ci(auto-merge): correct the reason this repo passes a PAT - #49
Merged
Conversation
The comment added a few hours ago says GITHUB_TOKEN cannot merge a PR that touches .github/workflows. That is contradicted by this fleet's own history: github-actions[bot] merged datacat#253 and ai-kit#42 today, and both change a workflow file. I asserted it from the reusable workflow's docstring without checking, then found the counter-evidence while looking for something else. Two stalled PRs were offered as proof and neither survives either. ai-kit#11 opened 2026-08-29 and this repo's sweep was not added until 2026-09-04, so for most of that PR's life nothing was sweeping at all. aoz-housing#122 is still unexplained — I merged it before diagnosing it, which destroyed the evidence. The THROUGHPUT reason is unaffected and is why the line stays. A dispatch made with GITHUB_TOKEN triggers no workflows — the same rule the deploy reconciler exists for — so after a merge the re-armed CI run's completion fires no workflow_run and nothing wakes the sweep for the next PR. It waits for the cron, which GitHub throttles: fleetcrown's sweeps land 50-65 minutes apart against a */10 schedule. A PAT-created dispatch does emit workflow_run. The wrong claim is recorded in the file rather than quietly deleted, so the next reader does not re-derive it from the same docstring I did. No behaviour change: an undefined secret still resolves to empty and the reusable workflow still falls back to github.token. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UvjGNAS9CMfEGNW26tUR4P
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The comment added a few hours ago claims
GITHUB_TOKENcannot merge a PR that touches.github/workflows. That is contradicted by this fleet's own history.github-actions[bot]mergeddatacat#253andai-kit#42today. Both change a workflow file.I asserted it from the reusable workflow's docstring without checking, then found the counter-evidence while looking for something else.
The two "stalled PRs" I cited don't survive either
ai-kit#11aoz-housing#122Why the line stays
The throughput reason is unaffected, and it's the one that matters.
A dispatch made with
GITHUB_TOKENtriggers no workflows — the same rule the deploy reconciler exists for. So after the sweep merges a PR and re-arms CI, that CI run's completion fires noworkflow_run, and nothing wakes the sweep to take the next PR. It waits for the cron, which GitHub throttles regardless of what the cron says: fleetcrown's sweeps land 50–65 minutes apart against a*/10schedule. A PAT-created dispatch does emitworkflow_run, so the queue drains at CI speed.The wrong claim is recorded in the file rather than quietly deleted, so the next reader doesn't re-derive it from the same docstring I did.
No behaviour change: an undefined secret still resolves to empty, and the reusable workflow still falls back to
github.token.🤖 Generated with Claude Code
https://claude.ai/code/session_01UvjGNAS9CMfEGNW26tUR4P