githubnext / githubnext/gh-aw-cao
[self-care:open-source-failures] Repair Dependabot target authority for live-mode precompute
- Dominant language
- JavaScript
- Stars
- 3
- Forks
- 1
- Avg merge
- 49m
- Merged PRs (30d)
- 837
Description
The Dependabot release-train live-mode workflow in `githubnext/gh-aw-cao` is repeatedly failing before activation because target authority is missing or incomplete for the `dependabot` package. This blocks the workflow at control precompute and recurs across multiple runs in the bounded snapshot.
**Action:** Repo maintainers should add or repair `target-authority.packages.dependabot.authority` in `.github/workflows/cao.json`; accept when new runs of Dependabot / Release Trains pass `Run CAO control precompute` in live mode.
Critical findings:
- Severity: P0 because the workflow is blocked before activation.
- Affected workflow: `dependabot-release-train-updater.lock.yml`.
- Evidence-supported cause: `Run CAO control precompute` reports either `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode` or `Target authority file must declare version 1 and target-authority.packages.dependabot.authority`.
- Confidence: high.
Representative runs
- Missing authority: https://github.com/githubnext/gh-aw-cao/actions/runs/33955432486
- Incomplete authority declaration variant: https://github.com/githubnext/gh-aw-cao/actions/runs/33955425610
- Additional recurrence: https://github.com/githubnext/gh-aw-cao/actions/runs/33955419397
Bounded fix
Update the target authority file on the default branch so it declares schema version 1 and grants live authority for the `dependabot` package. Re-run Dependabot / Release Trains to confirm the precompute gate now authorizes live mode.
Agent prompt
Review `.github/workflows/cao.json` on the default branch and repair the `target-authority` entry for package `dependabot`. Ensure the file declares version 1, includes the required package authority field for live mode, and matches the control-plane expectations used by `Run CAO control precompute`. After editing, validate the JSON and confirm Dependabot / Release Trains can pass precompute in live mode.
### Control Plane
- Correlation ID: `33957598166-211`
- Central repository: `githubnext/gh-aw-cao`
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33957598166
> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33957780710) · pi · gpt54 · 27.9 AIC · ⌖ 8.51 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 19, 2026, 9:26 AM UTC
Contributor guide
Research direction
Open `.github/workflows/cao.json` on the default branch and inspect the `target-authority` entry for the `dependabot` package. Validate the JSON and compare it with the control-plane error requirements: schema version 1 and the required package authority field. Re-run Dependabot / Release Trains and confirm `Run CAO control precompute` passes in live mode.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, devops
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 84/100