Skip to content

Plugin compatibility sweep at workflow v0.52.x (post-#617 godo removal) #656

Closed

Description

@intel352

Tracking issue for plugin ecosystem compatibility against workflow v0.52.x (post-#617 godo removal cutover).

Current pin lag

Plugin Plugin version minEngineVersion go.mod pin
workflow-plugin-digitalocean 0.12.0 0.51.2 (current via #617 work)
workflow-plugin-audit-chain 0.2.2 0.51.5 likely current
workflow-plugin-payments 0.4.3 0.51.2 likely current
workflow-plugin-aws 0.1.0 missing v0.19.2
workflow-plugin-gcp 0.1.0 0.3.56 v0.19.2
workflow-plugin-azure 0.1.0 0.3.40 v0.19.2
workflow-plugin-tofu 0.1.0 0.3.51 v0.3.56
workflow-plugin-github 1.0.1 0.2.0 v0.3.56
workflow-plugin-gitlab 1.0.2 0.19.0 v0.19.0
workflow-plugin-agent 0.1.0 missing v0.10.2
workflow-plugin-ci-generator 0.1.0 0.19.0-alpha.5 pseudo-version

The bolded entries are >20 minor versions behind workflow v0.52.x.

Action matrix

Issue class Plugins affected Action
Strict-contracts not migrated aws, gcp, azure, agent, tofu, ci-generator, github (likely) Mirror DO plugin v1.0.1 force-cutover (memory: project_strict_contracts_cutover_complete). Each plugin needs its own typed-IaC migration PR. AWS already has tracking issue workflow-plugin-aws#8.
minEngineVersion missing aws, agent Add to plugin.json
go.mod workflow pin stale aws v0.19.2, gcp v0.19.2, azure v0.19.2, tofu v0.3.56, github v0.3.56, gitlab v0.19.0, agent v0.10.2 Bump to workflow v0.52.x and re-run tests; fix any breakage
Feature gaps aws (autoscaling_group — workflow-plugin-aws#9), digitalocean (step.iac_logs — #107, step.iac_scale — #108) In-flight as of 2026-05-13

Recommended sequencing

  1. Now (in-flight): workflow-plugin-aws#9, workflow-plugin-digitalocean#107, workflow-plugin-digitalocean#108 — concrete gap closures.
  2. Next: AWS plugin typed-IaC migration (workflow-plugin-aws#8) — same pattern as DO v1.0.1. After this, workflow#653 Phase 1 unblocks.
  3. Then: GCP + Azure plugins typed-IaC migrations (file as new issues against each repo if not yet tracked).
  4. Finally: Engine pin sweep — bump every plugin's go.mod pin to workflow v0.52.x + retest.

Filing this as the umbrella tracker. Sub-issues against individual plugins per the action matrix.

Generated as part of the post-#617 autonomous compatibility audit. 🤖

Activity

  1. intel352 commented on May 16, 2026

    @intel352
    ContributorAuthor

    Superseded by post-cloud-SDK plugin sweep landing at workflow v0.53.1; tracking 15 plugin PRs per docs/plans/2026-05-16-post-cloud-sdk-plugin-sweep.md. Original v0.52.x inventory in this issue is stale; the sweep picks up the actual current state. Closing-via-supersession when wave 1 + wave 2 complete.

  2. intel352 commented on May 16, 2026

    @intel352
    ContributorAuthor

    Sweep complete 2026-05-16. All 15 lagging plugins bumped to workflow v0.53.1:

    Plugin Old → New Notes
    payments v0.4.5 → v0.4.6 clean
    audit-chain v0.2.3 → v0.2.4 clean
    tofu (no release) → v0.1.3 FIRST GoReleaser-published release; in-line CI-fix PR migrated release.yml to ubuntu-latest per design Assumption #5 + azure PR #11 precedent (public repo + self-hosted runner group's allows_public_repositories=false block)
    ci-generator v0.1.3 → v0.1.4 clean
    github v1.0.3 → v1.0.4 clean
    gitlab v1.0.2 → v1.0.3 clean
    azure v1.1.1 → v1.1.2 pseudo-version pin → clean v0.53.1; defensive draft=false
    admin v1.0.0 → v1.0.1 shipped module-only; release-assets blocked by pre-existing npm 401 (@gocodealone/workflow-ui fetch); followup workflow-plugin-admin#13
    bento v1.1.2 → v1.1.3 defensive draft=false
    authz-ui v1.0.0 → v1.0.1 self-hosted runner (private repo)
    authz v0.5.3 → v0.5.4 wave-1-anchor; defensive draft=false
    eventbus v0.3.4 → v0.3.5 clean
    security v2.0.0 → v2.0.1 self-hosted runner; defensive draft=false
    supply-chain v0.4.0 → v0.4.1 self-hosted runner; defensive draft=false
    agent v0.9.2 → v0.9.3 WAVE 2 — DUAL-BUMP (workflow + workflow-plugin-authz both go.mod lines); 0 assets is expected (library plugin, no goreleaser binaries)

    Plan: docs/plans/2026-05-16-post-cloud-sdk-plugin-sweep.md (sha256 e6545d28a798…). Pipeline: brainstorming → adversarial-design-review (3 cycles) → writing-plans → adversarial-plan-review → alignment-check → scope-lock → subagent-driven-development. 15 PRs across 15 plugin repos (3-implementer parallel team).

    Remaining followups tracked separately:

    • workflow#640 v2 action lifecycle migration
    • gcp#6 + azure#4 host conformance after plugin protocol migration
    • catalog manifest-derivation refactor (172+ hardcoded type strings in schema/)
    • security-cadence cluster (waf v0.2.1 / sandbox v0.2.1 / data-protection v0.2.1 — all v0.3.56-era; separate cadence governance)
    • workflow-plugin-cloud-ui (no Go go.mod; React-only structural shape)
    • workflow-plugin-admin#13 npm auth fix
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions