DevOps on Mengboy Tech Notes

OpenAI Responses + GitHub Actions PR Risk Gate: Automated Evals, Tiered Blocking, and One-Click Rollback

Mon, 16 Mar 2026 01:08:00 +0000

You don’t need an AI reviewer that “sounds smart.” You need a gate that stops risky PRs before they hit main.

This post shows a production-ready minimum setup: OpenAI Responses generates structured risk output, GitHub Actions enforces tiered policies, and critical failures can trigger a one-click rollback.

GitHub Actions + AI Agent Auto-Fix Pipeline: Failure Tiers, Regression Gates, and Security Guardrails

Fri, 27 Feb 2026 01:18:38 +0000

When CI keeps failing, the real risk is not “slow fixes” — it is “fast bad fixes.” This guide gives you a practical GitHub Actions + AI Agent auto-fix pipeline with failure tiering, strict edit boundaries, and merge-time gates.

Redis Distributed Lock Best Practices (with Common Misuse Cases)

Thu, 19 Feb 2026 09:55:00 +0800

In high-concurrency scenarios, distributed locks are essential for ensuring data consistency. However, many developers’ understanding of Redis distributed locks stops at “SETNX”, leading to frequent production incidents.

This article comprehensively covers the correct usage of Redis distributed locks from principles, implementation, common misuse cases to production-grade solutions.

Hugo Auto Deploy with GitHub Actions: Safe Config and Troubleshooting

Mon, 16 Feb 2026 11:59:00 +0800

Your local hugo build works, but GitHub Actions fails randomly. Classic. The root cause is usually not the workflow syntax. It is environment drift, missing permissions, and unstable dependencies.

WSL2 + Docker Network Troubleshooting: Fix DNS Timeouts and Image Pull Failures

Wed, 11 Feb 2026 22:50:00 +0800

If your WSL2 + Docker setup suddenly fails with docker pull timeouts, Temporary failure in name resolution, or containers that start but cannot access the internet, don’t nuke your environment yet. Most cases are recoverable in 15 minutes.

This guide gives you a practical sequence: identify whether the fault is DNS, proxy/VPN, virtual NIC, or Docker daemon config—then apply the smallest fix first.