[PR #31] [MERGED] chore: prepare orbs and update CI container toolchain #35

New issue

Closed

opened 2026-10-26 22:23:07 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:23:07 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/comfyui-ci-container/pull/31
Author: @DrJKL
Created: 9/28/2026
Status: ✅ Merged
Merged: 9/28/2026
Merged by: @DrJKL

Base: main ← Head: amp/orb-setup

📝 Commits (8)

2ef36d4 chore: prepare Amp orb environment
5eed647 chore: update CI container toolchain and release flow (#32)
9a9da66 Merge remote-tracking branch 'origin/main' into amp/orb-setup
ae99b0d ci: automate Playwright update PRs
c43da1f ci: update first-party actions
b0e3a24 ci: automate first-party action updates
af0fc70 ci: enforce action SHA pins
c019d67 fix: prevent release tag reuse

📊 Changes

13 files changed (+266 additions, -98 deletions)

View changed files

➕ .agents/resume (+17 -0)
➕ .agents/setup (+22 -0)
➕ .agents/skills/updating-ci-container/SKILL.md (+24 -0)
➕ .amp/services.yaml (+3 -0)
➕ .github/dependabot.yml (+17 -0)
📝 .github/workflows/build-and-push.yml (+44 -47)
➕ .github/workflows/ci-validate-action-pins.yml (+27 -0)
📝 .github/workflows/update-frontend-container-ref.yml (+2 -2)
➕ .github/workflows/update-playwright.yml (+72 -0)
➕ .gitignore (+1 -0)
➕ .pinact.yaml (+13 -0)
📝 Dockerfile (+4 -4)
📝 README.md (+20 -45)

📄 Description

Prepares Amp orbs for container development and updates the CI image toolchain and release flow.

Changes

installs Docker and Buildx idempotently when a fresh orb starts
runs Docker as an Amp-supervised service and restores it when an orb resumes
updates Playwright from v1.61.1-noble to v1.63.0-noble
updates the preinstalled Node.js default from 25 to 26
adds an on-demand workflow that verifies a Playwright release and opens its update PR
updates GitHub and Docker actions to their latest stable majors
adds grouped weekly Dependabot updates for first- and third-party actions
enforces immutable SHA pins for non-GitHub actions with Pinact
makes main the only automatic image build and publish path
removes duplicate builds triggered by pull requests and generated version tags
replaces stale README sections with the current frontend setup flow
adds the updating-ci-container repository skill

Release order

This container must be published before ComfyUI_frontend can consume it. After this PR merges, the release workflow publishes the image and opens the frontend update PR. That frontend PR must update @playwright/test to 1.63.0 before it merges.

Verification

cold orb setup completed in 4 seconds; the warm run completed in 0.15 seconds
cold Docker resume completed in 2.04 seconds; the warm check completed in 0.05 seconds
built and loaded a probe image with Buildx
docker buildx build --check .
actionlint .github/workflows/*.yml
pinact run --check
confirmed the Playwright image supports linux/amd64 and linux/arm64
verified latest-release resolution and Dockerfile substitution locally
confirmed ComfyUI_frontend's shared setup action reads .nvmrc through actions/setup-node@v6
workspace skill reload detected updating-ci-container

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/comfyui-ci-container/pull/31 **Author:** [@DrJKL](https://github.com/DrJKL) **Created:** 9/28/2026 **Status:** ✅ Merged **Merged:** 9/28/2026 **Merged by:** [@DrJKL](https://github.com/DrJKL) **Base:** `main` ← **Head:** `amp/orb-setup` --- ### 📝 Commits (8) - [`2ef36d4`](https://github.com/Comfy-Org/comfyui-ci-container/commit/2ef36d4a89cf713556963975b6b0b469dc5cb31a) chore: prepare Amp orb environment - [`5eed647`](https://github.com/Comfy-Org/comfyui-ci-container/commit/5eed647131eb76db081fd169b4f5c2a228977262) chore: update CI container toolchain and release flow (#32) - [`9a9da66`](https://github.com/Comfy-Org/comfyui-ci-container/commit/9a9da662120ea97f091d1680fe947a035e3c943e) Merge remote-tracking branch 'origin/main' into amp/orb-setup - [`ae99b0d`](https://github.com/Comfy-Org/comfyui-ci-container/commit/ae99b0dca03fff655299e85e4484c29654bd6957) ci: automate Playwright update PRs - [`c43da1f`](https://github.com/Comfy-Org/comfyui-ci-container/commit/c43da1f8e2765e50d61a2421f5aa411c45f9c9c0) ci: update first-party actions - [`b0e3a24`](https://github.com/Comfy-Org/comfyui-ci-container/commit/b0e3a24dea4eeb929ee63eae86015654f1de2015) ci: automate first-party action updates - [`af0fc70`](https://github.com/Comfy-Org/comfyui-ci-container/commit/af0fc709c60c467a2f29c6522bc7530c913cf4b3) ci: enforce action SHA pins - [`c019d67`](https://github.com/Comfy-Org/comfyui-ci-container/commit/c019d6751ce3695d25c7c00f0d87fc8c55707451) fix: prevent release tag reuse ### 📊 Changes **13 files changed** (+266 additions, -98 deletions) <details> <summary>View changed files</summary> ➕ `.agents/resume` (+17 -0) ➕ `.agents/setup` (+22 -0) ➕ `.agents/skills/updating-ci-container/SKILL.md` (+24 -0) ➕ `.amp/services.yaml` (+3 -0) ➕ `.github/dependabot.yml` (+17 -0) 📝 `.github/workflows/build-and-push.yml` (+44 -47) ➕ `.github/workflows/ci-validate-action-pins.yml` (+27 -0) 📝 `.github/workflows/update-frontend-container-ref.yml` (+2 -2) ➕ `.github/workflows/update-playwright.yml` (+72 -0) ➕ `.gitignore` (+1 -0) ➕ `.pinact.yaml` (+13 -0) 📝 `Dockerfile` (+4 -4) 📝 `README.md` (+20 -45) </details> ### 📄 Description Prepares Amp orbs for container development and updates the CI image toolchain and release flow. ## Changes - installs Docker and Buildx idempotently when a fresh orb starts - runs Docker as an Amp-supervised service and restores it when an orb resumes - updates Playwright from `v1.61.1-noble` to `v1.63.0-noble` - updates the preinstalled Node.js default from 25 to 26 - adds an on-demand workflow that verifies a Playwright release and opens its update PR - updates GitHub and Docker actions to their latest stable majors - adds grouped weekly Dependabot updates for first- and third-party actions - enforces immutable SHA pins for non-GitHub actions with Pinact - makes `main` the only automatic image build and publish path - removes duplicate builds triggered by pull requests and generated version tags - replaces stale README sections with the current frontend setup flow - adds the `updating-ci-container` repository skill ## Release order This container must be published before ComfyUI_frontend can consume it. After this PR merges, the release workflow publishes the image and opens the frontend update PR. That frontend PR must update `@playwright/test` to 1.63.0 before it merges. ## Verification - cold orb setup completed in 4 seconds; the warm run completed in 0.15 seconds - cold Docker resume completed in 2.04 seconds; the warm check completed in 0.05 seconds - built and loaded a probe image with Buildx - `docker buildx build --check .` - `actionlint .github/workflows/*.yml` - `pinact run --check` - confirmed the Playwright image supports linux/amd64 and linux/arm64 - verified latest-release resolution and Dockerfile substitution locally - confirmed ComfyUI_frontend's shared setup action reads `.nvmrc` through `actions/setup-node@v6` - workspace skill reload detected `updating-ci-container` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:23:07 +00:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Comfy-Org/comfyui-ci-container#35

No description provided.

Rows
Columns