Fix credential ordering in sync-branches workflow#26
Merged
Conversation
…kflow Move the "Configure Git credentials" step (user.name/user.email + authenticated origin URL) before the merge step in the compiled workflow so that merge commits have a valid identity and pushes use an authenticated remote. Also add a credential setup pre-step in the source .md file and tests to guard against future ordering regressions. Agent-Logs-Url: https://github.com/githubnext/autoloop/sessions/10022818-e9ec-4796-841a-d439e309e4b3 Co-authored-by: mrjf <180956+mrjf@users.noreply.github.com>
Agent-Logs-Url: https://github.com/githubnext/autoloop/sessions/10022818-e9ec-4796-841a-d439e309e4b3 Co-authored-by: mrjf <180956+mrjf@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Fix git credentials setup before merge/push step
Fix credential ordering in sync-branches workflow
Apr 4, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The compiled sync-branches workflow runs the merge/push step before Git identity and authenticated remote are configured, causing merge commits to fail (missing
user.name/user.email) and pushes to fail (unauthenticated remote).Changes
workflows/sync-branches.md— Added a "Set up Git identity and authentication" pre-step before the merge step. Thegh-awcompiler places its framework "Configure Git credentials" step after all user pre-steps, so the source alone can't fix ordering in the compiled output..github/workflows/sync-branches.lock.yml— Reordered the framework's "Configure Git credentials" step to run before the merge step. Manual edit required because the compiler always emits framework steps after user steps. Also preservedcontents: writepermission (compiler was downgrading toread-all).tests/test_scheduling.py— AddedTestSyncBranchesCredentialOrderingwith 3 tests guarding step ordering in both source.mdand compiled.lock.yml.Compiler note
The
gh-awcompiler converts JSEOF heredocs to Python, drops bash preamble outside the heredoc, and inserts framework steps in a fixed position after user pre-steps. This means credential setup added to the source.mdis not sufficient on its own — the lock file requires a manual ordering fix until the compiler supports step-ordering hints.