From cd43009672d233dfc6fb30b01608d6eb7d54d0b3 Mon Sep 17 00:00:00 2001 From: Steve Dudenhoeffer Date: Wed, 15 Jul 2026 23:34:54 -0400 Subject: [PATCH] ci: pin gadfly reusable @8eb0265 + thread dispatch pr_number [skip ci] Gitea >= 1.27 does not propagate workflow_dispatch inputs into a called workflow's github.event; the stub must pass pr_number as an explicit workflow_call input or manual dispatches die at 'PR required'. Mirrors gadfly#24. Co-Authored-By: Claude Fable 5 --- .gitea/workflows/adversarial-review.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index 496816d..cd2cd1a 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -41,7 +41,7 @@ jobs: # Tracks gadfly's v1 release tag — a curated pointer re-moved on each release # (unlike @main, which moves on every push). Central swarm tuning propagates # here automatically; the tradeoff vs a full sha pin is that v1 is mutable. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@3664ce858da1e7ba949baf675f7f3b249b8e7998 + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@8eb0265e759e8c37ade8eaa8cb4b3aa9c7a5a169 # Least privilege: forward only the review secrets (not `secrets: inherit`, # which would expose every repo secret). GITEA_TOKEN is the automatic token. secrets: @@ -52,3 +52,6 @@ jobs: with: # Consumer-specific allow-list; everything else is inherited. allowed_users: "steve,fizi,dazed" + # Gitea >= 1.27 does not propagate dispatch inputs into a called workflow's + # github.event — thread the PR number explicitly (empty on non-dispatch events). + pr_number: ${{ github.event.inputs.pr_number }}