From cd11e9e934c80c886f339d08e80494fdfda777e4 Mon Sep 17 00:00:00 2001 From: sim Date: Tue, 10 Nov 2026 08:46:50 -0500 Subject: [PATCH] ci: pin the Codex review job to ubuntu-24.04 ubuntu-latest now resolves to the ubuntu-26.04 image for this job, and codex-action's drop-sudo step fails there with "Could not restrict access to /run/dbus/system_bus_socket", so Codex never starts and the check fails on every pull request. This is upstream issue openai/codex-action#188 (fix proposed in #191). Pin the job to ubuntu-24.04 until a codex-action release ships the fix. --- .github/workflows/codex-review.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/codex-review.yml b/.github/workflows/codex-review.yml index 4a2458f..ab32acb 100644 --- a/.github/workflows/codex-review.yml +++ b/.github/workflows/codex-review.yml @@ -16,7 +16,12 @@ permissions: jobs: codex-review: name: Codex Code Review - runs-on: ubuntu-latest + # Pinned to ubuntu-24.04: codex-action's drop-sudo step fails on the + # ubuntu-26.04 image that ubuntu-latest now resolves to ("Could not + # restrict access to /run/dbus/system_bus_socket"), so Codex never + # starts. Upstream: openai/codex-action#188 (fix proposed in #191). + # Return to ubuntu-latest once a codex-action release ships the fix. + runs-on: ubuntu-24.04 continue-on-error: true # v2.1.4 BL-332: cap the whole job at 20 minutes. Historical max for # the `Run Codex Review` step on this repo is ~3-4 minutes; 20