Skip to content

feat: meter Pinecone query read units by family and caller #13653

feat: meter Pinecone query read units by family and caller

feat: meter Pinecone query read units by family and caller #13653

name: Runtime Image Contracts
on:
# Nightly calls run these same jobs against one immutable main snapshot.
# The authenticated image-smoke lane was removed 2026-11-01: its
# GCP_CREDENTIALS existed only in the `development` environment, which no
# job here ever bound, so the authenticated path could never resolve and
# had silently skipped since <=2026-09-23. image-smoke remains as a
# dispatch-only retirement notice so the nightly reusable-job contract
# (job set, runner) stays stable.
workflow_call:
inputs:
nightly_main_sha:
description: Main SHA pinned by the unfiltered nightly caller
type: string
required: false
default: ''
pull_request:
paths:
- 'backend/**'
- 'plugins/**'
- 'Makefile'
- '.github/workflows/runtime_image_contracts.yml'
- '.github/workflows/desktop_backend_auto_dev.yml'
- '.github/workflows/gcp_*.yml'
workflow_dispatch:
permissions:
contents: read
env:
# Abort a git HTTP transfer that stays under 1 KB/s for 60 s, so actions/checkout
# retries instead of hanging 7-10 min until the TCP reset (#22890).
GIT_HTTP_LOW_SPEED_LIMIT: "1000"
GIT_HTTP_LOW_SPEED_TIME: "60"
jobs:
source-closure:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
with:
ref: ${{ inputs.nightly_main_sha || github.sha }}
- name: Check final-image first-party source closures
run: make runtime-image-source-closure
image-smoke:
if: inputs.nightly_main_sha == '' && github.event_name == 'workflow_dispatch'
runs-on: ubuntu-latest
steps:
- name: Report the retired image-smoke lane
run: >-
echo "The authenticated image-smoke lane was removed 2026-11-01; its
GCP_CREDENTIALS existed only in the development environment, which
this workflow never bound. source-closure remains the gate."