From 85fbd00b3fa597d50680e8a4d33dff148d603831 Mon Sep 17 00:00:00 2001 From: Garry Tan Date: Sun, 16 Aug 2026 15:39:45 -0700 Subject: [PATCH] fix(ci-image): stage patches/ into the narrow build context in all three workflows MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The image builds from context .github/docker, into which a staging step copies package.json + bun.lock — the previous fix added COPY patches to the Dockerfile but not patches/ to that staging, so buildx failed computing the COPY checksum ('/patches: not found'). All three workflows (ci-image, evals, evals-periodic) stage identically, in lockstep with the shared tag hash. Verified: a build over the exact staged context resolves both COPY layers. Co-Authored-By: Claude Fable 5 --- .github/workflows/ci-image.yml | 2 +- .github/workflows/evals-periodic.yml | 2 +- .github/workflows/evals.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-image.yml b/.github/workflows/ci-image.yml index 66ed42660..4cb1dccc2 100644 --- a/.github/workflows/ci-image.yml +++ b/.github/workflows/ci-image.yml @@ -23,7 +23,7 @@ jobs: - uses: actions/checkout@v7 # Copy lockfile + package.json into Docker build context - - run: cp package.json bun.lock .github/docker/ + - run: cp package.json bun.lock .github/docker/ && cp -R patches .github/docker/patches # Same content-hash tag expression as evals.yml / evals-periodic.yml. # This is the tag the eval matrix looks up first — without pushing it diff --git a/.github/workflows/evals-periodic.yml b/.github/workflows/evals-periodic.yml index 3dd672b67..b1493bc3f 100644 --- a/.github/workflows/evals-periodic.yml +++ b/.github/workflows/evals-periodic.yml @@ -45,7 +45,7 @@ jobs: fi - if: steps.check.outputs.exists == 'false' - run: cp package.json bun.lock .github/docker/ + run: cp package.json bun.lock .github/docker/ && cp -R patches .github/docker/patches # Registry cache export needs a docker-container builder — the default # `docker` driver hard-errors on cache-to. diff --git a/.github/workflows/evals.yml b/.github/workflows/evals.yml index 539b3ed5b..fffb6cda1 100644 --- a/.github/workflows/evals.yml +++ b/.github/workflows/evals.yml @@ -54,7 +54,7 @@ jobs: fi - if: steps.check.outputs.exists == 'false' - run: cp package.json bun.lock .github/docker/ + run: cp package.json bun.lock .github/docker/ && cp -R patches .github/docker/patches # A fork PR's GITHUB_TOKEN only has `packages: read`, so pushing fails. # Still BUILD (validates Dockerfile.ci changes), just don't publish. This