Files
computer-playbook/.github/workflows/cron-security-fuzz.yml
kevinveenbirkenbachandClaude Opus 5.5 b055eece05 feat(ci): keep GitHub-hosted runner labels current through the updater
The workflows pin `runs-on: ubuntu-NN.NN`, so no job moves to a new Ubuntu
release behind our back, but nothing raised the pin either. A sixth job of
`🔄 Update versions` closes that: `utils/update/runner.py` reads the image
table of actions/runner-images, takes the newest x64 Ubuntu label whose
image carries no preview or beta badge, and raises every older bare
`runs-on: ubuntu-NN.NN` to it; arch-suffixed labels stay untouched. The job
opens the change as one PR over `.github/workflows`, so its CI run tests
the new image before it reaches main.

This commit carries the updater's first result: every job now runs on
ubuntu-26.04 (49 `runs-on`).

actionlint 1.7.12, the newest release, does not know `ubuntu-26.04` yet
(rhysd/actionlint#682, fix proposed in rhysd/actionlint#743), so
`.github/actionlint.yaml` declares the label until a release knows it.

act maps each `ubuntu-NN.NN` label the workflows use to the local platform
image, derived from `.github/workflows`, instead of a fixed list that did
not know ubuntu-26.04.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-19 16:56:52 +02:00

47 lines
1.1 KiB
YAML

name: "🧬 Fuzz parsers"
run-name: "${{ github.event_name == 'schedule' && '⏰ ' || '' }}🧬 Fuzz parsers"
on:
schedule:
- cron: "0 4 * * 0"
workflow_dispatch:
concurrency:
group: fuzz-${{ github.repository }}
cancel-in-progress: true
permissions:
contents: read
jobs:
fuzz-yaml-bootstrap:
name: 🧬 Fuzz the bootstrap YAML reader
runs-on: ubuntu-26.04
timeout-minutes: 30
steps:
- name: ⬇️ Checkout
uses: actions/checkout@v7.0.0
- name: 🔧 Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.12"
cache: pip
cache-dependency-path: pyproject.toml
- name: 📦 Install project with the fuzz extra
env:
PYTHON: python3
run: bash scripts/install/python.sh fuzz
- name: 🧬 Compare load_block against yaml.safe_load
run: python3 tests/fuzz/_yaml_bootstrap.py -max_total_time=900
- name: 📤 Upload crash inputs
if: failure()
uses: actions/upload-artifact@v7
with:
name: fuzz-crashes
path: crash-*
retention-days: 30