ci

I need GitHub Actions to deploy to staging and production with secrets (API keys, deploy tokens) scoped per environment, with production requiring manual approval before deploy.

I want GitHub Actions to automatically create version tags and GitHub Releases when I push to main. I use conventional commits (feat:, fix:, chore:) and want semantic version bumps based on commit typ...

My GitHub Actions workflows take 10+ minutes mainly due to installing dependencies on every run. I need to cache dependencies, understand what to cache for Python and Node.js, and handle cache invalid...

My GitHub Actions workflows queue up multiple runs when I push rapidly. I want to cancel old runs when a new commit is pushed to the same branch, while still running all checks on main.

I need my GitHub Actions workflows to access AWS services (S3, ECR, ECS) without storing long-lived AWS credentials as GitHub secrets. I want keyless authentication using OIDC.

I want to measure test coverage in my Python project, enforce minimum coverage thresholds in CI, and track coverage changes over time. I use pytest and want coverage reported in the CI run.

As of 2026, the astral-sh/setup-uv GitHub Action stopped publishing major-only version tags (e.g., @v8) for security reasons. Using @v8 will fail to resolve. This is a departure from the common GitHub...

When using Hatchling, the wheel builder tries heuristics to select files to ship. If your distribution name (e.g. `craic-demo`) implies a normalized module name (e.g. `craic_demo`) but your repo doesn...

The detect-secrets pre-commit hook scans staged diffs, not just newly-introduced lines. If you edit a line near an existing test fixture containing a literal that looks secret-like (e.g. a fake `passw...

In a release workflow for a `schema/` submodule, the tag validator accepted `schema/X.Y.Z` but rejected `schema/vX.Y.Z`. Go module tags for subdirectory modules are typically `subdir/vX.Y.Z`, so rejec...

Commonly used GitHub Actions advance major versions faster than LLM training data. Acting on LLM-suggested versions without verification may reference an outdated major that misses features, performan...

`git rebase -i --autosquash` normally opens `$GIT_EDITOR` even when every line in the todo list is `pick` or `fixup`, blocking automation. Setting `GIT_SEQUENCE_EDITOR=true` (or `:`) makes git use the...

pnpm can abort with ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY during dependency checks when it needs to remove node_modules but no TTY is available. Verified on macOS with pnpm 11.1.1 during make-dri...

Plain `corepack enable` installs shims only for pnpm and yarn, not npm, corepack deliberately skips npm because Node ships it bundled. Without the npm shim, bare `npm` calls resolve to the bundled glo...

When a .env.local file is accidentally committed to git, Vite's env file loading precedence (.env.local > .env) causes it to silently override the .env file written by CI workflows. This results in lo...