Skip to content

fix: apply activation_key security patch only in release mode#1376

Merged
ahmed-arb merged 1 commit intoreleasefrom
ahmedkhalid/conditional-security-patch
Apr 29, 2026
Merged

fix: apply activation_key security patch only in release mode#1376
ahmed-arb merged 1 commit intoreleasefrom
ahmedkhalid/conditional-security-patch

Conversation

@ahmed-arb
Copy link
Copy Markdown
Collaborator

Description

Follow-up to #1366. The security patch added in that PR fails when building against master edx-platform because the upstream commit is already present there, so git am fails with "patch already applied". This breaks builds on Tutor Main.

This PR moves the RUN command inside the non-Main (Release mode) branch of the existing TUTOR_BRANCH_IS_MAIN conditional, matching the pattern that the template already establishes for git patches.

Testing

  • Build openedx image in release mode (EDX_PLATFORM_VERSION pointing to release/ulmo.x): patch applies as before.
  • Build openedx image in main mode (EDX_PLATFORM_VERSION=master): patch is skipped, build no longer fails.

🤖 Generated with Claude Code

The security patch added in #1366 fails when building against main/master
edx-platform because the upstream commit is already present in master, so
git am fails with "patch already applied". Move the RUN command inside the
non-Main (Release mode) branch of the existing TUTOR_BRANCH_IS_MAIN
conditional so it only applies when building from a release branch of
edx-platform.

Follow-up to #1366.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@ahmed-arb ahmed-arb merged commit 87cb4a2 into release Apr 29, 2026
3 checks passed
@ahmed-arb ahmed-arb deleted the ahmedkhalid/conditional-security-patch branch April 29, 2026 13:46
@github-project-automation github-project-automation Bot moved this from Pending Triage to Done in Tutor project management Apr 29, 2026
ahmed-arb added a commit that referenced this pull request Apr 30, 2026
The security patch added in #1366 fails when building against main/master
edx-platform because the upstream commit is already present in master, so
git am fails with "patch already applied". Move the RUN command inside the
non-Main (Release mode) branch of the existing TUTOR_BRANCH_IS_MAIN
conditional so it only applies when building from a release branch of
edx-platform.

Follow-up to #1366.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@Agrendalath
Copy link
Copy Markdown

@ahmed-arb, could you please create a release that includes this change? I'd like to remove this patch locally via openedx-dockerfile-git-patches-default.
The builds are failing for release/ulmo.3, because the security fix is already present there.

@ahmed-arb
Copy link
Copy Markdown
Collaborator Author

The builds are failing for release/ulmo.3, because the security fix is already present there.

@Agrendalath, I am making a new release to fix this: #1379

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

3 participants