Skip to content

ci: remove and correct stale comments in workflows and scripts - #186

Merged
PunGrumpy merged 3 commits into
mainfrom
ci/prune-comments
Oct 23, 2026
Merged

PunGrumpy merged 3 commits into
mainfrom
ci/prune-comments

Conversation

@PunGrumpy

Copy link
Copy Markdown
Owner

Description

The comment audit for the workflows, scripts and root configs. This PR removes comments that repeat the YAML or the code and corrects four that are wrong.

Three commits:

  • Workflows: react-doctor.yml loses the vendor scaffold (a banner, comments that restate its triggers and concurrency group, and a commented-out with: block of setup advice). dependabot.yml said the action references are SHA-pinned, but 29 of the 43 uses: lines in .github/workflows pin a tag. release.yml and action-tag.yml each restated permissions: {} in prose.
  • Scripts: two comments that repeat a function or constant name.
  • Corrections:
    • oxlint.config.ts and oxfmt.config.ts called every CLI fixture deliberately malformed. Most are valid projects, so the comment now says some are.
    • release.yml explained !cancelled() with a kit push earlier in the job. The publish job has had none since kit-push.yml took it over.
    • generate-rules-doc.ts pointed at a note in apps/web/lib/score.ts about regex named groups and an ES2017 target. That note is about client components and core's barrel import.

Kept: the policy comments (the Action's two tag tiers, why paths: is narrow, the read-only smoke token, the Changesets flow, fetch-depth: 0).

Left alone on purpose:

  • action.yml and scripts/render-github-action-comment.mjs. Any change to either cuts an Action release and moves v1, so their two stale comments wait for the next real change.
  • kits/docker-doctor/spec.yaml, which would need a kit changeset and release.

Related Issues

N/A. Found by a comment audit of the repository.

Checklist

  • I've reviewed my code
  • I've written tests
  • I've generated a changeset file, if this changes a published package
  • I've updated the docs, if necessary

Screenshots (if applicable)

N/A

Additional Notes

  • Comments only, applied from a manifest of exact comment blocks and checked to change nothing else.
  • Counts unchanged: core 465, CLI 101, scripts 43. ultracite check, typecheck and the generated docs are clean.
  • No changeset: nothing here ships in @docker-doctor/cli.

@vercel

vercel Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docker-doctor Ready Ready Preview Oct 23, 2026 2:27am UTC

@PunGrumpy PunGrumpy added the area: ci Internal CI and release workflows label Oct 23, 2026
@changeset-bot

changeset-bot Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: f27677a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 35 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 7afb6800-46a6-4ca2-9a5b-ff04d345b3a9
📥 Commits

Reviewing files that changed from the base of the PR and between 229abf4 and f27677a.

📒 Files selected for processing: 9
  • .github/dependabot.yml
  • .github/workflows/action-tag.yml
  • .github/workflows/react-doctor.yml
  • .github/workflows/release.yml
  • oxfmt.config.ts
  • oxlint.config.ts
  • scripts/generate-rules-doc.ts
  • scripts/rule-page-content.ts
  • scripts/sync-kit-spec.ts
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

The latest Docker Doctor scan for this pull request. Learn more about Docker Doctor.

File Status Issues Updated
Dockerfile Error 1 error, 2 info Oct 23, 2026 2:26am UTC

Score: 84 / 100 · Good

3 issues

Dockerfile

  • error Dockerfile:2 Potential secret found in ENV: 'DB_PASSWORD'. no-secrets-in-env
  • info Dockerfile:1 No HEALTHCHECK instruction found. require-healthcheck
  • info Dockerfile:1 No LABEL metadata was found in this Dockerfile. require-labels

Scanned by Docker Doctor for commit f27677a.

@pkg-pr-new

pkg-pr-new Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@docker-doctor/cli@186

commit: f27677a

react-doctor.yml still carried the vendor's scaffold: a banner, comments
that restate the triggers and the concurrency group, and a commented-out
`with:` block with setup advice. dependabot.yml said the action
references are SHA-pinned, but 29 of the 43 in .github/workflows pin a
tag. release.yml and action-tag.yml each restated `permissions: {}` in
prose.
sync-kit-spec.ts explained isJsonObject in words its name and the next
function already say. rule-page-content.ts labeled its shared examples
the same way.
- oxlint.config.ts and oxfmt.config.ts called the CLI test fixtures
  deliberately malformed. Most of them are valid projects, and only some
  are malformed.
- release.yml explained `!cancelled()` with a kit push earlier in the
  job. The publish job has had no kit push since kit-push.yml took it
  over.
- generate-rules-doc.ts pointed at a note in apps/web/lib/score.ts about
  regex named groups and an ES2017 target. That note explains why client
  components cannot import core's barrel, which has nothing to do with
  this script.
@PunGrumpy
PunGrumpy merged commit 90e28c9 into main Oct 23, 2026
19 of 20 checks passed
@PunGrumpy
PunGrumpy deleted the ci/prune-comments branch October 23, 2026 02:28

This branch was successfully deployed

1 active deployment
Preview — f27677a5 Deployed Oct 23, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: ci Internal CI and release workflows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant