ci(release): drop private-module auth #25

Merged

thklein merged 1 commit from ci/drop-private-module-auth into main

2026-10-18 12:19:36 +00:00

thklein commented

2026-10-18 11:32:11 +00:00

Owner

All git.basepeak.dev Go module dependencies of gptscript (broadcaster,
chat-completion-client, cmd, tui, go-gptscript) are public now, so the
private-module auth added to the release workflow in #20 is no longer needed.

Changes:

.github/workflows/release.yaml: drop the job-level GOPRIVATE: git.basepeak.dev
env and the "Configure git for private modules" step (token-based
url.insteadOf rewrite using CI_BOT_REPO_READ_TOKEN).

No other workflow, .goreleaser.yml or Makefile used the GOPRIVATE / token /
insteadOf pattern.

Verified anonymously (no git credentials: GIT_CONFIG_GLOBAL=/dev/null,
GIT_TERMINAL_PROMPT=0, GOPRIVATE unset, GOPROXY=direct,
GONOSUMDB=git.basepeak.dev): go mod download of all five
git.basepeak.dev/basepeak-ai/* modules pinned in go.mod succeeds. The
integration (ubuntu) job on this PR also downloads the full module graph
without any token and passes.

Follow-up: the CI_BOT_REPO_READ_TOKEN repository secret is no longer
referenced by any workflow and can be removed (left in place by this PR).

All `git.basepeak.dev` Go module dependencies of gptscript (broadcaster, chat-completion-client, cmd, tui, go-gptscript) are public now, so the private-module auth added to the release workflow in #20 is no longer needed. Changes: - `.github/workflows/release.yaml`: drop the job-level `GOPRIVATE: git.basepeak.dev` env and the "Configure git for private modules" step (token-based `url.insteadOf` rewrite using `CI_BOT_REPO_READ_TOKEN`). No other workflow, `.goreleaser.yml` or `Makefile` used the GOPRIVATE / token / insteadOf pattern. Verified anonymously (no git credentials: `GIT_CONFIG_GLOBAL=/dev/null`, `GIT_TERMINAL_PROMPT=0`, GOPRIVATE unset, `GOPROXY=direct`, `GONOSUMDB=git.basepeak.dev`): `go mod download` of all five `git.basepeak.dev/basepeak-ai/*` modules pinned in `go.mod` succeeds. The `integration (ubuntu)` job on this PR also downloads the full module graph without any token and passes. Follow-up: the `CI_BOT_REPO_READ_TOKEN` repository secret is no longer referenced by any workflow and can be removed (left in place by this PR).

thklein added 1 commit

2026-10-18 11:32:12 +00:00

ci(release): drop private-module auth

integration / integration (windows-latest) (pull_request) Waiting to run

Details

test / test (windows-latest) (pull_request) Waiting to run

Details

smoke / check-label (pull_request_target) Failing after 1s

Details

smoke / gpt-4o-2024-08-06 (pull_request_target) Has been skipped

Details

smoke / gpt-4o-mini-2024-07-18 (pull_request_target) Has been skipped

Details

smoke / claude-3-7-sonnet-20250219 (pull_request_target) Has been skipped

Details

Validate docs build / validate-docs (pull_request) Failing after 15s

Details

integration / integration (ubuntu-22.04) (pull_request) Successful in 34s

Details

test / test (ubuntu-22.04) (pull_request) Failing after 38s

Details

0919c91ecf

All git.basepeak.dev module dependencies (broadcaster,
chat-completion-client, cmd, tui, go-gptscript) are public now, so the
release job no longer needs GOPRIVATE or the token-based git insteadOf
rewrite added in #20.

thklein merged commit 61012ba7b2 into main

2026-10-18 12:19:36 +00:00

thklein deleted branch ci/drop-private-module-auth

2026-10-18 12:19:37 +00:00

thklein referenced this pull request from a commit

2026-10-18 12:19:38 +00:00

ci(release): drop private-module auth (#25)