Home Search Pricing Get inErrata About

Sign in Sign up

Graph/github-merge-workflow-drift

AntiPattern

GitHub Merge Workflow Drift

github-merge-workflow-drift

Branch refs and merge conditions get mis-targeted by the CI workflow and branch-protection/merge-queue hooks, so merges apply to the wrong base or fail silently. Stale checkouts, prefix-gating, and nested JSON flags compound conflicts and blocked pushes.

Node Details

Public graph metadata

Updated7/9/2026

Connections

30 linked nodes

MATCHESSolution

passing health checks but its Bash cutover and post-cutover verification scripts exited early or misreported failure — Bash cutover and post-cutover verification scripts. Tension: post-increment arithmetic such as `((elapsed++))` / `((PASS_COUNT++))`, brittle command-output parsing for npm preflight status, and exact JSON-shape assumptions for RPC verification.

MATCHESSolution

Use Drizzle migrate:safe (baseline + drift heal + drizzle-kit migrate) instead of raw psql loop in CI deploy — CI deploy. Tension: instead of raw psql loop. Outcome: baseline + drift heal + drizzle-kit migrate.

MATCHESSolution

I would probably give up on getting github to work properly, and fix it by just adding a limited number of levels of leading */. — In quick testing, this works to do what you want:. Tension: This is triggered when I push the branch `mjd/try-claude-in-ci-20251216`. Outcome: branches: ["*/ci-*", "*/*/ci-*", "*/*/*/ci-*"].

MATCHESSolution

If you want to run something after a PR is successfully merged into `main`, trigger on a `push` instead — after a PR is successfully merged into `main`. Outcome: Environment protection behaves as expected.

MATCHESSolution

This can apparently be fixed by instead using, though I have not tested it: — Run ad-m/github-push-action@v0.5.0. Tension: The problem was that the workflow declared the safe directory outside of the docker containter. Outcome: I opted to avoid the workaround and use an alternative deployment, official gh-pages deployment.

MATCHESSolution

If you use `git log ${{ github.event.pull_request.head.sha }} -1` instead of using environment variables. Tension: it would break given that it operates on the merge commit. Outcome: But remember that you need to set `fetch-depth`, for example to `0`. Otherwise it won't know the PRs head commit SHA.

MATCHESSolution

GitHub acknowledged it as a GitHub service/runner issue and resolved it. After the service-side fix, queued jobs stopped getting stuck.

MATCHESSolution

this issue also occurs if you use the rulesets feature in github to ensure specific branch name — rulesets feature in github. Tension: you will need to add the prefix in this feature too. Outcome: you will need to add the prefix in this feature too.

MATCHESSolution

For a PR merge. Tension: the jobs are incorrectly running in the feature branch instead of in the release/test-release branch after the merge. Outcome: I had it working using this syntax with specifying the closed condition in the event level.

MATCHESSolution

I've been working on exactly this problem and built BuildBeacon - a privacy-first CI/CD monitoring platform — supports GitHub Actions workflows. Outcome: no API access to your code or sensitive data.

MATCHESSolution

Is it possible to use `gh workflows run "workflow-name" --ref "pr-branch-name"` to trigger a CI that is not yet in the default branch? — `gh workflows run "workflow-name" --ref "pr-branch-name"`. Tension: today I can only trigger workflows that are already in the default branch. Outcome: I had the same problem using curl.

MATCHESSolution

If you modify an existing workflow on a branch, this modified version will not interfere with workflow runs on your main branch or any other feature branches. — The workflows are active in that the workflows are triggered based on github push events of existing and other repos. Tension: If you create a new workflow on a branch, you will not be able to run it until you merge it into the main branch. Outcome: you will need to merge a minimal version of this workflow with the features you need (e.g. trigger types) to the main branch and then keep modifying it on a new branch.

MATCHESSolution

Use a custom GitHub Actions PR check that inspects review authors and team membership via the GitHub API or gh CLI

MATCHESSolution

Or you can simple remove the with part like this — Set up git and fetch all history for all branches and tags. Outcome: uses: actions/checkout@v4.

MATCHESSolution

merge queue. Tension: prevent merging code until it's completely deployed. Outcome: Mergify allows to do this by freezing the queue during the deployment and unfreezing it when you're deployment is done.

MATCHESSolution

If your goal is to create and push the branch to the server you can avoid checking it out. — git branch $releaseBranch $env:commit_sha git checkout $releaseBranch git push origin $releaseBranch. Tension: This would obviously clean your working folder. Outcome: git push origin $($env:commit_sha):refs/heads/$releaseBranch.

MATCHESSolution

I tried to deploy an Angular app to Azure Static Web Apps using GitHub Actions. Tension: the workflow hangs on the "Post Run actions/checkout@v3" step until it eventually times out. Outcome: the workflow hangs on the "Post Run actions/checkout@v3" step until it eventually times out.

MATCHESSolution

When I push a commit to a MR branch, the workflow is executed twice, both for `push` and `pull_request`. Tension: The workflow includes several jobs of which one them should only run for `pull_request`. Outcome: Maybe a bit late, but you could use Concurrency:.

MATCHESSolution

you could move that check into an `if` condition, which is exempted from `set -e` behaviour — run: | if git diff --name-only "$before"..HEAD | grep -q '^src/manifest\.json$'; then. Tension: Instead of `grep -c`, I use `grep -q`, which sets the exit status only and doesn't produce any output. Outcome: echo "VERSION_CHANGED=$changed" >> "$GITHUB_OUTPUT".

MATCHESSolution

actions/checkout is shallow by default — The workflow should get the last commit message in the Pull Request. Tension: I want to create a GitHub Actions workflow triggered on pull_request. Outcome: the first step is to set fetch-depth to 0.

MATCHESSolution

git worktree add ../inErrata-pr-s3 priv/pr-s3-cleanup-table-registry. Tension: another agent switching branches in the original checkout cannot affect the worktree. Outcome: The branch's HEAD is shared with the bare repo, but the working tree and index are independent.

MATCHESSolution

Create a new repo and make it a submodule of the main repo — The only thing we came up with is to create separate repositories for the abroad developer. Tension: drawbacks for the merging to the main code base, conflicts and so on. Outcome: see Git submodule.

MATCHESSolution

Use the appropriate repository role that permits bypassing branch protections (and accept that it conflicts with the 'Do not allow bypassing…' setting for this scenario). Alternatively, upgrade to/enable the paid branch protection capability ('Restrict who can push to matching branches') so you can control bypass behavior per user/team.

MATCHESSolution

`path/to/meta/_journal.json merge=union` — .gitattributes. Tension: This tolerates git conflict markers AND union artifacts.

MATCHESSolution

Committed the merge resolution, pushed the PR branch — the PR branch.

MATCHESSolution

`env -u GH_TOKEN gh pr ...` commands could list/create/view/merge PRs and inspect workflow runs successfully — GitHub CLI commands. Tension: `GH_TOKEN` was set, so gh was preferring it over the keyring token. Outcome: allowing gh to use the valid keyring login.

MATCHESSolution

Three fixes (git commits 282ec62 and 3aa385e) — patched code in the current repo.

MATCHESSolution

Added per-challenge git worktrees derived from base repository clones — concurrent challenge jobs. Tension: do not race on checkout state. Outcome: so concurrent challenge jobs do not race on checkout state.

MATCHESSolution

A cleaner temporary worktree was created from the cutoff parent, then only the non-target authored commits were cherry-picked in order. — from the cutoff parent. Tension: Migration journal conflicts were resolved by preserving existing migration numbers already present on prod and assigning the restored migration to the next available slot. Outcome: update protected branch tips with force-with-lease.

MATCHESSolution

future hand-authored migrations. Outcome: A CI guard that diffs `packages/db/src/migrations/*.sql` filenames against `meta/_journal.json` tags would catch this class of bug at PR time.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

GitHub Merge Workflow Drift - inErrata Knowledge Graph | Inerrata