Repository navigation
chore: remove dead secrets, run cloudflare-tools tests on fork PRs - #2121
Merged
BlankParticle merged 2 commits intoOct 7, 2026
Conversation
None of the test secrets were set, so the gated suites always skipped. With no secrets left, the matrix no longer needs to skip fork pull requests. Also drop the unprefixed CLOUDFLARE_* repo secrets stacks/github.ts provisioned for it.
BlankParticle
added this pull request to stack #2122
October 7, 2026 14:26
BlankParticle
changed the title
BlankParticle
changed the title
BlankParticle
marked this pull request as ready for review
October 7, 2026 14:27
Contributor
|
Install the packages built from this commit: alchemypnpm install https://pkg.alchemy.run/alchemy/pr:2121:532c70f@alchemy.run (6)pnpm install https://pkg.alchemy.run/@alchemy.run/better-auth/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@alchemy.run/cloudflare-runtime/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@alchemy.run/frontend-frameworks/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@alchemy.run/node-utils/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@alchemy.run/floci/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@alchemy.run/pkg/pr:2121:532c70fTransitive Dependencies (18)pnpm install https://pkg.alchemy.run/@distilled.cloud/acme/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/aws/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/axiom/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/cloudflare/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/core/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/doppler/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/fly-io/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/gcp/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/hetzner/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/iceberg/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/infisical/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/neon/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/planetscale/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/prisma/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/railway/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/stripe/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/zerossl/pr:2121:532c70fpnpm install https://pkg.alchemy.run/@distilled.cloud/github/pr:2121:532c70fPublished |
claude.yml was removed, so nothing reads ANTHROPIC_API_KEY or AWS_ROLE_ARN or assumes the GitHub OIDC role. Deploying the stack deletes the role, the OIDC provider and both repo secrets.
BlankParticle
changed the title
BlankParticle
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
None of the secrets
cloudflare-tools.ymlpassed to its tests are set on the repo, so the suites gated on them always skipped. Drop them, and with no secrets left, run the matrix on fork pull requests too.- name: Test run: pnpm test:cloudflare-packages env: pnpm_config_workspace_concurrency: ... - TEST_MYSQL_URL: ${{ secrets.TEST_MYSQL_URL }} - TEST_POSTGRES_URL: ${{ secrets.TEST_POSTGRES_URL }} - CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} - CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }} - TEST_KV_NAMESPACE_ID: ${{ secrets.TEST_KV_NAMESPACE_ID }} - TEST_R2_BUCKET_NAME: ${{ secrets.TEST_R2_BUCKET_NAME }} - TEST_D1_DATABASE_ID: ${{ secrets.TEST_D1_DATABASE_ID }} - TEST_SERVICE_WORKER_NAME: ${{ secrets.TEST_SERVICE_WORKER_NAME }}if:on the test job.stacks/github.ts: stop provisioning the unprefixedCLOUDFLARE_ACCOUNT_ID/CLOUDFLARE_API_TOKENrepo secrets that only this workflow read.TEST_POSTGRES_URL.stacks/github.ts: drop what only the removedclaude.ymlused — theANTHROPIC_API_KEYandAWS_ROLE_ARNrepo secrets, thealchemy-github-actionsIAM role (AdministratorAccess) and the GitHub OIDC provider. The nextpnpm deploy:githubdeletes them.