Skip to content

resolve: conflicts for #60 (fix/token-permissions-id-20260911) - #62

Merged
hyperpolymath merged 1 commit into
mainfrom
resolve/pr-60-conflicts
Sep 18, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
resolve/pr-60-conflicts

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Supersedes #60 (fix/token-permissions-id-20260911), which is unmergeable as it stands.

What this is

One linear commit on top of current main containing exactly the net effect of
merging main into fix/token-permissions-id-20260911 with every conflict resolved.
Linear and single-commit because the branch rules require linear history and
allow squash merges only.

Original PR: #60

Conflicts and how each was resolved

Path Conflict Resolution
.github/workflows/governance.yml content TAKE_PR_PLUS_NEWLINE
.github/workflows/hypatia-scan.yml content TAKE_PR_PLUS_NEWLINE
.github/workflows/secret-scanner.yml content TAKE_PR_PLUS_NEWLINE
guix.scm modify/delete: deleted in PR, modified in main KEEP_MAIN

Why guix.scm is kept, not deleted

The PR carries fix(ci): remove erroneous squisher-corpus guix.scm placeholder.
That was correct when the branch was cut — the merge-base file was a template
with unexpanded {{PROJECT_NAME}} tokens. main has since replaced it
with a real package definition
(name, version, coreutils bash inputs;
grep -c '{{' now returns 0). Honouring the deletion would destroy a working
file, so main's version is kept.

Why the workflow pins stay at main's

The PR branch pins older hyperpolymath/standards revisions than main:

Pin Date Position
d7c22711 2026-06-26 PR side
81dbf2dd 2026-07-21 main side
d135b05b 2026-06-24 PR side
c65436ee 2026-07-20 main side

Taking the PR side would downgrade the reusable workflows by about a month.
Most of these files conflicted only because main added a trailing newline on
the same last line the PR re-pinned.

Verification

Asserted before push, then re-confirmed by an independent git ls-remote:

  • exactly 1 commit ahead of main, 0 behind
  • no conflict markers anywhere in the tree
  • git merge-tree against main exits 0 — genuinely conflict-free
  • no standards pin in the tree that is unreachable from standards/main
  • guix.scm present wherever main has it

Remote SHA: dea2bfe91eeb

Net effect on main

.github/workflows/codeql.yml               |   2 +-
 .github/workflows/dependabot-automerge.yml |   2 +-
 .github/workflows/rhodibot.yml             |   2 +-
 .github/workflows/scorecard.yml            |   2 +-
 LICENSES/CC-BY-SA-4.0.txt                  | 474 +++++++----------------------
 LICENSES/MPL-2.0.txt                       |   4 +-
 6 files changed, 114 insertions(+), 372 deletions(-)

Replays the net effect of merging main into fix/token-permissions-id-20260911 with conflicts resolved in main's favour:
  * guix.scm kept (main replaced the {{PROJECT_NAME}} placeholder with a real package definition; the PR's deletion was stale)
  * standards reusable-workflow pins kept at main's newer revisions
Linear single commit so it satisfies required_linear_history and squash-only merge.
@coderabbitai

coderabbitai Bot commented Sep 18, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 15c2e916-c7b6-44ec-9154-2f631bb86697

📥 Commits

Reviewing files that changed from the base of the PR and between ba00cc9 and dea2bfe.

📒 Files selected for processing (6)
  • .github/workflows/codeql.yml
  • .github/workflows/dependabot-automerge.yml
  • .github/workflows/rhodibot.yml
  • .github/workflows/scorecard.yml
  • LICENSES/CC-BY-SA-4.0.txt
  • LICENSES/MPL-2.0.txt
 ___________________________________________________________________________________________________________
< A CodeRabbit review a day keeps the merge cop away: https://x.com/ThePrimeagen/status/1986151686839116209 >
 -----------------------------------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

Comment thread LICENSES/MPL-2.0.txt
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at https://mozilla.org/MPL/2.0/.
file, You can obtain one at http://mozilla.org/MPL/2.0/.
@hyperpolymath
hyperpolymath merged commit d36a39c into main Sep 18, 2026
30 of 36 checks passed
@hyperpolymath
hyperpolymath deleted the resolve/pr-60-conflicts branch September 18, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants