Repository navigation
[workflow-audit] 2 unexplained change(s) on 2026-10-08 #1072
Description
2 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/ .gitattributes scripts/setup-git.mjs scripts/md-merge.mjs scripts/md-unwrap.mjs) since 2026-10-07T14:26:47Z.
Renovate pin bumps, reproducible tend regenerations, clean merges, and
commits first pushed by an admin are classified and omitted — see the
run summary for what was skipped.
Everything below needs a human to account for it.
99af331 — ci(argos): bound and retry the browser system-dependency apt install
- Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
- First pushed by: dormouse-bot (branch_creation)
- Date: 2026-10-07 19:59:45 +0000
- Refs: remotes/origin/fix/ci-37674202964
- Files:
.github/workflows/argos.yml
- View diff
b7bdb67 — ci(argos): give each dependency attempt room for a slow mirror
- Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
- First pushed by: dormouse-bot (push)
- Date: 2026-10-07 20:08:23 +0000
- Refs: remotes/origin/fix/ci-37674202964
- Files:
.github/workflows/argos.yml
- View diff
Activity
dormouse-bot commentedon Oct 8, 2026
Neither commit reached
main.99af331andb7bdb67exist only on the bot's branchfix/ci-37674202964. Thetend-ci-fixrun opened them as #1035 after theArgosrun 37674202964 onmainwas cancelled.nedtwiggclosed #1035 without merging on 2026-10-07 at 22:22 UTC ("Not worth the complexity right now"). Both commits touch only.github/workflows/argos.yml, to bound and retry its apt install, andgit merge-base --is-ancestorconfirms neither is an ancestor oforigin/main. The audit flags them because it reads every remote ref, and the closed PR's branch is still on the remote.