fix: preserve invalidation across chained retargets (#165)

Co-authored-by: Franz Hemmer <8227352+HemSoft@users.noreply.github.com>

Author: HemSoft

.github/workflows/sfl-pr-review-auto.yml

@@ -1425,7 +1425,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     concurrency:
-      group: sfl-codex-review-pull-context-${{ github.repository }}-${{ github.event.pull_request.number }}
+      group: sfl-codex-review-pull-context-${{ github.repository }}-${{ github.event.pull_request.number }}-${{ github.event.pull_request.base.ref == github.event.repository.default_branch || github.event.changes.base.ref.from == github.event.repository.default_branch }}
       cancel-in-progress: true
     permissions:
       actions: read

VERSION

@@ -1 +1 @@
-2.1.0-rc.28
+2.1.0-rc.29

deployment/infrastructure/sfl-pr-review-auto.yml

@@ -1425,7 +1425,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     concurrency:
-      group: sfl-codex-review-pull-context-${{ github.repository }}-${{ github.event.pull_request.number }}
+      group: sfl-codex-review-pull-context-${{ github.repository }}-${{ github.event.pull_request.number }}-${{ github.event.pull_request.base.ref == github.event.repository.default_branch || github.event.changes.base.ref.from == github.event.repository.default_branch }}
       cancel-in-progress: true
     permissions:
       actions: read

deployment/release-metadata.json

@@ -3,9 +3,9 @@
   "reviewedAt": "2026-10-08",
   "distribution": {
     "repository": "hemsoft-dev/set-it-free-loop",
-    "version": "2.1.0-rc.28",
+    "version": "2.1.0-rc.29",
     "visibility": "private",
-    "tag": "v2.1.0-rc.28",
+    "tag": "v2.1.0-rc.29",
     "prerelease": true
   },
   "reviewerRuntime": {

deployment/tests/test-final-review-history.cjs

@@ -211,6 +211,31 @@ function retargetCases() {
   assert.equal(event('main','release'),true,'retarget to default remains supported');
   assert.equal(event('release',undefined),false,'missing original base cannot grant admission');
   assert.equal(event('release','main','fork/fixture'),false,'fork remains unsupported');
+
+  const job = source.slice(source.indexOf('\n  invalidate-pull-context:'),
+    source.indexOf('\n  invalidate-base-advance:'));
+  const group = /^      group: (.+)$/m.exec(job);
+  assert(group, 'pull-context invalidation concurrency group');
+  assert.match(job, /cancel-in-progress: true/);
+  const evaluateGroup = (ref, from, number=42) => {
+    const github = {repository:'hemsoft-dev/fixture',event:{
+      repository:{default_branch:'main'},pull_request:{number,base:{ref}},
+      changes:{base:{ref:{from}}}}};
+    return group[1].replace(/\$\{\{\s*(.*?)\s*\}\}/g, (_, expression) =>
+      String(new Function('github', `return (${expression});`)(github)));
+  };
+  const departure = evaluateGroup('release','main');
+  // Both running and pending jobs can be canceled by another event in their
+  // group. A chain returning to the same nondefault target must stay separate.
+  for (const [ref, from] of [['other','release'],['release','other']]) {
+    assert.equal(event(ref,from),false,'unsupported chained retarget stays read-only');
+    assert.notEqual(evaluateGroup(ref,from),departure,
+      'unsupported chained retarget cannot cancel default-departure invalidation');
+  }
+  assert.equal(evaluateGroup('main','release'),departure,
+    'supported contexts share the same invalidation serialization');
+  assert.notEqual(evaluateGroup('release','main',43),departure,
+    'different pull requests retain separate invalidation groups');
 }
 
 const repairStart = source.indexOf('const terminalState = await publicationState();');

docs/ORGANIZATION-ONBOARDING.md

@@ -4,7 +4,7 @@ The canonical source is [hemsoft-dev/set-it-free-loop](https://github.com/hemsof
 
 ## New repository
 
-Install the [checksum-verified canonical release](https://github.com/hemsoft-dev/set-it-free-loop/releases/tag/v2.1.0-rc.28). With repository write access, run `gh sfl init --repo hemsoft-dev/REPOSITORY --pr`. The default tier is reviewer. Add owner-bound `.github/CODEOWNERS` only when no CODEOWNERS already exists, keeping it separate from SFL managed files. Review and merge the deployment PR, then run `gh sfl gate --repo hemsoft-dev/REPOSITORY`. Run a registered `gh sfl review --repo hemsoft-dev/REPOSITORY --pr NUMBER` on an actual consumer PR. Inspect the current head/base and successful Actions-owned gate before merging.
+Install the [checksum-verified canonical release](https://github.com/hemsoft-dev/set-it-free-loop/releases/tag/v2.1.0-rc.29). With repository write access, run `gh sfl init --repo hemsoft-dev/REPOSITORY --pr`. The default tier is reviewer. Add owner-bound `.github/CODEOWNERS` only when no CODEOWNERS already exists, keeping it separate from SFL managed files. Review and merge the deployment PR, then run `gh sfl gate --repo hemsoft-dev/REPOSITORY`. Run a registered `gh sfl review --repo hemsoft-dev/REPOSITORY --pr NUMBER` on an actual consumer PR. Inspect the current head/base and successful Actions-owned gate before merging.
 
 Repeat init/sync through `--pr` and confirm no additional changes. `gh sfl status --repo hemsoft-dev/REPOSITORY` reports the deployed version, source pin, managed file drift and effective gate. Status alone does not turn an advisory deployment into a required gate.
 

sfl.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.1.0-rc.28",
+  "version": "2.1.0-rc.29",
   "deployedAt": "2026-02-22T22:00:00Z",
   "tier": "full",
   "source": "hemsoft-dev/set-it-free-loop",