Skip to content

audit: re-pin previous_audited_sha to a commit upstream still has - #143

Merged
tzhouam merged 1 commit into
mainfrom
fix/audit-baseline-previous-sha
Sep 10, 2026
Merged

tzhouam merged 1 commit into
mainfrom
fix/audit-baseline-previous-sha

Conversation

@tzhouam

@tzhouam tzhouam commented Sep 10, 2026

Copy link
Copy Markdown
Collaborator

Why

vllm-omni rewrote its main after 2026-09-05. The baseline's previous_audited_sha (1015b1ced, "rebase: align vllm-omni with vLLM d2906cc19586") is no longer reachable from any upstream ref, so the pull_request run of the release drift audit fails at git rev-parse with Needed a single revision on every PR (first seen on #140), before auditing anything.

What

Pin previous_audited_sha to 66bbebd9d, the merge base of the lost commit and current upstream main. audited_sha (44d3ae1) is unchanged and still on main.

Verification

Local run against a fresh upstream clone:

vLLM-Omni release audit: 66bbebd9 -> 44d3ae10 (enforce)
  issues: 0
RESULT: CLEAN

The audit workflow on this PR exercises the same range.

🤖 Generated with Claude Code

https://claude.ai/code/session_018MAFmwP3u5qAMDgHfM6LFi

vllm-omni rewrote its main after 2026-09-05: the audited baseline's
`previous_audited_sha` (1015b1ced, "rebase: align vllm-omni with vLLM
d2906cc19586") is no longer reachable from any upstream ref, so every
pull_request run of the release drift audit dies at `git rev-parse` with
"Needed a single revision" before auditing anything (first seen on #140).

Pin `previous_audited_sha` to 66bbebd9d, the merge base of the lost commit
and current upstream main. `audited_sha` (44d3ae1) is unchanged and still on
main. Verified locally against a fresh upstream clone:

    audit 66bbebd9 -> 44d3ae10, enforce: issues 0, RESULT: CLEAN

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018MAFmwP3u5qAMDgHfM6LFi
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 10, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-10T04:08:49.428654Z ca258dd PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ca258ddbdf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

upstream:
repository: vllm-project/vllm-omni
previous_audited_sha: 1015b1ced073195ed19f0610264dfdf8a8150e6c
previous_audited_sha: 66bbebd9d3ef669b93fd7e39587672b20efc5933

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve checks for sources added after the merge base

If a knowledge page cites a path that existed in the former 1015b1ce snapshot after it diverged from 66bbebd9, but is absent from 44d3ae10, this re-pin makes the enforce audit accept that stale source: _knowledge_source_issues only reports a source when it exists in old_files, and the new merge-base snapshot does not contain those branch-only paths. Preserve the former snapshot's source inventory or strengthen the audit to validate every upstream sources: entry against the target before changing this pin.

AGENTS.md reference: AGENTS.md:L25-L29

Useful? React with 👍 / 👎.

@tzhouam
tzhouam merged commit cf23f57 into main Sep 10, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant