Skip to content

CI: run the HTTPS integration suite on pull requests that touch it - #73

Merged
seanwevans merged 1 commit into
mainfrom
claude/pg-git-upgrade-deps-rk0oxk-ci-https-tests
Sep 3, 2026
Merged

seanwevans merged 1 commit into
mainfrom
claude/pg-git-upgrade-deps-rk0oxk-ci-https-tests

Conversation

@seanwevans

Copy link
Copy Markdown
Owner

The problem

test-slow-suites is gated on schedule or workflow_dispatch, and the schedule is weekly (0 6 * * 0). So https_fetch_test.sql — the only coverage for the part of the project with the messiest failure modes (TLS verification, read timeouts, credential decryption) — effectively ran once a week. A broken change could sit on main for six days before anything noticed.

The fix

Add detect-https-changes + test-https-integration: on a pull request that changes an HTTPS file, run just the integration suite.

The performance suite is deliberately left on the weekly schedule. It is slow and sensitive to runner load, so running it per-PR would buy noise rather than signal.

Notes for review

  • Detection matches https in the basename rather than an explicit path list. Every HTTPS-related path in the repo has it (sql/functions/014-https.sql, test/sql/https_fetch_test.sql), and nothing else does, so the filter keeps working if that SQL is renamed or moved — which is exactly what #71 does.
  • No third-party action: detection is a git diff --name-only between pull_request.base.sha and the merge commit, with fetch-depth: 0.
  • For non-pull_request events detect-https-changes is skipped, so test-https-integration is skipped too — the weekly job is unaffected.
  • The docker compose run invocation mirrors the existing test-slow-suites step, so it inherits the same depends_on: service_healthy wait.

🤖 Generated with Claude Code

https://claude.ai/code/session_017nq3xZcPqSTKtskyP2DzkK


Generated by Claude Code

test-slow-suites is gated on schedule or workflow_dispatch, and the
schedule is weekly, so https_fetch_test.sql -- the only coverage for the
part of the project with the messiest failure modes (TLS verification,
read timeouts, credential decryption) -- effectively ran once a week. A
broken change could sit on main for six days before anything noticed.

Add a job that runs just the integration suite on pull requests that
change an HTTPS file. The performance suite is deliberately left on the
weekly schedule: it is slow and sensitive to runner load, so running it
per-PR would buy noise rather than signal.

File detection matches "https" in the basename rather than an explicit
path list, so it keeps working if the HTTPS SQL is renamed or moved.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nq3xZcPqSTKtskyP2DzkK
@seanwevans
seanwevans merged commit cb8601d into main Sep 3, 2026
4 checks passed
@seanwevans
seanwevans deleted the claude/pg-git-upgrade-deps-rk0oxk-ci-https-tests branch September 3, 2026 23:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants