaves platform-macos and widget unselected while a fork dispatch selects them.
  • bun scripts/structure-ssot.ts: passed. Every workflow file parses as YAML.

Checklist

  • Scope stays focused and avoids unrelated cleanup.
  • Docs or release notes were updated when needed (workflow comments describe the fork gate).
  • Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults (workflow conditions only; no permissions or secrets change).

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

✅ Deterministic PR hygiene checks passed.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-05T17:26:32.779572Z 85274a4 Manual request
🔒 Security Review ✅ Completed 2026-11-05T17:28:22.231115Z 85274a4 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions github-actions Bot added the chore label Nov 5, 2026

@grok-o-mania grok-o-mania Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Grok review (67ae250).

This PR gates every hosted macOS job and matrix leg on github.repository != 'alexalok/opencodex' so the fork stops queueing macOS runners: platform-macos, widget, macos-control and macos-launchd are skipped, and the macOS legs of setup-action, remote-helper, codex-queue-helpers, catalog-async-contracts and the emitted keyring/npm-global smoke matrices are dropped. The ci aggregate gate reads the same switch through MACOS_ENABLED, so it expects not-requested for those jobs in the fork (the only job that needs them), and upstream behavior is unchanged. Tests are updated for the new conditions plus fork-specific matrix and gate coverage.

No issues found. Checked for bugs and AGENTS.md compliance.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 67ae250064

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/ci.yml Resolved
@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 67ae250064

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: b1f1f1189e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: b1f1f1189e

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: 85274a41c0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 85274a41c0

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania
jack-o-mania merged commit 32989ff into dev Nov 5, 2026
78 of 82 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant