Skip to content

Conversation

@oberstet
Copy link
Contributor

@oberstet oberstet commented Oct 9, 2025

Description

final round (part 4c) of CI/CD and docs improvements before rel v25.9.1


Related Issue(s)

Closes or relates to #1677


Checklist

  • I have referenced relevant issue numbers above
  • I have performed a self-review of my code and it follows
    the style guidelines of this project
  • I have added new or used existing tests that prove my fix
    is effective or that my feature works
  • I have added necessary documentation (if appropriate) and
    updated the changelog
  • I have added an AI assistance disclosure file (required!)
    in this PR

- Remove pull_request_target from trigger condition (caused context mismatch)
- Use workflow_run trigger exclusively for write permissions + artifact access
- Add run-id parameter to download artifacts from triggering wstest workflow
- Add explicit release_type == 'development' filter

This enables the release-development job to:
1. Access artifacts produced by wstest.yml (via run-id)
2. Post PR comments with conformance results (via workflow_run permissions)
3. Use consistent PR context identifiers (via enhanced identifiers.yml)
Created two focused workflows:

1. release.yml (Publishing Workflow)
   - Triggered by workflow_run from all 4 workflows: wheels, wheels-docker, wstest, main
   - Collects artifacts from ALL workflows:
     * Wheels (from wheels + wheels-docker)
     * WebSocket conformance results (from wstest)
     * FlatBuffers schema (from main)
   - Jobs:
     * release-nightly: Creates GitHub Releases for nightly + stable builds
     * release-stable: Publishes to PyPI + triggers RTD build
   - Runs with contents:write permission (for GitHub Releases)
   - No PR comment permissions needed

2. release-post-comment.yml (PR Feedback Workflow)
   - Triggered by pull_request_target (write permissions for PR comments)
   - Waits for wstest workflow to complete
   - Downloads wstest conformance summary
   - Posts PR comment with build summary + test results
   - Runs with pull-requests:write permission
   - No release publishing

Benefits:
- Clear separation of concerns (publishing vs PR feedback)
- Simpler triggering logic (no complex multi-workflow coordination)
- Better security model (least privilege per workflow)
- Faster PR feedback (wstest results posted immediately)
- Complete artifact collection in releases
@oberstet oberstet merged commit 98ba994 into crossbario:master Oct 10, 2025
29 checks passed
@oberstet oberstet deleted the rel_v25.9.1_part4c branch October 10, 2025 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant