ci: inline Spec Kit catalog sync into release workflow#199
Merged
Conversation
Fixes the auto-sync that has been failing on every release since the workflow_run auth quirk surfaced. The sync job moves into release.yml as a final step after publish-npm/publish-pypi/build-extension. The previous workflow_run trigger consistently 401'd on `gh repo sync raccioly/spec-kit --source github/spec-kit` even with a valid SPECKIT_PR_TOKEN — `workflow_dispatch` runs of the same workflow with the same secret succeed. Same-workflow secret access avoids the quirk. sync-speckit-catalog.yml is kept (renamed "(Manual)") with only the workflow_dispatch trigger, for one-off recovery / metadata refreshes outside the release flow. Step logic is unchanged in both places. No behavior change for users — the resulting PR to github/spec-kit is identical content, just now triggered atomically with the release instead of via a brittle cross-workflow event.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Permanently fixes the auto-sync to the Spec Kit community catalog. Every release since the workflow_run auth quirk surfaced has had its post-release sync silently fail with HTTP 401 on
gh repo sync raccioly/spec-kit --source github/spec-kit, despite the PAT being valid (manual `workflow_dispatch` of the same workflow with the same secret succeeds every time).What changed
release.yml— adds a final `sync-catalog` job after `publish-npm` / `publish-pypi` / `build-extension`. Same step logic as the standalone workflow, but now runs inside the release workflow's own context, where secret access is consistent.sync-speckit-catalog.yml— drops the brittle `workflow_run` trigger and renames the workflow to "(Manual)". Keeps the `workflow_dispatch` path for one-off recovery, metadata-only refreshes, or retrying after upstream maintenance. Step logic untouched.Why this is safe
Verification
Out of scope
🤖 Generated with Claude Code