Skip to content

DEVEX-1773: mute common-bump Slack alert until CI notification routing lands - #167

Closed
pdodgen-revparts wants to merge 1 commit into
mainfrom
DEVEX-1773-mute-common-bump-slack-alert
Closed

DEVEX-1773: mute common-bump Slack alert until CI notification routing lands#167
pdodgen-revparts wants to merge 1 commit into
mainfrom
DEVEX-1773-mute-common-bump-slack-alert

Conversation

@pdodgen-revparts

Copy link
Copy Markdown
Contributor

Description

Mutes the ⚠️ Common could not be automatically updated on … Slack alert emitted by php-common-bump.yaml's freeze-detection step.

  • Adds a slack_alerts workflow_call input, type: boolean, defaulting to false
  • Gates the existing Post freeze alert to Slack step on it

Freeze detection itself is untouched. The step still writes the composer why-not diagnostic to the job summary, still emits ::error::, and still exit 1. Only the Slack POST is suppressed. Callers keep the signal via the red check and GitHub email/mobile — the same fallback path the workflow already documents for callers that never passed a webhook in the first place.

Jira Issue: https://revolutionparts.atlassian.net/browse/DEVEX-1773

Background

#releases is doing double duty: high-signal deploy notifications alongside high-volume CI churn. The common-freeze alert (added in #161, wording updated in #163) is one of the three noisy sources DEVEX-1773 identifies, and right now it's drowning the deploy pings it sits next to.

DEVEX-1773's actual fix routes these to the owning team's channel via a CODEOWNERS lookup and a resolve-notify-channel composite action. That's blocked on two prereqs that aren't done: provisioning the encodium-ci-notifier Slack app with chat:write, and landing the SLACK_CI_NOTIFIER_TOKEN org secret. It's also sequenced behind DEVEX-1772.

Rather than leave the channel noisy while those clear, this mutes the alert in the interim.

Why an input rather than deleting the step or hardcoding the condition:

  • No caller churn. The default does the muting centrally. Repos currently passing secrets.slack_webhook_url keep passing it; it just becomes a no-op. Nothing downstream needs to change.
  • Reversible in one line. Flip the default back to true.
  • Per-caller escape hatch. A team that actively wants the alert can pass slack_alerts: true without waiting on DEVEX-1773.
  • The step is left in place rather than deleted because DEVEX-1773 rewrites it wholesale (chat.postMessage + the composite). The input is explicitly documented as something to remove at that point, not re-default, so it doesn't calcify into a permanent knob.

Scope note

DEVEX-1773 names three noisy sources. This PR covers only the common-bump alert — the one currently firing. nightly-common-update.yaml lives in each participating repo and needs a fleet sweep; notify-ci-failure.yaml is no longer in this repo. Both are left for DEVEX-1773 proper.

Testing Information

Static verification only — this is a workflow-call gate with no in-repo caller to exercise, and triggering it for real would require a genuine peer-constraint block on a participating repo.

  • actionlint on the modified file reports 2 SC2086 findings; actionlint on main's version of the same file reports the same 2, in the pre-existing Commit Common Bump run block. No new findings introduced.

  • YAML parses cleanly; slack_alerts resolves to a real boolean false (not the string "false"), so && inputs.slack_alerts short-circuits correctly rather than being truthy.

  • Diff excluding comments is 6 lines: the 5-line input definition and the one-line if: change. Confirmed no change to the detection block's exit 1, ::error::, or job-summary writes.

  • Resolved gate condition:

    failure() && inputs.slack_alerts && steps.freeze-check.outputs.frozen == 'true' && env.SLACK_WEBHOOK_URL != ''
    

Verifying after merge

Next time a participating repo hits a real freeze, expect: red check, ::error:: in the log, why-not diagnostic in the job summary, and no #releases post.

The "Common could not be automatically updated" alert posts into
#releases, where its volume is drowning the deploy notifications it sits
alongside. DEVEX-1773 routes these to the owning team's channel via a
CODEOWNERS lookup, but it's gated on provisioning the encodium-ci-notifier
Slack app and its org secret, which isn't done yet.

Adds a slack_alerts input, defaulting to false, and gates the Slack post
step on it. Freeze detection is untouched: the step still writes the
composer why-not diagnostic to the job summary, still emits ::error::, and
still exits 1. Callers keep the signal through the red check and GH
email/mobile - the same fallback the workflow already documents for
callers that never passed a webhook.

No caller changes required; repos passing slack_webhook_url keep passing
it harmlessly. Restore by flipping the default, or opt in per-caller with
slack_alerts: true. When DEVEX-1773 lands it replaces this step wholesale
and the input should be removed rather than re-defaulted.
@cursor

cursor Bot commented Aug 26, 2026

Copy link
Copy Markdown

PR Summary

Low Risk
CI workflow-only change that gates an optional Slack notification; freeze detection and failure behavior are unchanged.

Overview
Temporarily stops posting the “Common could not be automatically updated” Slack message from the reusable php-common-bump workflow while DEVEX-1773 adds proper channel routing.

A new slack_alerts workflow_call input defaults to false and is added to the Post freeze alert to Slack step condition, so webhook secrets can stay wired but no longer hit #releases by default. Callers can opt back in with slack_alerts: true.

Silent-freeze detection is unchanged: the job still fails, writes the composer why-not summary, and emits ::error::; only the Slack POST is suppressed.

Reviewed by Cursor Bugbot for commit 15c226c. Bugbot is set up for automated code reviews on this repo. Configure here.

@pdodgen-revparts

Copy link
Copy Markdown
Contributor Author

Closing — wrong repo. encodium/.github is deprecated for reusable workflows; the live copy of php-common-bump.yaml is in encodium/actions (32 callers pin encodium/actions/.github/workflows/php-common-bump.yaml@main, zero real callers reference the copy here). This change would have been inert.

Reopened against the right repo: encodium/actions#58

@pdodgen-revparts
pdodgen-revparts deleted the DEVEX-1773-mute-common-bump-slack-alert branch August 26, 2026 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant