ci: pass PYPI_TOKEN explicitly, drop secrets:inherit elsewhere by JarbasAl · Pull Request #33 · JarbasHiveMind/hivemind-sqlite-database

JarbasAl · 2026-05-19T17:24:57Z

secrets: inherit fails when calling publish-stable.yml/publish-alpha.yml from gh-automations. Pass PYPI_TOKEN explicitly. For other workflows that don't declare any secrets upstream, drop the secrets: line entirely — there's nothing to pass through.

Same fix being applied across hivemind-redis-database and TigreGotico/json_database.

secrets:inherit fails for the publish workflows (publish-stable, publish-alpha) — pass PYPI_TOKEN explicitly. For workflows that don't declare any secrets upstream, drop the secrets: line entirely.

coderabbitai · 2026-05-19T17:25:04Z

Warning

Rate limit exceeded

@JarbasAl has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 21 minutes and 2 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: b136bfff-04a2-430e-8b0d-c14b2fbd46eb

📥 Commits

Reviewing files that changed from the base of the PR and between 228aad0 and 2479f78.

📒 Files selected for processing (9)

.github/workflows/build-tests.yml
.github/workflows/coverage.yml
.github/workflows/license_check.yml
.github/workflows/lint.yml
.github/workflows/pip_audit.yml
.github/workflows/publish_stable.yml
.github/workflows/release-preview.yml
.github/workflows/release_workflow.yml
.github/workflows/repo-health.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch fix/ci-explicit-secrets

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-05-19T17:25:42Z

Hello! The automated checks have been performed. 👋

I've aggregated the results of the automated checks for this PR below.

🏷️ Release Preview

Evaluating the overall quality of the next release. ✨

Current: 0.3.0a2 → Next: 0.3.0a3

Signal	Value
Label	(none)
PR title	`ci: pass PYPI_TOKEN explicitly, drop secrets:inherit elsewhere`
Bump	alpha

✅ PR title follows conventional commit format.

🚀 Release Channel Compatibility

Predicted next version: 0.3.0a3

Channel	Status	Note	Current Constraint
Stable	⚪	Not in channel	-
Testing	⚪	Not in channel	-
Alpha	✅	Compatible	`hivemind-sqlite-database>=0.2.1`

🔒 Security (pip-audit)

I've scanned the dependencies for any hidden surprises. 🔍

✅ No known vulnerabilities found (63 packages scanned).

📋 Repo Health

Ensuring the repo's skin is clear (aka linting errors). ✨

✅ All required files present.

Latest Version: 0.3.0a2

✅ hivemind_sqlite_database/version.py — Version file
✅ README.md — README
✅ LICENSE.md — License file (consider renaming to LICENSE)
✅ pyproject.toml — pyproject.toml
⚠️ setup.py — setup.py
✅ CHANGELOG.md — Changelog
✅ hivemind_sqlite_database/version.py has valid version block markers

⚖️ License Check

Verifying the SPDX identifiers for correctness. 🆔

✅ No license violations found (45 packages).

License distribution: 12× MIT License, 7× Apache-2.0, 6× MIT, 5× Apache Software License, 3× BSD-3-Clause, 2× ISC License (ISCL), 2× PSF-2.0, 1× Apache Software License; BSD License, +7 more

Full breakdown — 45 packages

Package	Version	License	URL
`bitarray`	3.8.1	PSF-2.0	link
`bitstring`	4.4.0	MIT License	link
`build`	1.5.0	MIT	link
`certifi`	2026.4.22	Mozilla Public License 2.0 (MPL 2.0)	link
`cffi`	2.0.0	MIT	link
`charset-normalizer`	3.4.7	MIT	link
`click`	8.4.0	BSD-3-Clause	link
`combo_lock`	0.3.1	Apache-2.0	link
`cryptography`	48.0.0	Apache-2.0 OR BSD-3-Clause	link
`filelock`	3.29.0	MIT	link
`hivemind-plugin-manager`	0.5.0	Apache-2.0	link
`hivemind-sqlite-database`	0.3.0a2	Apache-2.0	link
`hivemind_bus_client`	0.4.4	Apache Software License	link
`idna`	3.15	BSD-3-Clause	link
`json-database`	0.10.1	MIT	link
`kthread`	0.2.3	MIT License	link
`markdown-it-py`	4.2.0	MIT License	link
`mdurl`	0.1.2	MIT License	link
`memory-tempfile`	2.2.3	MIT License	link
`ovos-bus-client`	2.0.0a3	Apache Software License	link
`ovos-config`	2.1.1	Apache-2.0	link
`ovos-utils`	0.8.5	Apache-2.0	link
`packaging`	26.2	Apache-2.0 OR BSD-2-Clause	link
`pexpect`	4.9.0	ISC License (ISCL)	link
`poorman-handshake`	1.0.1	Apache-2.0	link
`ptyprocess`	0.7.0	ISC License (ISCL)	link
`py-cpuinfo`	9.0.0	MIT License	link
`pybase64`	1.4.3	BSD License	link
`pycparser`	3.0	BSD-3-Clause	link
`pycryptodomex`	3.23.0	BSD License; Public Domain	link
`pyee`	12.1.1	MIT License	link
`Pygments`	2.20.0	BSD-2-Clause	link
`pyproject_hooks`	1.2.0	MIT License	link
`python-dateutil`	2.9.0.post0	Apache Software License; BSD License	link
`PyYAML`	6.0.3	MIT License	link
`requests`	2.34.2	Apache Software License	link
`rich`	13.9.4	MIT License	link
`rich-click`	1.9.7	MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

Policy: Apache 2.0 (universal donor). StrongCopyleft / NetworkCopyleft / WeakCopyleft / Other / Error categories fail. MPL allowed.

🔨 Build Tests

I've laid the bricks for your new logic. 🧱

✅ All versions pass

Python	Build	Install	Tests
3.10	✅	✅	✅
3.11	✅	✅	✅
3.12	✅	✅	✅
3.13	✅	✅	✅
3.14	✅	✅	✅

🔍 Lint

I've distilled the results into this summary. 🧪

✅ ruff: no issues

📊 Coverage

Measuring the safety net for your changes. 🥅

✅ 84.1% total coverage

Per-file coverage (2 files)

File	Coverage	Missing lines
`hivemind_sqlite_database/version.py`	0.0%	5
`hivemind_sqlite_database/__init__.py`	88.2%	12

Full report: download the coverage-report artifact.

Processing completed in 0.0001 bot-seconds ⚡

…red manually Other repos in the family (hivemind-plugin-manager, hivemind-ovos-agent-plugin, HiveMind-core, hivemind-redis-database) all have workflow_dispatch on this workflow. sqlite was missing it, blocking manual alpha-release triggering.

ci: pass PYPI_TOKEN explicitly, drop secrets:inherit elsewhere

34ad69a

secrets:inherit fails for the publish workflows (publish-stable, publish-alpha) — pass PYPI_TOKEN explicitly. For workflows that don't declare any secrets upstream, drop the secrets: line entirely.

JarbasAl merged commit 9f578ce into dev May 20, 2026
16 checks passed

JarbasAl deleted the fix/ci-explicit-secrets branch May 20, 2026 17:03

Navigation Menu

Repository navigation

ci: pass PYPI_TOKEN explicitly, drop secrets:inherit elsewhere - #33

ci: pass PYPI_TOKEN explicitly, drop secrets:inherit elsewhere#33
JarbasAl merged 2 commits into
devfrom
fix/ci-explicit-secrets

JarbasAl commented May 19, 2026

Uh oh!

coderabbitai Bot commented May 19, 2026 •

edited

Loading

Rate limit exceeded

Uh oh!

github-actions Bot commented May 19, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

JarbasAl commented May 19, 2026

Uh oh!

coderabbitai Bot commented May 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Rate limit exceeded

Uh oh!

github-actions Bot commented May 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hello! The automated checks have been performed. 👋

🏷️ Release Preview

🔒 Security (pip-audit)

📋 Repo Health

⚖️ License Check

🔨 Build Tests

🔍 Lint

📊 Coverage

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

coderabbitai Bot commented May 19, 2026 •

edited

Loading

github-actions Bot commented May 19, 2026 •

edited

Loading