From 26e06411f4e715c2b677c03f477b12b56881136b Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Tue, 10 Feb 2026 10:51:27 -0500 Subject: [PATCH 1/5] CI: harden artifact restore for browserstack workflows --- .github/actions/load/action.yml | 2 +- .github/workflows/run-tests.yml | 6 ++++++ .github/workflows/test.yml | 5 +++++ 3 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/actions/load/action.yml b/.github/actions/load/action.yml index 0102608dbd1..8ee8c8c7db5 100644 --- a/.github/actions/load/action.yml +++ b/.github/actions/load/action.yml @@ -24,7 +24,7 @@ runs: rm -r "$(pwd)"/* - name: Download artifact - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v7 with: path: '${{ runner.temp }}' name: '${{ inputs.name }}' diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 1cc6808f29f..3845a046600 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -71,6 +71,12 @@ on: BROWSERSTACK_ACCESS_KEY: description: "Browserstack access key" + +# codex agent note: explicit permissions help avoid artifact API 403 in called workflows. +permissions: + contents: read + actions: read + jobs: checkout: name: "Define chunks" diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 1209ca2057d..3f22d6ad59f 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,6 +8,11 @@ on: pull_request: types: [opened, synchronize, reopened] +# codex agent note: explicit permissions to allow artifact reads in reusable workflow jobs. +permissions: + contents: read + actions: read + concurrency: group: test-${{ github.head_ref || github.ref }} cancel-in-progress: true From b59c3fcff65e0b0eb4a7a1f96616fb8e6c3f4122 Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Tue, 10 Feb 2026 10:59:45 -0500 Subject: [PATCH 2/5] Update run-tests.yml --- .github/workflows/run-tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 3845a046600..86598789a17 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -72,7 +72,7 @@ on: description: "Browserstack access key" -# codex agent note: explicit permissions help avoid artifact API 403 in called workflows. +# explicit permissions help avoid artifact API 403 in called workflows. permissions: contents: read actions: read From 809d436a8c72e94bab57fe158b16b4d7511bea68 Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Tue, 10 Feb 2026 11:00:02 -0500 Subject: [PATCH 3/5] Fix comment formatting in test.yml --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3f22d6ad59f..f9b846c7291 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,7 +8,7 @@ on: pull_request: types: [opened, synchronize, reopened] -# codex agent note: explicit permissions to allow artifact reads in reusable workflow jobs. +# explicit permissions to allow artifact reads in reusable workflow jobs. permissions: contents: read actions: read From 0e46f6b6d105c4f5ecbc426ac21e962ccf09bb80 Mon Sep 17 00:00:00 2001 From: Demetrio Girardi Date: Tue, 10 Feb 2026 09:26:06 -0800 Subject: [PATCH 4/5] Retry on artifact download failure --- .github/actions/load/action.yml | 10 +++++++--- .github/actions/unzip-artifact/action.yml | 3 +++ .github/workflows/run-tests.yml | 1 - .github/workflows/test.yml | 1 - 4 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.github/actions/load/action.yml b/.github/actions/load/action.yml index 8ee8c8c7db5..e3fc00dc6ae 100644 --- a/.github/actions/load/action.yml +++ b/.github/actions/load/action.yml @@ -24,10 +24,14 @@ runs: rm -r "$(pwd)"/* - name: Download artifact - uses: actions/download-artifact@v7 + uses: Wandalen/wretry.action@v3.8.0 with: - path: '${{ runner.temp }}' - name: '${{ inputs.name }}' + action: actions/download-artifact@v7 + attempt_limit: 2 + attempt_delay: 10000 + with: | + path: '${{ runner.temp }}' + name: '${{ inputs.name }}' - name: 'Untar working directory' shell: bash diff --git a/.github/actions/unzip-artifact/action.yml b/.github/actions/unzip-artifact/action.yml index 672fae7af85..a05c15a00cd 100644 --- a/.github/actions/unzip-artifact/action.yml +++ b/.github/actions/unzip-artifact/action.yml @@ -11,6 +11,9 @@ outputs: runs: using: 'composite' steps: + - name: 'Delay waiting for artifacts to be ready' + shell: bash + run: sleep 10 - name: 'Download artifact' id: download uses: actions/github-script@v8 diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 86598789a17..c9386396ae5 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -72,7 +72,6 @@ on: description: "Browserstack access key" -# explicit permissions help avoid artifact API 403 in called workflows. permissions: contents: read actions: read diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f9b846c7291..ed12de000c8 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,7 +8,6 @@ on: pull_request: types: [opened, synchronize, reopened] -# explicit permissions to allow artifact reads in reusable workflow jobs. permissions: contents: read actions: read From db664e781cce20d54407a5a90db20563ec20f252 Mon Sep 17 00:00:00 2001 From: Demetrio Girardi Date: Tue, 10 Feb 2026 09:30:44 -0800 Subject: [PATCH 5/5] Update gulpfile.js --- gulpfile.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gulpfile.js b/gulpfile.js index e5a4db41884..dbcb3959342 100644 --- a/gulpfile.js +++ b/gulpfile.js @@ -1,6 +1,8 @@ /* eslint-disable no-console */ 'use strict'; +// test change + var _ = require('lodash'); var argv = require('yargs').argv; var gulp = require('gulp');