ci: exempt uipath-runtime from the Safe Chain age gate when building, publish uipath 2.14.4 - #1861
Merged
Merged
Conversation
#1858 added this to lint-packages.yml and test-packages.yml, but the CD path builds through build-package.yml, which never got it. The post-merge run failed: Safe-chain: blocked 1 direct package download request(s) due to minimum package age: uipath_runtime@0.13.1 so uipath 2.14.3 did not publish. Skips only the age gate; malware and every other Safe Chain check still run. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the reusable CD build workflow so Safe Chain does not block downloads of the newly published uipath-runtime package during uv sync on the publish path, preventing post-merge build failures and missed releases.
Changes:
- Adds
SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS: uipath-runtimeat the workflow level inbuild-package.ymlso the env var is present during dependency installation. - Aligns the publish-path workflow behavior with the existing Safe Chain exemptions already present in
lint-packages.ymlandtest-packages.yml.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
2.14.3 never reached PyPI — its CD build died on the Safe Chain age gate that the previous commit fixes. Publishing under a fresh version rather than reusing 2.14.3 so that merging this PR touches packages/uipath/pyproject.toml and therefore triggers CD on its own, instead of needing a manual dispatch. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
eduard-dumitru
changed the title
radu-mocanu
approved these changes
Aug 13, 2026
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
797e03ab— the same three-lineenv:block #1858 added to the lint and test workflows, in the remaining workflow on the publish path47995835—uipath2.14.3 → 2.14.4 (pyproject.toml+uv.lock)2.14.3 was built but never uploaded, so it is retired rather than reused. The bump also means this PR touches
packages/uipath/pyproject.toml, which is what CD'spaths:filter triggers on — without it the merge would not start CD at all.The exemption applies to the age check only; malware scanning and every other Safe Chain check are unaffected, and it cannot narrow the checks for any other package.