ci: Major refactor of release-workflows by ko3n1g · Pull Request #2127 · NVIDIA-NeMo/Automodel

ko3n1g · 2026-05-05T08:54:52Z

Why

See the design discussion in NVIDIA-NeMo/FW-CI-templates#466.

What

Delete .github/workflows/build-test-publish-wheel.yml.
Rewrite .github/workflows/release.yml as the single caller for both push and workflow_dispatch.

Test plan

PR validate-only (push (mirror), sha 8b7e77b, 2026-05-07T11:27:49Z, success): https://github.com/NVIDIA-NeMo/Automodel/actions/runs/25493006651
workflow_dispatch dry-run=true (sha 8b7e77b, 2026-05-07T11:28:57Z, success): https://github.com/NVIDIA-NeMo/Automodel/actions/runs/25493055938
Real release via workflow_dispatch dry-run=false on the next planned RC.

Rollout

Land FW-CI-templates#466.
Cut FW-CI-templates v1.0.0.
Bump the SHA pin in this PR → tag.

…nly mode See NVIDIA-NeMo/FW-CI-templates#466 for design discussion. - Delete build-test-publish-wheel.yml. - Rewrite release.{yml,yaml} as the single caller for both push and workflow_dispatch. validate-only derives from the trigger. - One pin to FW-CI-templates governs PR rehearsal and real release. Signed-off-by: oliver könig <okoenig@nvidia.com>

Signed-off-by: oliver könig <okoenig@nvidia.com>

…ered rehearsal Signed-off-by: oliver könig <okoenig@nvidia.com>

Signed-off-by: oliver könig <okoenig@nvidia.com>

Why: FW-CI-templates dropped GPG signing; SSH_KEY/SSH_PWD secrets no longer needed by the release pipeline. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

…in-check always on) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

…quirements-file) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

…ansformer Why: HYBRID mode renders raw commits when no PR matches by merge_commit_sha (helps release branches built via cherry-pick). The transformer cleans up cp titles to show the inner PR title only. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g · 2026-05-07T08:26:38Z

/ok to test 86dcf76

…ry-run) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g · 2026-05-07T08:28:16Z

/ok to test aa05ffc

…sthrough Why: SLACK_WEBHOOK now resolves at the env scope (public/main) so the env-scoped secret value is used. No longer pass it as a workflow_call secret. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

Lets env-scoped SLACK_WEBHOOK reach the notify job in the called workflow. Signed-off-by: oliver könig <okoenig@nvidia.com>

Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g · 2026-05-07T11:28:58Z

/ok to test 8b7e77b

Signed-off-by: oliver könig <okoenig@nvidia.com>

…!failure) Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g requested a review from a team as a code owner May 5, 2026 08:54

copy-pr-bot Bot temporarily deployed to main May 5, 2026 08:55 Inactive

copy-pr-bot Bot temporarily deployed to nemo-ci May 5, 2026 08:55 Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci May 5, 2026 08:55 Error

copy-pr-bot Bot had a problem deploying to test May 5, 2026 08:55 Error

ko3n1g mentioned this pull request May 5, 2026

feat: Major refactoring of the release-workflows NVIDIA-NeMo/FW-CI-templates#466

Merged

8 tasks

copy-pr-bot Bot temporarily deployed to public May 5, 2026 08:57 Inactive

ko3n1g temporarily deployed to main May 5, 2026 08:57 — with GitHub Actions Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci May 5, 2026 08:59 Error

ko3n1g temporarily deployed to public May 5, 2026 09:01 — with GitHub Actions Inactive

ko3n1g had a problem deploying to public May 5, 2026 09:02 — with GitHub Actions Failure

[ci] chore: bump FW-CI pin to slack-notify gate

b2f8762

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot had a problem deploying to test May 5, 2026 09:05 Error

copy-pr-bot Bot had a problem deploying to nemo-ci May 5, 2026 09:05 Error

copy-pr-bot Bot temporarily deployed to nemo-ci May 5, 2026 09:05 Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci May 5, 2026 09:05 Error

[ci] chore: bump FW-CI pin to step-level webhook gate

f1f8394

Signed-off-by: oliver könig <okoenig@nvidia.com>

copy-pr-bot Bot temporarily deployed to test May 5, 2026 09:07 Inactive

copy-pr-bot Bot temporarily deployed to main May 5, 2026 09:07 Inactive

copy-pr-bot Bot had a problem deploying to nemo-ci May 5, 2026 09:08 Error

copy-pr-bot Bot temporarily deployed to nemo-ci May 5, 2026 09:08 Inactive

ko3n1g and others added 17 commits May 5, 2026 10:59

[ci] chore: bump FW-CI pin + default publish-docs=true for push-trigg…

6fcd068

…ered rehearsal Signed-off-by: oliver könig <okoenig@nvidia.com>

[ci] chore: default publish-docs=true to rehearse build-docs on PR push

302c9c1

Signed-off-by: oliver könig <okoenig@nvidia.com>

[ci] chore: bump FW-CI pin (drop hatch support)

e656685

Signed-off-by: oliver könig <okoenig@nvidia.com>

[ci] chore: bump FW-CI pin (drop PAT support)

4987b0f

Signed-off-by: oliver könig <okoenig@nvidia.com>

[ci] chore: drop PAT secret (now unused after FW-CI App-only refactor)

81bc0af

Signed-off-by: oliver könig <okoenig@nvidia.com>

[ci] chore: bump FW-CI pin (GPG optional)

aae5f4b

Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin; drop SSH_KEY/SSH_PWD

a6fa36c

Why: FW-CI-templates dropped GPG signing; SSH_KEY/SSH_PWD secrets no longer needed by the release pipeline. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to ee3b849 for wheel-content-ignore

afbd6b6

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to a129c51 (notify Slack-link fix)

f7234d5

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to aacccb4 (publish-wheel always runs)

c2ced8f

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to 5cca628 (notify/publish-docs/adm…

fc77c42

…in-check always on) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to a092192

cc7aabd

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to 6afcae2 (build-docs root-dir)

334dfc0

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to 2a43619 (docs-root-dir / docs-re…

577e3c4

…quirements-file) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to 2f00056 (Slack only on dispatch)

8ab2a9f

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to b57ebf9 ([skip ci] on bump commit)

86dcf76

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

refactor(release): bump FW-CI pin to cb5e93b (notify env public for d…

aa05ffc

…ry-run) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g and others added 4 commits May 7, 2026 08:44

ci: bump FW-CI pin to d2f3dd3 + use secrets inherit

3e0c08c

Lets env-scoped SLACK_WEBHOOK reach the notify job in the called workflow. Signed-off-by: oliver könig <okoenig@nvidia.com>

ci: strip orphan secret keys after secrets inherit

138af65

Signed-off-by: oliver könig <okoenig@nvidia.com>

ci: bump FW-CI pin to 64293f6 (slack render fix)

8b7e77b

Signed-off-by: oliver könig <okoenig@nvidia.com>

ko3n1g added 2 commits May 7, 2026 20:14

ci: pin FW-CI templates to v1.0.0

26293a4

Signed-off-by: oliver könig <okoenig@nvidia.com>

ci: pragma allowlist secret on 'secrets: inherit' lines

6d793a9

Signed-off-by: oliver könig <okoenig@nvidia.com>

chtruong814 previously approved these changes May 7, 2026

View reviewed changes

ko3n1g added 2 commits May 8, 2026 08:20

ci: simplify release-summary if-block (always() was dead code)

ba16a81

Signed-off-by: oliver könig <okoenig@nvidia.com>

ci: simplify release if-block (replace explicit success/skipped with …

f899b0c

…!failure) Signed-off-by: oliver könig <okoenig@nvidia.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci: Major refactor of release-workflows#2127

ci: Major refactor of release-workflows#2127
ko3n1g wants to merge 34 commits intomainfrom
ko3n1g/refactor/validate-only-release

ko3n1g commented May 5, 2026 •

edited

Loading

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

ko3n1g commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Why

What

Test plan

Rollout

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

ko3n1g commented May 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ko3n1g commented May 5, 2026 •

edited

Loading