chore: regenerate models from upstream schemas #14

Merged
stack72 merged 1 commit from automated/regenerate-models into main 2026-05-29 22:51:51 +00:00
Owner

Summary

Automated regeneration of extension models from upstream provider schemas.

Schema Sources

  • AWS: CloudFormation Resource Schema
  • GCP: Google Discovery Documents
  • Hetzner: Hetzner Cloud OpenAPI spec
  • DigitalOcean: DigitalOcean OpenAPI spec

Review Notes

  • Files under model/ are auto-generated — review the manifest.yaml diffs for version changes
  • CalVer versioning with content-based change detection ensures versions only bump when content changes
  • Publishing happens automatically when this PR is merged (via the publish workflow)
## Summary Automated regeneration of extension models from upstream provider schemas. ### Schema Sources - **AWS**: CloudFormation Resource Schema - **GCP**: Google Discovery Documents - **Hetzner**: Hetzner Cloud OpenAPI spec - **DigitalOcean**: DigitalOcean OpenAPI spec ### Review Notes - Files under `model/` are auto-generated — review the `manifest.yaml` diffs for version changes - CalVer versioning with content-based change detection ensures versions only bump when content changes - Publishing happens automatically when this PR is merged (via the publish workflow)
chore: regenerate models from upstream schemas (2026-05-29)
Some checks failed
CI / Dependency Audit (pull_request) Successful in 4m9s
CI / gcp models - lockfiles up to date (pull_request) Successful in 1m35s
CI / cve/dirtyfrag - check (pull_request) Has been skipped
CI / cve/dirtyfrag - fmt (pull_request) Has been skipped
CI / codegen - check (pull_request) Has been skipped
CI / model/hetzner-cloud - check (pull_request) Successful in 1m20s
CI / workflows/s3-bootstrap - lockfile up to date (pull_request) Has been skipped
CI / cve/dirtyfrag - lint (pull_request) Has been skipped
CI / cve/mini-shai-hulud - check (pull_request) Has been skipped
CI / Merge Gate (pull_request) Failing after 31s
CI / cve/dirtyfrag - test (pull_request) Has been skipped
CI / CI Security Review (pull_request) Has been skipped
CI / cve/mini-shai-hulud - lint (pull_request) Has been skipped
CI / cve/mini-shai-hulud - test (pull_request) Has been skipped
CI / cve/dirtyfrag - lockfile up to date (pull_request) Has been skipped
CI / codegen - fmt (pull_request) Has been skipped
CI / codegen - lint (pull_request) Has been skipped
CI / model/digitalocean - check (pull_request) Successful in 1m32s
CI / cve/mini-shai-hulud - fmt (pull_request) Has been skipped
CI / model/digitalocean - lockfile up to date (pull_request) Successful in 1m40s
CI / cve/mini-shai-hulud - lockfile up to date (pull_request) Has been skipped
CI / model/hetzner-cloud - lockfile up to date (pull_request) Successful in 1m31s
CI / codegen - lockfile up to date (pull_request) Has been skipped
CI / cloudflare models - lockfiles up to date (pull_request) Successful in 1m25s
CI / cloudflare models - sample check (pull_request) Successful in 1m38s
CI / aws models - lockfiles up to date (pull_request) Successful in 1m40s
CI / aws models - sample check (pull_request) Successful in 1m46s
CI / gcp models - sample check (pull_request) Successful in 2m0s
CI / Adversarial Code Review (pull_request) Has been skipped
CI / Claude Code Review (pull_request) Failing after 3m35s
98cdad222a
Author
Owner

Code Review

Blocking Issues

  1. Model files changed without corresponding codegen/ changes — All 30 changed files are under model/, and several TypeScript model files contain substantive content changes (new schema fields, new enum values, new regex patterns, a new resource type) — not merely version/upgrade entries. Per CLAUDE.md, the only legitimate cases for model/ changes are (1) codegen regeneration where codegen/ also changes, or (2) pure version bumps affecting only version, upgrades, and manifest. This PR matches neither case as written.

    That said, there is strong circumstantial evidence this is a legitimate automated upstream-schema regeneration run and not hand-editing: the commit was made by forgejo-actions[bot], the commit message is chore: regenerate models from upstream schemas (2026-05-29), every changed file carries the // Auto-generated … Do not edit manually header, and the content changes are self-consistent with upstream schema evolution (new CVSS v4 fields in GCP containeranalysis, new PUBLIC_AND_PRIVATE enum value in MWAA, new KmsKeyArn/VpcConfig fields in Lambda, new AWS::VerifiedPermissions::PolicyStoreAlias resource).

    To unblock: Confirm idempotency by re-running deno task generate:aws and deno task generate:gcp (or the full regeneration workflow) and verifying the output matches this PR exactly with no new diffs. If the regeneration workflow in .forgejo/workflows/regenerate-models.yml produced this commit automatically, that fact should be surfaced in the PR so reviewers can skip the blocking flag. Consider also updating CLAUDE.md to explicitly describe this third legitimate case (automated upstream-schema regeneration where the codegen pipeline itself is unchanged).

Suggestions

  1. CLAUDE.md clarification — The current rule only lists two legitimate cases for model-only changes and would flag every automated upstream-schema regeneration PR as a potential hand-edit. Adding a third case — "automated regeneration where the codegen pipeline is unchanged but upstream schemas changed" — would reduce false positives in future reviews.

  2. rule.ts regex change (^(?!aws:)[a-zA-Z+-=._:/]+$^[a-zA-Z+-=._:/]+$) — the negative lookahead preventing aws:-prefixed keys was removed in this regeneration. This appears to follow the upstream CloudFormation schema change, but it is a functional constraint relaxation worth noting in release notes or a comment if AWS's actual enforcement has also changed.

## Code Review ### Blocking Issues 1. **Model files changed without corresponding codegen/ changes** — All 30 changed files are under `model/`, and several TypeScript model files contain substantive content changes (new schema fields, new enum values, new regex patterns, a new resource type) — not merely version/upgrade entries. Per CLAUDE.md, the only legitimate cases for model/ changes are (1) codegen regeneration where codegen/ also changes, or (2) pure version bumps affecting only version, upgrades, and manifest. This PR matches neither case as written. That said, there is strong circumstantial evidence this is a legitimate automated upstream-schema regeneration run and not hand-editing: the commit was made by `forgejo-actions[bot]`, the commit message is `chore: regenerate models from upstream schemas (2026-05-29)`, every changed file carries the `// Auto-generated … Do not edit manually` header, and the content changes are self-consistent with upstream schema evolution (new CVSS v4 fields in GCP containeranalysis, new `PUBLIC_AND_PRIVATE` enum value in MWAA, new `KmsKeyArn`/`VpcConfig` fields in Lambda, new `AWS::VerifiedPermissions::PolicyStoreAlias` resource). **To unblock:** Confirm idempotency by re-running `deno task generate:aws` and `deno task generate:gcp` (or the full regeneration workflow) and verifying the output matches this PR exactly with no new diffs. If the regeneration workflow in `.forgejo/workflows/regenerate-models.yml` produced this commit automatically, that fact should be surfaced in the PR so reviewers can skip the blocking flag. Consider also updating CLAUDE.md to explicitly describe this third legitimate case (automated upstream-schema regeneration where the codegen pipeline itself is unchanged). ### Suggestions 1. **CLAUDE.md clarification** — The current rule only lists two legitimate cases for model-only changes and would flag every automated upstream-schema regeneration PR as a potential hand-edit. Adding a third case — "automated regeneration where the codegen pipeline is unchanged but upstream schemas changed" — would reduce false positives in future reviews. 2. **`rule.ts` regex change** (`^(?!aws:)[a-zA-Z+-=._:/]+$` → `^[a-zA-Z+-=._:/]+$`) — the negative lookahead preventing `aws:`-prefixed keys was removed in this regeneration. This appears to follow the upstream CloudFormation schema change, but it is a functional constraint relaxation worth noting in release notes or a comment if AWS's actual enforcement has also changed.
stack72 deleted branch automated/regenerate-models 2026-05-29 22:51:51 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
swamp-club/swamp-extensions!14
No description provided.