ci: Major refactor of release-workflows#663

Merged

ko3n1g merged 37 commits into

mainfrom

ko3n1g/refactor/validate-only-release

May 11, 2026

Contributor

ko3n1g commented May 5, 2026 •

edited

Loading

Why

See the design discussion in NVIDIA-NeMo/FW-CI-templates#466.

What

Delete .github/workflows/build-test-publish-wheel.yml.
Rewrite .github/workflows/release.yaml as the single caller for both push and workflow_dispatch.

Test plan

PR validate-only (push (mirror), sha 2678fa8, 2026-05-07T11:27:33Z, success): https://github.com/NVIDIA-NeMo/Export-Deploy/actions/runs/25492994922
workflow_dispatch dry-run=true (sha 2678fa8, 2026-05-07T11:28:27Z, success): https://github.com/NVIDIA-NeMo/Export-Deploy/actions/runs/25493034766
Real release via workflow_dispatch dry-run=false on the next planned RC.

Rollout

Land FW-CI-templates#466.
Cut FW-CI-templates v1.0.0.
Bump the SHA pin in this PR → tag.


          [ci] refactor: consolidate per-PR + release workflows; use validate-o…

72feb03

…nly mode

See NVIDIA-NeMo/FW-CI-templates#466 for design discussion.

- Delete build-test-publish-wheel.yml.
- Rewrite release.{yml,yaml} as the single caller for both push and
  workflow_dispatch. validate-only derives from the trigger.
- One pin to FW-CI-templates governs PR rehearsal and real release.

Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g requested a review from a team as a code owner

May 5, 2026 08:55

github-actions Bot added the CI label

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 08:55

Failure

copy-pr-bot Bot had a problem deploying to test

May 5, 2026 08:55

Error

ko3n1g mentioned this pull request

feat: Major refactoring of the release-workflows NVIDIA-NeMo/FW-CI-templates#466

Merged

8 tasks

ko3n1g had a problem deploying to main

May 5, 2026 08:58

— with

GitHub Actions Failure

ko3n1g temporarily deployed to main

May 5, 2026 09:01

— with

GitHub Actions Inactive


          [ci] chore: bump FW-CI pin to slack-notify gate

8c7ff77

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to test

May 5, 2026 09:05

Error


          [ci] chore: bump FW-CI pin to step-level webhook gate

f111d41

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 09:08

Failure

copy-pr-bot Bot had a problem deploying to test

May 5, 2026 09:08

Error


          [ci] chore: bump FW-CI pin to manifest-skip + app-id optional

75dfe13

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 09:15

Failure

copy-pr-bot Bot temporarily deployed to test

May 5, 2026 09:15

Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 09:18

Error

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 09:18

Error

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 09:18

Error

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 09:18

Error


          [ci] chore: bump FW-CI pin to PAT-forwarding fix

82efb09

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 09:22

Failure

copy-pr-bot Bot had a problem deploying to test

May 5, 2026 09:23

Error


          [ci] chore: bump FW-CI pin to skip-wheel-build + advisory check-manifest

b9c4674

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 09:43

Failure

copy-pr-bot Bot had a problem deploying to test

May 5, 2026 09:43

Error


          [ci] chore: bump FW-CI pin to strict check-manifest

ae14cc1

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to main

May 5, 2026 09:49

Failure

copy-pr-bot Bot temporarily deployed to test

May 5, 2026 09:49

Inactive

copy-pr-bot Bot temporarily deployed to nemo-ci

May 5, 2026 10:04

Inactive

copy-pr-bot Bot temporarily deployed to public

May 5, 2026 17:31

Inactive

copy-pr-bot Bot temporarily deployed to test

May 5, 2026 17:32

Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 17:51

Error

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 17:51

Error

copy-pr-bot Bot had a problem deploying to nemo-ci

May 5, 2026 17:51

Error

ko3n1g and others added 10 commits

May 5, 2026 17:58


          refactor(release): bump FW-CI pin to a129c51 (notify Slack-link fix)

529e84c

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          fix(release): always run pre-flight (was skipped on dispatch)

57a1ff1

Why: skipping pre-flight on workflow_dispatch left runner_prefix
empty, so the release job requested runner '-gpu-x2-container'
(no leading prefix) which never gets a runner. The dispatch sat
queued for >15 min with zero jobs scheduled.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to aacccb4 (publish-wheel always runs)

81a9519

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to 5cca628 (notify/publish-docs/adm…

38eb30b

…in-check always on)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to a092192

148e6ad

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to 6afcae2 (build-docs root-dir)

296ff49

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to 2a43619 (docs-root-dir / docs-re…

f6c7994

…quirements-file)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to 2f00056 (Slack only on dispatch)

fd841f6

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci(changelog): bump FW-CI pin (HYBRID mode default) + add cp-title tr…

a6ec9f4

…ansformer

Why: HYBRID mode renders raw commits when no PR matches by
merge_commit_sha (helps release branches built via cherry-pick).
The transformer cleans up cp titles to show the inner PR title only.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          refactor(release): bump FW-CI pin to b57ebf9 ([skip ci] on bump commit)

4b6e97e

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>

Contributor Author

ko3n1g commented May 7, 2026

/ok to test 4b6e97e


          refactor(release): bump FW-CI pin to cb5e93b (notify env public for d…

a8dc0b6

…ry-run)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>

Contributor Author

ko3n1g commented May 7, 2026

/ok to test a8dc0b6

ko3n1g and others added 4 commits

May 7, 2026 08:44


          refactor(release): bump FW-CI pin to 43d259e + drop SLACK_WEBHOOK pas…

d9cd333

…sthrough

Why: SLACK_WEBHOOK now resolves at the env scope (public/main) so
the env-scoped secret value is used. No longer pass it as a
workflow_call secret.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci: bump FW-CI pin to d2f3dd3 + use secrets inherit

5d82a75

Lets env-scoped SLACK_WEBHOOK reach the notify job in the called workflow.

Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci: strip orphan secret keys after secrets inherit

1a19a4e

Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci: bump FW-CI pin to 64293f6 (slack render fix)

2678fa8

Signed-off-by: oliver könig <okoenig@nvidia.com>

Contributor Author

ko3n1g commented May 7, 2026

/ok to test 2678fa8

ko3n1g added 2 commits

May 7, 2026 20:14


          ci: pin FW-CI templates to v1.0.0

2a35769

Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci: pragma allowlist secret on 'secrets: inherit' lines

46c7028

Signed-off-by: oliver könig <okoenig@nvidia.com>

chtruong814 approved these changes

View reviewed changes

ko3n1g added 3 commits

May 8, 2026 08:19


          ci: simplify release-summary if-block (always() was dead code)

01c6092

Signed-off-by: oliver könig <okoenig@nvidia.com>


          ci: simplify release if-block (replace explicit success/skipped with …

138c54a

…!failure)

Signed-off-by: oliver könig <okoenig@nvidia.com>


          Merge branch 'main' into ko3n1g/refactor/validate-only-release

chtruong814 approved these changes

View reviewed changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI