openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-08-24 13:20:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
latest-alpha-cli
codex/.github/workflows
History
Adam Perry @ OpenAI 6869d17cc2 Enable user namespaces in shared CI setup (#39606) 
## What changed

- Enable unprivileged user namespaces for every Linux job that uses the shared
  `setup-ci` action.
- Disable AppArmor's unprivileged user namespace restriction when that sysctl is
  available.
- Remove the duplicate setup from the two nextest workflow jobs.

GitOrigin-RevId: a5aebe0795ada435e687826134411c8b1c28bd98
2026-08-20 05:59:06 +00:00
..
bazel.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
blob-size-policy.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
blocking-ci.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
cargo-deny.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
cla.yml
[codex] Pin GitHub Actions workflow references (#15828)
2026-03-27 23:00:05 +00:00
close-stale-contributor-prs.yml
[codex] Fully qualify hash-pins in GitHub Actions (#21436)
2026-05-07 14:31:20 -07:00
codespell.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
Dockerfile.bazel
Remove js_repl feature (#19410)
2026-04-24 17:49:29 -07:00
issue-deduplicator.yml
ci: use issue triage environment for issue workflows (#25134)
2026-05-29 12:06:55 -07:00
issue-labeler.yml
[codex] auto-label AWS Bedrock issues (#30607)
2026-06-29 11:10:38 -07:00
issue-translator.yml
Translate non-English issues (#27778)
2026-06-11 23:20:36 -07:00
postmerge-ci.yml
[codex] group blocking and postmerge CI workflows (#30146)
2026-06-26 15:07:05 -07:00
python-runtime-build.yml
Support alpha hotfix release versions (#34463)
2026-07-21 03:59:38 +00:00
python-runtime-release.yml
Update PyPI publish action to v1.14.2 (#39152)
2026-08-18 06:18:37 +00:00
python-sdk-release.yml
Prepare Python SDK 0.147.0 stable release (#39155)
2026-08-18 06:43:10 +00:00
r2-release.yml
Parallelize R2 asset publishing with DotSlash (#36871)
2026-08-04 10:05:24 +00:00
README.md
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
repo-checks.yml
Remove npm package staging from repo checks (#39402)
2026-08-19 03:52:59 +00:00
rust-ci-full-nextest-platform.yml
Enable user namespaces in shared CI setup (#39606)
2026-08-20 05:59:06 +00:00
rust-ci-full.yml
Enable sandboxed V8 for code mode (#36374)
2026-07-31 18:32:28 +00:00
rust-ci.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
rust-release-argument-comment-lint.yml
ci: template custom runner names by repo (#27024)
2026-06-08 11:47:23 -07:00
rust-release-prepare.yml
make rust-release-prepare use env secret (#22702)
2026-05-14 21:45:53 +00:00
rust-release-windows.yml
Enable sandboxed V8 for code mode (#36374)
2026-07-31 18:32:28 +00:00
rust-release-zsh.yml
release: publish standalone zsh artifacts (#30114)
2026-06-25 13:56:08 -07:00
rust-release.yml
Add a just recipe for assembling Codex packages (#39584)
2026-08-20 04:55:47 +00:00
rusty-v8-release.yml
ci: parameterize Cargo target paths (#31332)
2026-07-08 00:02:16 +00:00
sdk.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
v8-canary.yml
Run required CI against pull request merge commits (#38051)
2026-08-11 18:31:31 +00:00
zstd
ci(windows): use DotSlash for zstd in rust-release-windows (#11542)
2026-02-11 20:57:11 -08:00

README.md

Workflow Strategy

The workflows in this directory are split so that pull requests get fast, review-friendly signal while main still gets the full cross-platform verification pass.

Pull Requests

  • Required checks run against GitHub's synthetic merge commit, not the pull request head alone. This includes changes already on main and catches conflicts before they reach the branch.
  • bazel.yml is the main pre-merge verification path for Rust code. It runs Bazel test and Bazel clippy on the supported Bazel targets, including the generated Rust test binaries needed to lint inline #[cfg(test)] code.
  • rust-ci.yml keeps the Cargo-native PR checks intentionally small:
    • cargo fmt --check
    • cargo shear
    • argument-comment-lint on Linux, macOS, and Windows
    • tools/argument-comment-lint package tests when the lint or its workflow wiring changes

Post-Merge On main

  • bazel.yml also runs on pushes to main. This re-verifies the merged Bazel path and helps keep the BuildBuddy caches warm.
  • rust-ci-full.yml is the full Cargo-native verification workflow. It keeps the heavier checks off the PR path while still validating them after merge:
    • the full Cargo clippy matrix
    • the full Cargo nextest matrix via per-platform archive-backed shards
    • Windows ARM64 nextest archives cross-compiled on Windows x64, then replayed on native Windows ARM64 shards
    • release-profile Cargo builds
    • cross-platform argument-comment-lint
    • Linux remote-env tests

Rule Of Thumb

  • If a build/test/clippy check can be expressed in Bazel, prefer putting the PR-time version in bazel.yml.
  • Keep rust-ci.yml fast enough that it usually does not dominate PR latency.
  • Reserve rust-ci-full.yml for heavyweight Cargo-native coverage that Bazel does not replace yet.
Reference in New Issue View Git Blame Copy Permalink