Skip to content

fix(repository-sync): retry transient x509 failures - #66

Merged
Jared Holgate (jaredfholgate) merged 2 commits into
mainfrom
jaredfholgate-retry-intermittent-x509-failures
Aug 14, 2026
Merged

fix(repository-sync): retry transient x509 failures#66
Jared Holgate (jaredfholgate) merged 2 commits into
mainfrom
jaredfholgate-retry-intermittent-x509-failures

Conversation

@jaredfholgate

Copy link
Copy Markdown
Member

Summary

  • classify transient GitHub TLS/x509 certificate failures in the shared retry helper
  • route repository sync gh api, clone, PR create, and PR merge operations through bounded incremental retries
  • preserve deterministic 403/404 handling and add unit coverage for retry/no-retry behavior

Failure investigated

The scheduled repository-management run failed across multiple jobs and different GitHub CLI operations with intermittent certificate-name validation errors:

https://github.com/Azure/azure-verified-modules-tools/actions/runs/31580494242

Validation

./build.ps1 pre-commit

@github-code-quality

github-code-quality Bot commented Aug 12, 2026

Copy link
Copy Markdown

Code Coverage Overview

Languages: PowerShell

PowerShell / code-coverage-agent

The overall coverage in commit 454bdac in the jaredfholgate-retry-... branch remains at 89%, unchanged from commit f5e0383 in the main branch.


Updated August 14, 2026 08:42 UTC

@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown

Test results

   12 files  +  6    579 suites  +33   12m 13s ⏱️ + 6m 26s
1 013 tests + 25  1 011 ✅ + 23   2 💤 +2  0 ❌ ±0 
3 084 runs  +114  3 055 ✅ +108  29 💤 +6  0 ❌ ±0 

Results for commit 454bdac. ± Comparison against base commit f5e0383.

♻️ This comment has been updated with latest results.

Route GitHub CLI calls through the shared retry helper and classify transient TLS certificate errors without masking deterministic API failures.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 6b45b3be-c5ef-4f9e-bfb4-5677c3f7adbc
Retry mapotf transform only for recognized provider network failures, with bounded incremental backoff. Keep deterministic errors immediate and clean backups only after success.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 6b45b3be-c5ef-4f9e-bfb4-5677c3f7adbc
@jaredfholgate
Jared Holgate (jaredfholgate) merged commit 5d15776 into main Aug 14, 2026
16 checks passed
@jaredfholgate
Jared Holgate (jaredfholgate) deleted the jaredfholgate-retry-intermittent-x509-failures branch August 14, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants