From 09d6fa0a2d4fd2fa4a2786ecb1483757476fac3b Mon Sep 17 00:00:00 2001 From: jehrr <79864894+jehrr@users.noreply.github.com> Date: Fri, 16 Oct 2026 11:35:14 +0000 Subject: [PATCH] Pass the canary's paid secrets only on a weekly run; the daily run stays free Paid canary paths (proxy, Scraping Browser, captcha) run weekly on Mondays; free paths keep their daily schedule. A manual dispatch runs everything. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01CKsd7q25N19WzUZjrAdzx8 --- .github/workflows/canary.yml | 6 +++++- CHANGELOG.md | 6 ++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml index e6a889b..498ad02 100644 --- a/.github/workflows/canary.yml +++ b/.github/workflows/canary.yml @@ -27,6 +27,10 @@ on: schedule: # 05:40 UTC. Not on the hour: every scheduled workflow fires at :00. - cron: "40 5 * * *" + # Mondays: the same jobs, WITH the paid secrets (proxy, Scraping Browser, + # captcha key). On the daily run above those secrets read as empty, so + # it takes the free no-secret route and bills nothing. + - cron: "40 5 * * 1" workflow_dispatch: permissions: @@ -69,7 +73,7 @@ jobs: pages: 1 floor: 1 env: - HACKERNEWS_PROXY: ${{ secrets.HACKERNEWS_PROXY }} + HACKERNEWS_PROXY: ${{ (github.event_name != 'schedule' || github.event.schedule == '40 5 * * 1') && secrets.HACKERNEWS_PROXY || '' }} steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v5 diff --git a/CHANGELOG.md b/CHANGELOG.md index d757b20..2e5d2c4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,12 @@ said so at the top of its release notes. ## [Unreleased] +### Changed + +- CI only: the canary's optional paid secret `HACKERNEWS_PROXY` now reaches it only on a new weekly + run (Mondays 05:40 UTC) and on a manual dispatch. The daily run keeps its + schedule and takes the free route without them, so it bills nothing. + ## [0.1.0] — 2026-10-15 > **A page that says it has rows and parses to none now exits 5 (or 6), not