Skip to content

Add CI detection for grafted commits and large commits before lock file rebuild #10370

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Copilot wants to merge 2 commits into from
Closed

Add CI detection for grafted commits and large commits before lock file rebuild #10370

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7f61c1d
Initial plan
Copilot Jan 16, 2026
ab2ca08
Add CI protection against grafted commits and large commits
Copilot Jan 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 34 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -300,6 +300,40 @@ jobs:
- name: Build code
run: make build

- name: Detect grafted commits
run: |
if git log -1 --oneline | grep -q '(grafted)'; then
echo "❌ ERROR: Grafted commit detected" >> $GITHUB_STEP_SUMMARY
echo "This indicates shallow history or history manipulation" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "Commit details:" >> $GITHUB_STEP_SUMMARY
git log -1 --oneline >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "⚠️ Grafted commits can cause 'make recompile' to fail" >> $GITHUB_STEP_SUMMARY
echo "Please revert this commit and re-apply changes cleanly" >> $GITHUB_STEP_SUMMARY
exit 1
fi
echo "✅ No grafted commits detected" >> $GITHUB_STEP_SUMMARY

- name: Check commit size sanity
run: |
FILES_CHANGED=$(git show --stat | tail -1 | grep -oP '\d+(?= files? changed)' || echo "0")
echo "📊 Files changed in last commit: $FILES_CHANGED" >> $GITHUB_STEP_SUMMARY

if [ "$FILES_CHANGED" -gt 100 ]; then
echo "⚠️ WARNING: Large commit detected ($FILES_CHANGED files)" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "Please verify this matches the PR description:" >> $GITHUB_STEP_SUMMARY
git log -1 --pretty=format:"%s" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "If this commit accidentally includes lock files or other unintended changes," >> $GITHUB_STEP_SUMMARY
echo "please revert and re-apply changes cleanly using 'git restore'." >> $GITHUB_STEP_SUMMARY
# This is a warning, not an error - don't fail the build
else
echo "✅ Commit size looks reasonable ($FILES_CHANGED files)" >> $GITHUB_STEP_SUMMARY
fi

- name: Rebuild lock files
run: make recompile
env:
Expand Down