Skip to content

fix(ci): back off OCM release asset retries#102996

Merged
steipete merged 1 commit into
mainfrom
codex/performance-ocm-backoff
Jul 9, 2026
Merged

fix(ci): back off OCM release asset retries#102996
steipete merged 1 commit into
mainfrom
codex/performance-ocm-backoff

Conversation

@steipete

@steipete steipete commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

What Problem This Solves

Fixes an issue where release performance validation could fail before exercising OpenClaw because the pinned OCM release asset returned a transient HTTP 504. The workflow retried only three times at fixed one-second intervals, so every attempt could hit the same unhealthy CDN/egress window.

This happened twice in performance run 29032864140: each attempt received four 504 responses and produced no Kova metrics or artifacts. A third attempt later downloaded the same asset successfully, and concurrent Blacksmith runners also split between success and 504 for the identical URL.

Why This Change Was Made

The checksum-pinned, idempotent download now gets eight retries over a bounded 180-second retry window, uses curl's default backoff instead of a fixed one-second retry storm, and retries all transport errors including refused connections. The existing SHA-256 verification remains mandatory before extraction.

No mirrors, cache-busters, unpinned versions, or alternate binaries are introduced.

User Impact

No product runtime change. Release performance checks are more resilient to short GitHub release-asset CDN or runner-egress outages without weakening supply-chain verification.

Evidence

  • Exact asset metadata still reports version v0.2.15, asset id 410473079, size 2617319, and digest sha256:b849b8de5d77e97e0df9319703254ae95e29d7f26a7552ea79bf173ff110ea0a, matching the workflow pin.
  • An independent authenticated asset download produced the same SHA-256.
  • git diff --check passed.
  • node scripts/check-workflows.mjs passed zizmor and the repository workflow interpolation guard.
  • Final autoreview --mode local reported no accepted/actionable findings (patch is correct, confidence 0.98).

@steipete steipete self-assigned this Jul 9, 2026
@openclaw-barnacle openclaw-barnacle Bot added size: XS maintainer Maintainer-authored PR labels Jul 9, 2026
@clawsweeper

clawsweeper Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

ClawSweeper status: review started.

I am starting a fresh review of this pull request: fix(ci): back off OCM release asset retries This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.

@steipete

steipete commented Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

Land-ready at exact head a6d1e710697caa91f51abf396a2e00e17668c3b5.

Proof:

  • PR CI 29033592514: 43 passed, 12 expected scope skips, zero failures/cancellations.
  • Workflow Sanity 29033592559: actionlint and no-tabs passed; generated baselines correctly skipped.
  • CI security-fast/zizmor, check-guards, and every check-additional-* guard lane passed.
  • node scripts/check-workflows.mjs passed zizmor and the repository workflow interpolation guard; git diff --check passed.
  • The exact pinned OCM asset metadata and an independent authenticated download both matched SHA-256 b849b8de5d77e97e0df9319703254ae95e29d7f26a7552ea79bf173ff110ea0a.
  • Final structured autoreview: no accepted/actionable findings (patch is correct, confidence 0.98).

The change is release-workflow-only and preserves the existing fail-closed checksum gate. Post-land performance proof will run at the final release SHA.

@steipete
steipete merged commit 372b527 into main Jul 9, 2026
96 of 98 checks passed
@steipete
steipete deleted the codex/performance-ocm-backoff branch July 9, 2026 16:38
@steipete

steipete commented Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

Merged via squash.

Simon-XYDT pushed a commit to Simon-XYDT/openclaw that referenced this pull request Jul 9, 2026
github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jul 10, 2026
RomneyDa pushed a commit that referenced this pull request Jul 13, 2026
wheakerd pushed a commit to wheakerd/clawdbot that referenced this pull request Jul 15, 2026
(cherry picked from commit 372b527)
(cherry picked from commit 4e51372)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintainer Maintainer-authored PR size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant