bincraft's index build reads the ABI classifier cache to decide which packages
may be carried from the flat slot into a per-minor one. reindex.yaml and
weekly-rebuild-reindex.yaml never passed PGPASS, so that query fails:
Error: connection to server at "r-binaries.devxy.io" ...
fe_sendauth: no password supplied
It fails soft by design, so the run still reports success while quietly using an
empty cache-derived risky set. That is the exact state the cache was introduced
to fix, and it logs one connection error per slot while doing it.
build-all-versions.yaml already passes PGPASS, which is why the classification
looked correct there and not here.
pat-s
d582024e1a