From 04a01be992ff68f1edb12b5f92de2719fdba54a3 Mon Sep 17 00:00:00 2001 From: code-be-01 Date: Tue, 25 Aug 2026 01:18:02 +0000 Subject: [PATCH] ci(publish): serialize workspace-consuming image builds after publish-next-npm (#1411) (#1412) Co-authored-by: code-be-01 --- .woodpecker/publish.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/.woodpecker/publish.yml b/.woodpecker/publish.yml index a5ada7b1..bf6cdd3b 100644 --- a/.woodpecker/publish.yml +++ b/.woodpecker/publish.yml @@ -449,6 +449,14 @@ steps: depends_on: - build - verify + # #1411: publish-next-npm mutates workspace manifests in place during + # its transform window and restores them at step end. Any step that + # reads the pipeline workspace (kaniko COPY of manifests, later + # installs) must run AFTER publish-next-npm, never concurrently — + # pipeline 2648 raced a COPY inside the window and failed + # ERR_PNPM_OUTDATED_LOCKFILE despite a clean restore. This edge is the + # serialization invariant; add it to every new workspace consumer. + - publish-next-npm build-appservice: image: gcr.io/kaniko-project/executor:debug @@ -476,6 +484,14 @@ steps: depends_on: - build - verify + # #1411: publish-next-npm mutates workspace manifests in place during + # its transform window and restores them at step end. Any step that + # reads the pipeline workspace (kaniko COPY of manifests, later + # installs) must run AFTER publish-next-npm, never concurrently — + # pipeline 2648 raced a COPY inside the window and failed + # ERR_PNPM_OUTDATED_LOCKFILE despite a clean restore. This edge is the + # serialization invariant; add it to every new workspace consumer. + - publish-next-npm build-web: image: gcr.io/kaniko-project/executor:debug @@ -503,3 +519,11 @@ steps: depends_on: - build - verify + # #1411: publish-next-npm mutates workspace manifests in place during + # its transform window and restores them at step end. Any step that + # reads the pipeline workspace (kaniko COPY of manifests, later + # installs) must run AFTER publish-next-npm, never concurrently — + # pipeline 2648 raced a COPY inside the window and failed + # ERR_PNPM_OUTDATED_LOCKFILE despite a clean restore. This edge is the + # serialization invariant; add it to every new workspace consumer. + - publish-next-npm