mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Ahmed Ibrahim 2ca3810005 [codex] Split Python runtime release workflow (#26226 )

## Why

Python SDK releases pin an exact `openai-codex-cli-bin` version, so all
eight platform runtime wheels must be available on PyPI before the SDK
package is built and published. PyPI does not support reusable workflows
as Trusted Publishers, which means OIDC-backed publishing must run from
each top-level release workflow.

## What changed

- add reusable `python-runtime-build.yml` to prepare and upload all
eight runtime wheels without publishing
- add top-level `python-runtime-release.yml` for manual runtime
publication before updating an SDK pin
- have `python-sdk-release.yml` publish and verify the prepared runtime
wheels from its own top-level trusted job before building the SDK
- verify PyPI exposes exactly the expected eight runtime wheels before
either release workflow continues

## PyPI configuration

- keep the trusted publisher for
`.github/workflows/python-sdk-release.yml` with environment `pypi`
- add a trusted publisher for
`.github/workflows/python-runtime-release.yml` with environment `pypi`
- no trusted publisher is needed for
`.github/workflows/python-runtime-build.yml`

## Validation

- parsed all three workflow YAML files
- validated all embedded shell blocks with `bash -n`
- no local tests run; relying on online CI

2ca3810005 · 2026-06-03 14:29:52 -07:00

History

bazel.yml

[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915 )

2026-06-02 16:22:32 -07:00

blob-size-policy.yml

ci: check out PR head commits in workflows (#21835 )

2026-05-08 15:14:33 -07:00

cargo-deny.yml

[codex] Use git CLI for Cargo fetches across Rust workflows (#25775 )

2026-06-02 07:39:41 -07:00

ci.yml

[codex] Add comprehensive root formatting check (#25683 )

2026-06-02 01:20:25 +00:00

cla.yml

[codex] Pin GitHub Actions workflow references (#15828 )

2026-03-27 23:00:05 +00:00

close-stale-contributor-prs.yml

[codex] Fully qualify hash-pins in GitHub Actions (#21436 )

2026-05-07 14:31:20 -07:00

codespell.yml

ci: check out PR head commits in workflows (#21835 )

2026-05-08 15:14:33 -07:00

Dockerfile.bazel

Remove js_repl feature (#19410 )

2026-04-24 17:49:29 -07:00

issue-deduplicator.yml

ci: use issue triage environment for issue workflows (#25134 )

2026-05-29 12:06:55 -07:00

issue-labeler.yml

ci: use issue triage environment for issue workflows (#25134 )

2026-05-29 12:06:55 -07:00

python-runtime-build.yml

[codex] Split Python runtime release workflow (#26226 )

2026-06-03 14:29:52 -07:00

python-runtime-release.yml

[codex] Split Python runtime release workflow (#26226 )

2026-06-03 14:29:52 -07:00

python-sdk-release.yml

[codex] Split Python runtime release workflow (#26226 )

2026-06-03 14:29:52 -07:00

README.md

Fan out rust-ci-full nextest by platform (#23358 )

2026-05-19 17:54:41 -07:00

rust-ci-full-nextest-platform.yml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rust-ci-full.yml

Revert "Add app-server startup benchmark crate" (#24937 )

2026-05-28 17:49:41 +00:00

rust-ci.yml

[codex] Use git CLI for Cargo fetches across Rust workflows (#25775 )

2026-06-02 07:39:41 -07:00

rust-release-argument-comment-lint.yml

[codex] Use git CLI for Cargo fetches across Rust workflows (#25775 )

2026-06-02 07:39:41 -07:00

rust-release-prepare.yml

make rust-release-prepare use env secret (#22702 )

2026-05-14 21:45:53 +00:00

rust-release-windows.yml

revert: publish release symbol artifacts (#25988 )

2026-06-02 17:34:04 -07:00

rust-release-zsh.yml

release: build macOS x64 zsh artifact (#24165 )

2026-05-22 17:08:59 -07:00

rust-release.yml

revert: publish release symbol artifacts (#25988 )

2026-06-02 17:34:04 -07:00

rusty-v8-release.yml

[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915 )

2026-06-02 16:22:32 -07:00

sdk.yml

[codex] Pin Python SDK to glibc-compatible runtime (#25907 )

2026-06-02 12:27:01 -07:00

v8-canary.yml

[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915 )

2026-06-02 16:22:32 -07:00

zstd

ci(windows): use DotSlash for zstd in rust-release-windows (#11542 )

2026-02-11 20:57:11 -08:00

README.md

Workflow Strategy

The workflows in this directory are split so that pull requests get fast, review-friendly signal while main still gets the full cross-platform verification pass.

Pull Requests

bazel.yml is the main pre-merge verification path for Rust code. It runs Bazel test and Bazel clippy on the supported Bazel targets, including the generated Rust test binaries needed to lint inline #[cfg(test)] code.
rust-ci.yml keeps the Cargo-native PR checks intentionally small:
- cargo fmt --check
- cargo shear
- argument-comment-lint on Linux, macOS, and Windows
- tools/argument-comment-lint package tests when the lint or its workflow wiring changes

Post-Merge On `main`

bazel.yml also runs on pushes to main. This re-verifies the merged Bazel path and helps keep the BuildBuddy caches warm.
rust-ci-full.yml is the full Cargo-native verification workflow. It keeps the heavier checks off the PR path while still validating them after merge:
- the full Cargo clippy matrix
- the full Cargo nextest matrix via per-platform archive-backed shards
- Windows ARM64 nextest archives cross-compiled on Windows x64, then replayed on native Windows ARM64 shards
- release-profile Cargo builds
- cross-platform argument-comment-lint
- Linux remote-env tests

Rule Of Thumb

If a build/test/clippy check can be expressed in Bazel, prefer putting the PR-time version in bazel.yml.
Keep rust-ci.yml fast enough that it usually does not dominate PR latency.
Reserve rust-ci-full.yml for heavyweight Cargo-native coverage that Bazel does not replace yet.

README.md

Workflow Strategy

Pull Requests

Post-Merge On main

Rule Of Thumb

Post-Merge On `main`