Skip to main content

v2.86.2

Binaries and the merged-pull-request list are on the GitHub releases page.

A slow token endpoint no longer fails the lane​

In GitHub Actions, a remote run authenticates by asking the Actions token endpoint for an OIDC token and exchanging it with Orunbase. orun made that request once, with a 10 s timeout. On a spot runner the endpoint once took longer than that, and the lane failed before it claimed any job:

✕ remote state auth (oidc exchange): requesting OIDC token: Get "https://…actions.githubusercontent.com/…": context deadline exceeded (Client.Timeout exceeded while awaiting headers)

From this release orun makes up to four attempts, 1 s, 2 s and 4 s apart, when the request gets no answer (a timeout, a reset connection) or GitHub answers 429 or 5xx. Everything else still fails at once, because retrying cannot change it:

  • a missing ACTIONS_ID_TOKEN_REQUEST_URL (no id-token: write);
  • any other status;
  • an answer without a token.

An error after retries says how many attempts were made. The retries stop when the run's context ends.

Found by an audit of orun-cloud's runs on production (saas-live-runs LR13).