From 8625aa0ad22c71ff64ccc58764169e739002330f Mon Sep 17 00:00:00 2001
From: Sayt-0 <louis-dalmorocompta@docker.com>
Date: Tue, 25 Aug 2026 11:13:21 +0200
Subject: [PATCH] fix(update-consumers): exclude the action repos from
 discovery

The code-search query in update-consumers.yml contains the search
pattern as a literal string, so discovery matched the action repo
itself and the sed re-pin would have destroyed the query line in a
self-addressed PR. Latent since the self-review caller moved to a
local ref; caught by the first live dry run. Exclude both action
repos from the discovery lines, mirroring the migrate-consumers guard.
---
 .github/workflows/update-consumers.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/workflows/update-consumers.yml b/.github/workflows/update-consumers.yml
index 7e9fcf5..1a2e60f 100644
--- a/.github/workflows/update-consumers.yml
+++ b/.github/workflows/update-consumers.yml
@@ -121,6 +121,19 @@ jobs:
             exit 0
           fi
 
+          # Never update the action repos themselves: their workflow files
+          # contain this workflow's own search string as a literal (e.g. the
+          # code-search query above), which the sed below would destroy. The
+          # old cagent-action repo is excluded for the same reason — it holds
+          # a copy of these workflows. Same guard as migrate-consumers.yml,
+          # adapted to the "repo file_path" discovery lines.
+          REPOS=$(printf '%s\n' "$REPOS" | grep -vE '^docker/(docker-agent-action|cagent-action) ' || true)
+
+          if [ -z "$REPOS" ]; then
+            echo "No consumer repos found after exclusions."
+            exit 0
+          fi
+
           echo "Found consumer repos:"
           echo "$REPOS"
           echo ""