Distillation

Date: Sep 8, 2026

• 🟡 (10:13) .github/workflows/auto-approve.yml defines workflow auto-approve non-sdks, triggered on newly opened issues (issues.types: [opened]), with contents: read permission and an auto-approve job on ubuntu-latest.
• 🟡 (10:13) auto-approve runs only when github.actor is sentry-release-bot[bot] or getsantry[bot] and github.event.issue.title starts with publish: .
• 🟡 (10:13) .github/workflows/auto-approve.yml checks out only auto-approve-repos.txt using actions/checkout@v4, sparse-checkout: auto-approve-repos.txt, and sparse-checkout-cone-mode: false; obtains a GitHub App token through actions/create-github-app-token@v3 using vars.SENTRY_INTERNAL_APP_ID and secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY.
• 🟡 (10:13) The auto-approval script sets GH_TOKEN to ${{ steps.token.outputs.token }}, reads ISSUE_TITLE and ISSUE_URL, extracts REPO with sed -n 's/^publish: \(.*\)@.*/\1/p', and runs gh issue edit "$ISSUE_URL" --add-label accepted only if the extracted repository is nonempty and exactly matches a line in auto-approve-repos.txt via grep -qxF.
• 🟡 (10:13) package.json identifies the private publish package, version 0.0.1, as an “Approval-based publishing system for Sentry”; repository git@github.com:getsentry/publish.git; author Sentry Open Source <oss@sentry.io>; license Apache-2.0.
• 🟡 (10:13) package.json Volta pins Node 24.0.0 and Yarn 1.22.22; resolution undici: ^6.23.0; scripts are test: vitest run, test:watch: vitest, lint: eslint src .github --ignore-pattern '!.github', and prettier: prettier --write src.
• 🟡 (10:13) package.json devDependencies are eslint ^8.9.0, eslint-config-prettier ^8.3.0, eslint-plugin-yml ^0.13.0, prettier ^2.2.1, and vitest ^4.1.0; dependencies are @actions/core ^2.0.0, @actions/github ^7.0.0, and @sentry/node ^10.0.0.
• 🟡 (10:13) yarn/Vitest command vitest run --printConsoleTrace passed all 12 test files and all 54 tests in 1.77s (transform 291ms, setup 0ms, import 1.09s, tests 261ms, environment 2ms; Yarn completed in 2.35s).
• 🟡 (10:13) Passing test files/counts: src/publish/__tests__/validate-approval-attestation.js (8), src/modules/__tests__/approval-attestation.js (5), src/publish/__tests__/current-accepted-event.js (2), src/modules/__tests__/approval-authorizer.js (14), src/modules/__tests__/process-end-state.js (4), src/publish/__tests__/authorize-approval.js (3), src/modules/__tests__/post-workflow-details.js (1), src/modules/__tests__/update-issue.js (6), src/publish/__tests__/record-ci-ready-attestation.js (3), src/modules/__tests__/details-from-context.js (5), src/libs/__tests__/github.js (2), and src/publish/__tests__/ci-poller-workflow.js (1).
• 🟡 (10:14) Lint command eslint src .github --ignore-pattern '!.github' failed with exit code 1 because .github/workflows/cocoapods-keepalive.yml:1:7 violates yml/plain-scalar: “Must use plain style scalar.” It reported 1 error, 0 warnings; the error is potentially fixable with --fix.