From 5fefc9d767ddbc2a6ac31302b3591ac5ab1e1f99 Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Wed, 15 Jul 2026 01:53:57 -0400 Subject: [PATCH] chore(runner-policy): retire the superseded drift-check contract github-iac now pins pulumi-version-drift-check at the reviewed retirement-aligned commit; the prior reference has no consumers left. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01JLfjHY8PY6ozhgZPiuHKik --- components/runner-policy/policy.json | 6 ------ components/runner-policy/runner-policy.test.mjs | 11 ++--------- 2 files changed, 2 insertions(+), 15 deletions(-) diff --git a/components/runner-policy/policy.json b/components/runner-policy/policy.json index ef5ae77..ca80a87 100644 --- a/components/runner-policy/policy.json +++ b/components/runner-policy/policy.json @@ -87,12 +87,6 @@ "allowedSecrets": {}, "fixedRunsOn": ["windows-2025"] }, - "melodic-software/ci-workflows/.github/workflows/pulumi-version-drift-check.yml@99ac2f8c5b09dbb785d4eaf18465cbd96c30290c": { - "routing": "hosted-only", - "allowedInputs": [], - "allowedSecrets": {}, - "fixedRunsOn": ["ubuntu-24.04"] - }, "melodic-software/ci-workflows/.github/workflows/pulumi-version-drift-check.yml@15aefd8799e8a8b5ffdfcc183dcbfcbf58044481": { "routing": "hosted-only", "allowedInputs": [], diff --git a/components/runner-policy/runner-policy.test.mjs b/components/runner-policy/runner-policy.test.mjs index 6c07088..8c0a717 100644 --- a/components/runner-policy/runner-policy.test.mjs +++ b/components/runner-policy/runner-policy.test.mjs @@ -21,9 +21,8 @@ const REUSABLE_REFERENCE = `${REUSABLE_PATH}@${SHA}`; const FAIL_CLOSED_SEMANTIC_PR_REFERENCE = `melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@${FAIL_CLOSED_SEMANTIC_PR_SHA}`; const HOSTED_REUSABLE_REFERENCE = `melodic-software/ci-workflows/.github/workflows/link-check.yml@${PRODUCTION_SHA}`; const SECRET_REUSABLE_REFERENCE = `melodic-software/ci-workflows/.github/workflows/claude-review.yml@${PRODUCTION_SHA}`; -const PULUMI_DRIFT_REUSABLE_REFERENCE = `melodic-software/ci-workflows/.github/workflows/pulumi-version-drift-check.yml@${PRODUCTION_SHA}`; -const RETIREMENT_ALIGNED_GUARD_SHA = "15aefd8799e8a8b5ffdfcc183dcbfcbf58044481"; -const RETIREMENT_PULUMI_DRIFT_REUSABLE_REFERENCE = `melodic-software/ci-workflows/.github/workflows/pulumi-version-drift-check.yml@${RETIREMENT_ALIGNED_GUARD_SHA}`; +const PULUMI_DRIFT_SHA = "15aefd8799e8a8b5ffdfcc183dcbfcbf58044481"; +const PULUMI_DRIFT_REUSABLE_REFERENCE = `melodic-software/ci-workflows/.github/workflows/pulumi-version-drift-check.yml@${PULUMI_DRIFT_SHA}`; const CANONICAL_POLICY_EXPRESSION = `\${{ vars.CI_RUNNER_POLICY }}`; const ARBITRARY_POLICY_EXPRESSION = `\${{ vars.ARBITRARY_POLICY }}`; const CANONICAL_OBSERVER_SECRET_EXPRESSION = `\${{ secrets.CI_RUNNER_OBSERVER_PRIVATE_KEY }}`; @@ -1277,12 +1276,6 @@ test("production contracts pin reviewed Windows and selectable Linux workflows", allowedSecrets: {}, fixedRunsOn: ["ubuntu-24.04"], }); - assert.deepEqual(contracts[RETIREMENT_PULUMI_DRIFT_REUSABLE_REFERENCE], { - routing: "hosted-only", - allowedInputs: [], - allowedSecrets: {}, - fixedRunsOn: ["ubuntu-24.04"], - }); assert.deepEqual( contracts[`melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@${PRODUCTION_SHA}`], {