Skip to content

GH#34766: docs(cloudron): adopt upstream registry builder guidance - #34769

Merged
alex-solovyev merged 1 commit into
mainfrom
feature/auto-20261015-165246-gh34766
Oct 15, 2026
Merged

alex-solovyev merged 1 commit into
mainfrom
feature/auto-20261015-165246-gh34766

Conversation

@vladimirdulov

@vladimirdulov vladimirdulov commented Oct 15, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Resolves #34766.

  • Review official Cloudron skills through 74e455bd03f53ac2f5f245b4acb96f0b330b4517 against previous watch revision fcea39616e6e0960fc2ed2fc4027d190b8a5ef7d.
  • Replace removed cloudron build recommendations with cloudron builder login/build/reset, document explicit version-image selection, and align install/update guidance.
  • Adopt PHP/Apache, Python-sidecar and mongosh runtime notes without widening the reviewed image allowlist, changing pinned image digests, weakening publication authorization, or changing keyless provenance requirements. Upstream Python child images require a separate policy review before helper-managed use.
  • The upstream server-ops skill itself did not change; its local install/update integration notes now match the new builder workflow.

Files and reference pattern

Only the three issue-scoped imported skills under .agents/tools/deployment/ change: cloudron-app-packaging-skill.md, cloudron-app-publishing-skill.md, and cloudron-server-ops-skill.md. Reference: official docs/skills compare for the revisions above. Existing base-image policy from #34077 is retained.

Runtime Testing

Risk: low. Testing level: self-assessed (documentation only).

  • git diff --check passed.
  • Pre-commit quality validation passed.
  • Pre-push repository verification ran bun run typecheck successfully; pre-push secret and quality checks passed.
  • Official GitLab comparison retrieved successfully; prompt-guard scan reported CLEAN. No Cloudron CLI is available on this runner, so no live builds, installs or publication were performed. Command guidance is sourced from the reviewed official upstream delta, not guessed legacy flag equivalence.
  • .agents/scripts/linters-local.sh --changed passed (exit 0): whitespace, secretlint, file-size regression and applicable policy checks. Existing oversized-file and secret-policy warnings are unchanged from the merge base, not introduced here.
  • Markdownlint is unavailable on this runner; .github/workflows/code-quality.yml job markdownlint (Markdown Lint) provides the changed-line lint gate. No dependency installation was attempted.
  • Direct low-risk diff review found no in-scope defects. Review bundle: aidevops.review-evidence/v1, SHA-256 9b2d8aa575c141487b4ef727577c9f8e9cd57d5ae73696b8e9769b019effbcc1, exact head fe3729817467740e3bff11aca709e00e59c0ca46.
  • Review acknowledgment is recorded in all three imported skills. Run upstream-watch-helper.sh ack cloudron-official-skills after adoption merges; the helper also closes its matching issue, so it is intentionally not run against an unmerged adoption PR.

aidevops.sh v3.39.32 plugin for OpenCode v1.19.0 with gpt-6.1-sol spent 5m and 92,769 tokens on this as a headless worker.

@vladimirdulov vladimirdulov added the origin:worker Created by headless/pulse worker session label Oct 15, 2026
@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 1
🚫 Excluded labels (none allowed): 1
  • no-review

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: marcusquinn/aidevops/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2f1f0c5d-4cf8-4599-b49d-e61e81c2427e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

Markdown Lint (changed-line scoped)

No new violations in changed lines (0 pre-existing in touched files — ignored).

Metric Base (f58464b) Head (fe37298)
Total in touched files — 0
New (in changed lines) — 0

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@vladimirdulov

vladimirdulov commented Oct 15, 2026 •

Copy link
Copy Markdown
Collaborator Author

Merge Summary

  • Issue: upstream: cloudron-official-skills update -> 74e455bd03f5 (review adoption) #34766
  • What: Reviewed official Cloudron skills through 74e455bd03f5; migrated removed cloudron build instructions to registry cloudron builder, documented version-image selection and runtime caveats, and aligned server-ops integration notes.
  • Files: .agents/tools/deployment/cloudron-app-packaging-skill.md, .agents/tools/deployment/cloudron-app-publishing-skill.md, .agents/tools/deployment/cloudron-server-ops-skill.md.
  • Testing: Low-risk documentation, self-assessed. Changed-file local linters exit 0; pre-commit and pre-push checks passed, including bun run typecheck. Upstream comparison prompt scan CLEAN. Markdownlint unavailable locally; existing Code Quality / Markdown Lint CI job covers it. Cloudron CLI unavailable; no live builds or publication performed.
  • Key decisions: Keep exact reviewed base-image pins and allowlist, publication authority and keyless provenance controls. Do not enable upstream Python child images without a policy review. No helper/CLI implementation changes. Existing file-size and secret-policy warnings match baseline. Review bundle digest 9b2d8aa575c141487b4ef727577c9f8e9cd57d5ae73696b8e9769b019effbcc1 binds head fe3729817467740e3bff11aca709e00e59c0ca46.
  • Post-merge: Run upstream-watch-helper.sh ack cloudron-official-skills to update runner-local watch state. The imported skills durably record the reviewed revision; acknowledgment helper is deferred until merge because it also closes the matching issue.

aidevops.sh v3.39.32 plugin for OpenCode v1.19.0 with gpt-6.1-sol spent 5m and 92,769 tokens on this as a headless worker.


Merged via PR #34769 to main.
Merged by deterministic merge pass (pulse-wrapper.sh).

@vladimirdulov
vladimirdulov marked this pull request as ready for review October 15, 2026 14:59
@github-actions

Copy link
Copy Markdown
Contributor

Shell Function Complexity Regression Gate

✅ No regression — no new function(s) >100 lines.

Metric Base (f58464b) Head (fe37298)
Total function(s) >100 lines 0 0

@github-actions

Copy link
Copy Markdown
Contributor

Qlty Smell Regression Gate

✅ No change — smell count unchanged.

Metric Base (f58464b) Head (fe37298) Delta
Total smells 65 65 +0

@github-actions

Copy link
Copy Markdown
Contributor

Shell Nesting Depth Regression Gate

✅ No regression — no new file(s) with nesting depth >8.

Metric Base (f58464b) Head (fe37298)
Total file(s) with nesting depth >8 0 0

@github-actions

Copy link
Copy Markdown
Contributor

File Size Regression Gate

✅ No regression — no new non-README Markdown file(s) >1000 lines at root / >500 elsewhere.

Metric Base (f58464b) Head (fe37298)
Total non-README Markdown file(s) >1000 lines at root / >500 elsewhere 0 0

@github-actions

Copy link
Copy Markdown
Contributor

🔍 Code Quality Report

�[0;35m[MONITOR]�[0m Code Review Monitoring Report

SonarCloud: 0 bugs, 0 vulnerabilities, 1 code smells

Thu Oct 15 15:00:06 UTC 2026: Code review monitoring started
Thu Oct 15 15:00:06 UTC 2026: SonarCloud - Bugs: 0, Vulnerabilities: 0, Code Smells: 1
Thu Oct 15 15:02:33 UTC 2026: Codacy analysis completed - no issues

📈 Current Quality Metrics

  • BUGS: 0
  • CODE SMELLS: 1
  • VULNERABILITIES: 0

Generated on: Thu Oct 15 15:02:33 UTC 2026


Generated by AI DevOps Framework Code Review Monitoring

@alex-solovyev alex-solovyev left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved by pulse runner @alex-solovyev — author @vladimirdulov confirmed collaborator, pre-merge gates passed.


aidevops.sh v3.39.32 automated scan.

@alex-solovyev
alex-solovyev merged commit b9f77e1 into main Oct 15, 2026
66 of 68 checks passed
@alex-solovyev
alex-solovyev deleted the feature/auto-20261015-165246-gh34766 branch October 15, 2026 15:09
@github-actions github-actions Bot added the status:done Task is complete label Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

origin:worker Created by headless/pulse worker session status:done Task is complete

Projects

None yet

Development

Successfully merging this pull request may close these issues.

upstream: cloudron-official-skills update -> 74e455bd03f5 (review adoption)

2 participants