Skip to content

Fix frequent setup-uv CI failures on windows and macos - #1927

Closed
bmos wants to merge 3 commits into
move-coop:mainfrom
bmos:patch-2
Closed

Fix frequent setup-uv CI failures on windows and macos#1927
bmos wants to merge 3 commits into
move-coop:mainfrom
bmos:patch-2

Conversation

@bmos

@bmos bmos commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

What is this change?

  • We keep having random intermittent test failures during the setup-uv action step. These failures are because windows and macos runners don't support eBPF. This means that during initialization our firewall is configured with IPs matching our whitelist but those IPs do not always match those that are contacted during setup-up (the github IPs rotate, so multiple DNS requests may get different results).
  • As we are no longer blocking unexpected outbound traffic, we should be careful that our tests do not result in actual HTTP traffic.

Considerations for discussion

  • We could conditionally use block on the ubuntu runners, which could help reveal tests that are making HTTP requests, but it might be confusing to have improperly-written tests failing with timeouts on ubuntu but not macos and windows.
  • I didn't remove the whitelist, as this deficiency of harden-runner may be resolved at some point in the future.

How to test the changes (if needed)

  • Observe that tests pass.

Breaking Changes

Breaking changes are changes to our public API which may require existing users to change their code. If there are no breaking changes, any existing parsons user should not need to do anything after updating their parsons version.

Does this PR introduce breaking changes?
  • label: Breaking change — This PR introduces one or more breaking changes.
  • label: Non-breaking change — This PR does not introduce one or more breaking changes.

Details (if needed)

  • (List out any changes to the API that may cause breaks for developer implementation.)

@github-actions github-actions Bot added github_actions Pull requests that update GitHub Actions code non-breaking-change Status - Indicates that the code in this PR does not have any breaking changes. labels Aug 20, 2026
@bmos
bmos marked this pull request as draft August 20, 2026 23:16
@bmos bmos changed the title Add raw.githubusercontent.com/astral-sh to allowed hosts in checks workflow Disable egress policy in harden runner Aug 20, 2026
@github-actions

Copy link
Copy Markdown

Coverage report

Click to see where and how coverage changed

FileStatementsMissingCoverageCoverage
(new stmts)
Lines missing
  parsons/utilities
  api_connector.py
  datetime.py
Project Total  

This report was generated by python-coverage-comment-action

@bmos
bmos marked this pull request as ready for review August 21, 2026 01:30
@bmos bmos changed the title Disable egress policy in harden runner Set egress policy in harden runner pytest workflow step to audit Aug 22, 2026
@bmos bmos changed the title Set egress policy in harden runner pytest workflow step to audit Fix intermittent setup-uv CI failures, esp on macos Aug 27, 2026
@bmos bmos changed the title Fix intermittent setup-uv CI failures, esp on macos Fix intermittent setup-uv CI failures on windows and macos Aug 28, 2026
@bmos bmos changed the title Fix intermittent setup-uv CI failures on windows and macos Fix frequent setup-uv CI failures on windows and macos Aug 28, 2026
@bmos bmos closed this Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code non-breaking-change Status - Indicates that the code in this PR does not have any breaking changes.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant