githubnext / githubnext/gh-aw-cao

[self-care:open-source-failures] Repair Dependabot target authority for live-mode precompute

Closed Beginner friendly
#2,464 0 comments 0 reactions 0 assignees View on GitHub
self-care self-care:open-source-failures
Dominant language
JavaScript
Stars
3
Forks
1
Avg merge
49m
Merged PRs (30d)
837

Description

The Dependabot release-train live-mode workflow in `githubnext/gh-aw-cao` is repeatedly failing before activation because target authority is missing or incomplete for the `dependabot` package. This blocks the workflow at control precompute and recurs across multiple runs in the bounded snapshot.

**Action:** Repo maintainers should add or repair `target-authority.packages.dependabot.authority` in `.github/workflows/cao.json`; accept when new runs of Dependabot / Release Trains pass `Run CAO control precompute` in live mode.

Critical findings:
- Severity: P0 because the workflow is blocked before activation.
- Affected workflow: `dependabot-release-train-updater.lock.yml`.
- Evidence-supported cause: `Run CAO control precompute` reports either `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode` or `Target authority file must declare version 1 and target-authority.packages.dependabot.authority`.
- Confidence: high.

Representative runs

- Missing authority: https://github.com/githubnext/gh-aw-cao/actions/runs/33955432486
- Incomplete authority declaration variant: https://github.com/githubnext/gh-aw-cao/actions/runs/33955425610
- Additional recurrence: https://github.com/githubnext/gh-aw-cao/actions/runs/33955419397

Bounded fix

Update the target authority file on the default branch so it declares schema version 1 and grants live authority for the `dependabot` package. Re-run Dependabot / Release Trains to confirm the precompute gate now authorizes live mode.

Agent prompt

Review `.github/workflows/cao.json` on the default branch and repair the `target-authority` entry for package `dependabot`. Ensure the file declares version 1, includes the required package authority field for live mode, and matches the control-plane expectations used by `Run CAO control precompute`. After editing, validate the JSON and confirm Dependabot / Release Trains can pass precompute in live mode.

### Control Plane
- Correlation ID: `33957598166-211`
- Central repository: `githubnext/gh-aw-cao`
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33957598166

> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33957780710) · pi · gpt54 · 27.9 AIC · ⌖ 8.51 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 19, 2026, 9:26 AM UTC

Contributor guide

Open the contributing guide

Research direction

Open `.github/workflows/cao.json` on the default branch and inspect the `target-authority` entry for the `dependabot` package. Validate the JSON and compare it with the control-plane error requirements: schema version 1 and the required package authority field. Re-run Dependabot / Release Trains and confirm `Run CAO control precompute` passes in live mode.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd, devops
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
84/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.