tighten wheel size limits, expand CI-skipping logic, other small build changes (#804)

Proposes a batch of miscellaneous build / packaging / CI changes.

## Changes

### Tightens wheel size limits

Contributes to rapidsai/build-planning#219

CUDA 13 wheels can be as much as 50% smaller than the equivalent CUDA 12 wheels, because of some new compression features in `nvcc`.

To ensure surprising package-size growth is caught in CI, this PR tightens the limits in the following ways:

* setting different limits based on CUDA major version where package size differs significantly
* setting `libcuopt` limits to `{compressed_size} + 50Mi`, rounded to the nearest 5Mi
* setting all other limits to `{compressed_size} + 10Mi`, rounded to the nearest 5Mi

### Expands CI-skipping logic

Contributes to rapidsai/build-planning#243

Tries to avoid unnecessary CI runs by making the CI-skipping rules finer-grained. For example, PRs that only touch `.pre-commit-config.yaml` should now not require any runners with GPUs 😁 

### Removes some reliance on `pypi.nvidia.com`

Contributes to rapidsai/build-planning#241

```shell
git grep -i -E 'pypi\.nvidia\.com'
git grep -i -E 'rapids\-init\-pip'
```

And removed/updated all relevant references. This project does not need any wheels from `pypi.nvidia.com` at build-time or runtime, it can safely avoid searching that index.

Its own packages are not available on `pypi.org` though, so uses of `pypi.nvidia.com` in docs are preserved here.

### Enforces PEP 639 license metadata in `pyproject.toml`

Contributes to rapidsai/pre-commit-hooks#95

Authors:
  - James Lamb (https://github.com/jameslamb)

Approvers:
  - Ramakrishnap (https://github.com/rgsl888prabhu)

URL: #804

Author: jameslamb

.github/workflows/pr.yaml

@@ -111,66 +111,145 @@ jobs:
     uses: rapidsai/shared-workflows/.github/workflows/changed-files.yaml@main
     with:
       files_yaml: |
-        test_cpp:
+        build_docs:
           - '**'
-          - '!CONTRIBUTING.md'
-          - '!README.md'
-          - '!ci/release/update-version-cuopt.sh'
-          - '!ci/release/update-version-rapids.sh'
-          - '!docs/**'
-          - '!img/**'
-          - '!notebooks/**'
-          - '!python/**'
-          - '!readme_pages/**'
+          - '!.ai/**'
+          - '!.coderabbit.yaml'
+          - '!.github/AGENTS.md'
+          - '!.github/CODE_OF_CONDUCT.md'
+          - '!.github/CODEOWNERS'
+          - '!.github/ISSUE_TEMPLATE/**'
+          - '!.github/PULL_REQUEST_TEMPLATE.md'
+          - '!.github/SECURITY.md'
+          - '!.github/.ai/**'
+          - '!.github/.coderabbit_review_guide.md'
+          - '!.github/agents/**'
+          - '!.github/copy-pr-bot.yaml'
+          - '!.github/ops-bot.yaml'
+          - '!.pre-commit-config.yaml'
+          - '!ci/build_wheel*.sh'
+          - '!ci/check_style.sh'
+          - '!ci/release/**'
+          - '!ci/run_ctests.sh'
+          - '!ci/run_*.pytests.sh'
+          - '!ci/test_cpp*.sh'
+          - '!ci/test_notebooks.sh'
+          - '!ci/test_python.sh'
+          - '!ci/test_self_hosted_service.sh'
+          - '!ci/test_wheel*.sh'
           - '!container-builder/**'
-          - '!helm-chart/**'
+          - '!helmchart/**'
           - '!ngc/**'
-          - '!omniverse/**'
-          - '!regression/**'
-          - '!resources/**'
+          - '!sonar-project.properties'
+          - '!sonarqube/**'
           - '!ucf/**'
           - '!utilities/**'
-        test_notebooks:
-          - '**'
-          - '!CONTRIBUTING.md'
-          - '!README.md'
-          - '!ci/release/update-version-cuopt.sh'
-          - '!ci/release/update-version-rapids.sh'
-          - '!docs/**'
-          - '!python/nvcf_client/**'
-        test_python:
+        test_cpp:
           - '**'
           - '!CONTRIBUTING.md'
           - '!README.md'
-          - '!ci/release/update-version-cuopt.sh'
-          - '!ci/release/update-version-rapids.sh'
+          - '!.ai/**'
+          - '!.coderabbit.yaml'
+          - '!.github/AGENTS.md'
+          - '!.github/CODE_OF_CONDUCT.md'
+          - '!.github/CODEOWNERS'
+          - '!.github/ISSUE_TEMPLATE/**'
+          - '!.github/PULL_REQUEST_TEMPLATE.md'
+          - '!.github/SECURITY.md'
+          - '!.github/.ai/**'
+          - '!.github/.coderabbit_review_guide.md'
+          - '!.github/agents/**'
+          - '!.github/copy-pr-bot.yaml'
+          - '!.github/ops-bot.yaml'
+          - '!.pre-commit-config.yaml'
+          - '!ci/build_docs.sh'
+          - '!ci/build_python.sh'
+          - '!ci/build_wheel*.sh'
+          - '!ci/check_style.sh'
+          - '!ci/release/**'
+          - '!ci/test_python.sh'
+          - '!ci/test_self_hosted_service.sh'
+          - '!ci/test_wheel*.sh'
+          - '!container-builder/**'
           - '!docs/**'
+          - '!helmchart/**'
           - '!img/**'
+          - '!ngc/**'
           - '!notebooks/**'
-          - '!python/nvcf_client/**'
-        test_python_cuopt:
+          - '!python/**'
+          - '!sonar-project.properties'
+          - '!sonarqube/**'
+          - '!ucf/**'
+          - '!utilities/**'
+        test_python_conda:
           - '**'
           - '!CONTRIBUTING.md'
           - '!README.md'
-          - '!ci/release/update-version-cuopt.sh'
-          - '!ci/release/update-version-rapids.sh'
+          - '!.ai/**'
+          - '!.coderabbit.yaml'
+          - '!.github/AGENTS.md'
+          - '!.github/CODE_OF_CONDUCT.md'
+          - '!.github/CODEOWNERS'
+          - '!.github/ISSUE_TEMPLATE/**'
+          - '!.github/PULL_REQUEST_TEMPLATE.md'
+          - '!.github/SECURITY.md'
+          - '!.github/.ai/**'
+          - '!.github/.coderabbit_review_guide.md'
+          - '!.github/agents/**'
+          - '!.github/copy-pr-bot.yaml'
+          - '!.github/ops-bot.yaml'
+          - '!.pre-commit-config.yaml'
+          - '!ci/build_docs.sh'
+          - '!ci/build_wheel*.sh'
+          - '!ci/check_style.sh'
+          - '!ci/release/**'
+          - '!ci/test_self_hosted_service.sh'
+          - '!ci/test_wheel*.sh'
+          - '!container-builder/**'
           - '!docs/**'
+          - '!helmchart/**'
           - '!img/**'
+          - '!ngc/**'
           - '!notebooks/**'
-          - '!python/cuopt_self_hosted/**'
-          - '!python/cuopt_server/**'
-          - '!python/nvcf_client/**'
-        test_python_cuopt_server:
+          - '!sonar-project.properties'
+          - '!sonarqube/**'
+          - '!ucf/**'
+          - '!utilities/**'
+        test_python_wheels:
           - '**'
           - '!CONTRIBUTING.md'
           - '!README.md'
-          - '!ci/release/update-version-cuopt.sh'
-          - '!ci/release/update-version-rapids.sh'
-          - '!docs/**'
+          - '!.ai/**'
+          - '!.coderabbit.yaml'
+          - '!.github/AGENTS.md'
+          - '!.github/CODE_OF_CONDUCT.md'
+          - '!.github/CODEOWNERS'
+          - '!.github/ISSUE_TEMPLATE/**'
+          - '!.github/PULL_REQUEST_TEMPLATE.md'
+          - '!.github/SECURITY.md'
+          - '!.github/.ai/**'
+          - '!.github/.coderabbit_review_guide.md'
+          - '!.github/agents/**'
+          - '!.github/copy-pr-bot.yaml'
+          - '!.github/ops-bot.yaml'
+          - '!.pre-commit-config.yaml'
+          - '!ci/build_cpp.sh'
+          - '!ci/build_docs.sh'
+          - '!ci/build_python.sh'
+          - '!ci/check_style.sh'
+          - '!ci/release/**'
+          - '!ci/run_ctests.sh'
+          - '!ci/test_python.sh'
+          - '!conda/**'
+          - '!container-builder/**'
+          - '!helmchart/**'
           - '!img/**'
+          - '!ngc/**'
           - '!notebooks/**'
-          - '!python/cuopt_self_hosted/**'
-          - '!python/nvcf_client/**'
+          - '!sonar-project.properties'
+          - '!sonarqube/**'
+          - '!ucf/**'
+          - '!utilities/**'
   checks:
     secrets: inherit
     uses: rapidsai/shared-workflows/.github/workflows/checks.yaml@main
@@ -187,7 +266,7 @@ jobs:
   conda-cpp-tests:
     needs: [conda-cpp-build, changed-files, compute-matrix-filters]
     uses: rapidsai/shared-workflows/.github/workflows/conda-cpp-tests.yaml@main
-    #if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
     with:
       build_type: pull-request
       script: ci/test_cpp.sh
@@ -210,7 +289,7 @@ jobs:
   conda-python-tests:
     needs: [conda-python-build, changed-files, compute-matrix-filters]
     uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main
-    #if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_conda
     with:
       run_codecov: false
       build_type: pull-request
@@ -224,9 +303,10 @@ jobs:
       script-env-secret-3-key: CUOPT_AWS_SECRET_ACCESS_KEY
       script-env-secret-3-value: ${{ secrets.CUOPT_AWS_SECRET_ACCESS_KEY }}
   docs-build:
-    needs: conda-python-build
+    needs: [conda-python-build, changed-files]
     secrets: inherit
     uses: rapidsai/shared-workflows/.github/workflows/custom-job.yaml@main
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).build_docs
     with:
       build_type: pull-request
       node_type: "gpu-l4-latest-1"
@@ -271,7 +351,7 @@ jobs:
   wheel-tests-cuopt:
     needs: [wheel-build-cuopt, wheel-build-cuopt-mps-parser, wheel-build-cuopt-sh-client, changed-files, compute-matrix-filters]
     uses: rapidsai/shared-workflows/.github/workflows/wheels-test.yaml@main
-    #if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_cuopt
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_wheels
     with:
       build_type: pull-request
       script: ci/test_wheel_cuopt.sh
@@ -311,7 +391,7 @@ jobs:
   wheel-tests-cuopt-server:
     needs: [wheel-build-cuopt, wheel-build-cuopt-server, changed-files, compute-matrix-filters]
     uses: rapidsai/shared-workflows/.github/workflows/wheels-test.yaml@main
-    #if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_cuopt_server
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_wheels
     with:
       build_type: pull-request
       script: ci/test_wheel_cuopt_server.sh
@@ -327,7 +407,7 @@ jobs:
     needs: [wheel-build-cuopt, wheel-build-cuopt-server, changed-files]
     secrets: inherit
     uses: ./.github/workflows/self_hosted_service_test.yaml
-    #if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python
+    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_wheels
     with:
       build_type: pull-request
       script: ci/test_self_hosted_service.sh

.pre-commit-config.yaml

@@ -54,7 +54,7 @@ repos:
       - id: shellcheck
         args: ["--severity=warning"]
   - repo: https://github.com/rapidsai/pre-commit-hooks
-    rev: v1.2.1
+    rev: v1.3.3
     hooks:
       - id: verify-copyright
         args: [--fix, --spdx]
@@ -75,6 +75,12 @@ repos:
           (?x)^(
             ^cpp/tests/utilities/cxxopts.hpp
           )
+      - id: verify-pyproject-license
+        # ignore the top-level pyproject.toml, which doesn't
+        # have or need a [project] table
+        exclude: |
+          (?x)
+            ^pyproject[.]toml$
   - repo: local
     hooks:
       - id: update-versions

ci/build_wheel.sh

@@ -10,6 +10,8 @@ package_dir=$2
 
 source rapids-configure-sccache
 source rapids-date-string
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 # Update the version to accomdate nightly and release changes for the wheel name
@@ -26,14 +28,13 @@ RAPIDS_PIP_WHEEL_ARGS=(
   -v
   --no-deps
   --disable-pip-version-check
-  --extra-index-url=https://pypi.nvidia.com
 )
 
 # Only use --build-constraint when build isolation is enabled.
 #
 # Passing '--build-constraint' and '--no-build-isolation` together results in an error from 'pip',
 # but we want to keep environment variable PIP_CONSTRAINT set unconditionally.
-# PIP_NO_BUILD_ISOLATION=0 means "add --no-build-isolation" (ref: https://github.com/pypa/pip/issues/573
+# PIP_NO_BUILD_ISOLATION=0 means "add --no-build-isolation" (ref: https://github.com/pypa/pip/issues/5735)
 if [[ "${PIP_NO_BUILD_ISOLATION:-}" != "0" ]]; then
     RAPIDS_PIP_WHEEL_ARGS+=(--build-constraint="${PIP_CONSTRAINT}")
 fi

ci/build_wheel_cuopt.sh

@@ -6,6 +6,8 @@
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 # Install rockylinux repo

ci/build_wheel_cuopt_mps_parser.sh

@@ -1,11 +1,13 @@
 #!/bin/bash
 
-# SPDX-FileCopyrightText: Copyright (c) 2024-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2024-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 package_dir="python/cuopt/cuopt/linear_programming"

ci/build_wheel_cuopt_server.sh

@@ -1,10 +1,12 @@
 #!/bin/bash
 
-# SPDX-FileCopyrightText: Copyright (c) 2023-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2023-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 package_dir="python/cuopt_server"

ci/build_wheel_cuopt_sh_client.sh

@@ -1,10 +1,12 @@
 #!/bin/bash
 
-# SPDX-FileCopyrightText: Copyright (c) 2023-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2023-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 package_dir="python/cuopt_self_hosted"

ci/build_wheel_libcuopt.sh

@@ -1,9 +1,11 @@
 #!/bin/bash
-# SPDX-FileCopyrightText: Copyright (c) 2023-2025, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2023-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 package_name="libcuopt"

ci/test_self_hosted_service.sh

@@ -1,10 +1,12 @@
 #!/bin/bash
 
-# SPDX-FileCopyrightText: Copyright (c) 2024-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2024-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
 
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 # Download the cuopt built in the previous step
@@ -16,7 +18,6 @@ LIBCUOPT_WHEELHOUSE=$(RAPIDS_PY_WHEEL_NAME="libcuopt_${RAPIDS_PY_CUDA_SUFFIX}" r
 
 # echo to expand wildcard before adding `[extra]` requires for pip
 rapids-pip-retry install \
-    --extra-index-url=https://pypi.nvidia.com \
     "${CUOPT_MPS_PARSER_WHEELHOUSE}"/cuopt_mps_parser*.whl \
     "${CUOPT_WHEELHOUSE}"/cuopt*.whl \
     "${LIBCUOPT_WHEELHOUSE}"/libcuopt*.whl \

ci/test_wheel_cuopt.sh

@@ -1,12 +1,14 @@
 #!/bin/bash
 
-# SPDX-FileCopyrightText: Copyright (c) 2023-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2023-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
 
 # sets up a constraints file for 'pip' and puts its location in an exported variable PIP_EXPORT,
 # so those constraints will affect all future 'pip install' calls
+RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX="true"
+export RAPIDS_INIT_PIP_REMOVE_NVIDIA_INDEX
 source rapids-init-pip
 
 # Download the packages built in the previous step
@@ -27,7 +29,6 @@ EOF
 
 # echo to expand wildcard before adding `[extra]` requires for pip
 rapids-pip-retry install \
-    --extra-index-url=https://pypi.nvidia.com \
     --constraint "${PIP_CONSTRAINT}" \
     "${CUOPT_MPS_PARSER_WHEELHOUSE}"/cuopt_mps_parser*.whl \
     "$(echo "${CUOPT_WHEELHOUSE}"/cuopt*.whl)[test]" \