Enable the gated pm-github issue sync

Merged
UN
3d ago
+52-0

Add the scheduled GitHub issue sync caller so this package's own tracker receives issue changes through the audited reusable pipeline. Before this change, the package had no active gated caller; after merge, its daily schedule is 17 3 * * * UTC, with manual dispatch available.

The caller pins unbraind/pm-github/.github/workflows/pm-github-sync.yml to a0880e9645097363824c9a560fed00fc286bbfc3 and installs the matching published package version 2026.10.13. The called workflow validates the caller identity and access, previews the complete plan, imports with --gate, verifies repeat-import idempotency and the privacy gate, then checks strict pm health before committing, pushing an automation branch, and opening a review PR. Findings or unreadable scan inputs fail closed. It does not push main.

Dependency manifests, merge-driver scripts, and thresholds are unchanged; the package has no direct fast-glob or jscpd4 devDependency. All dependencies: 0 before → 0 after. Production: 0 before → 0 after. npm ls braces is empty.

Validation:

  • npm: passed (tests 390; pass 390; fail 0; skipped 0).
  • bun: passed (tests 390; pass 390; fail 0; skipped 0).
  • npm run changelog:full and npm run changelog:check: passed after final tracker writes.
  • Caller identity check: only the reusable-workflow repository appears.
  • Skipped: actionlint is not installed and offline npm fallback is uncached.
  • Function revert regression proof: inapplicable; no TypeScript functions changed.

Exact release-gate commands:

env -u PM_PATH -u PM_AUTHOR HOME=$(mktemp -d) GIT_CONFIG_GLOBAL=/dev/null GIT_CONFIG_NOSYSTEM=1 npm run release:check
env -u PM_PATH -u PM_AUTHOR HOME=$(mktemp -d) GIT_CONFIG_GLOBAL=/dev/null GIT_CONFIG_NOSYSTEM=1 bun run release:check

Tracker: pm-brief-gp5o (proposed). The item remains in progress and its claim has been released for orchestrator verification.

Actions PR creation permission is already enabled. No workflow was dispatched, no PR was merged, and no bots were requested.

Packed consumer acceptance (accept:packed) passed in both complete release checks.

Summary by Sourcery

Enable gated synchronization of repository GitHub issues into the package’s pm tracker without changing dependencies or existing release configuration.

New Features:

  • Add a scheduled and manually triggerable GitHub issue synchronization workflow using the audited reusable pm-github pipeline.

CI:

  • Configure the issue sync caller to run daily at 03:17 UTC and use the pinned pm-github release workflow.

Chores:

  • Record the associated tracker item and synchronization history.

Summary by cubic

Adds the scheduled, SHA-pinned GitHub issue sync caller so this package's tracker receives issue changes through the audited gated pipeline. The workflow runs daily at 17:03 UTC (with manual dispatch), calls pm-github's reusable pm-github-sync.yml pinned to 3015930b351a3d9c1c03ee4a26f8404025287df7 (release 2026.10.15), and imports issues with --gate so findings fail closed.

  • The repin regenerates the changelog, dispatches the caller's required CI on the sync branch, and restricts the sync commit to an explicit scope; the caller grants actions: write for that dispatch.
  • The tracker item is tagged changed so pm-changelog files the entry under Changed rather than Removed.
  • No dependencies, merge-driver scripts, or thresholds change; npm and Bun release checks pass (390/390).