mirror of https://github.com/openai/codex.git synced 2026-10-23 18:08:45 +00:00

Files

T

Adam Perry @ OpenAI 66f6da6036 Lock Python release build tools with uv (#56290 )

## Why

Python release jobs installed build tools without a shared lockfile and allowed isolated builds to resolve additional dependencies. Release retries can also build older source revisions, so their tool pins need to come from the running workflow revision.

## What changed

- Add a shared setup action with pinned `uv` and locked `sdk` and `runtime` dependency groups. Apply a seven-day dependency age cutoff, with a two-day exception for `certifi` CA trust updates.
- Use the action for Python SDK and runtime packaging across Linux, macOS, and Windows. Build with `uv build --offline --no-build-isolation` using the prepared environments.
- In the standalone Python build workflows, check out the release tools from `github.workflow_sha` separately from the requested source revision.

GitOrigin-RevId: a9c0344930e5b9870ce9f7754a1fee1a9219305c

2026-10-22 23:06:25 +00:00

bazel.yml

Use shared Bazel CI preparation for lint and V8 jobs (#54672 )

2026-10-16 18:32:45 +00:00

blob-size-policy.yml

Run required CI against pull request merge commits (#38051 )

2026-08-11 18:31:31 +00:00

blocking-ci.yml

Run required CI against pull request merge commits (#38051 )

2026-08-11 18:31:31 +00:00

cargo-deny.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

cla.yml

[codex] Pin GitHub Actions workflow references (#15828 )

2026-03-27 23:00:05 +00:00

close-stale-contributor-prs.yml

[codex] Fully qualify hash-pins in GitHub Actions (#21436 )

2026-05-07 14:31:20 -07:00

codespell.yml

Run required CI against pull request merge commits (#38051 )

2026-08-11 18:31:31 +00:00

Dockerfile.bazel

Remove js_repl feature (#19410 )

2026-04-24 17:49:29 -07:00

issue-deduplicator.yml

ci: use issue triage environment for issue workflows (#25134 )

2026-05-29 12:06:55 -07:00

issue-labeler.yml

Add dots to issue labeler guidance (#50183 )

2026-10-02 05:05:12 +00:00

issue-translator.yml

Translate non-English issues (#27778 )

2026-06-11 23:20:36 -07:00

postmerge-ci.yml

[codex] group blocking and postmerge CI workflows (#30146 )

2026-06-26 15:07:05 -07:00

python-runtime-build.yml

Lock Python release build tools with uv (#56290 )

2026-10-22 23:06:25 +00:00

python-runtime-release.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

python-sdk-build.yml

Lock Python release build tools with uv (#56290 )

2026-10-22 23:06:25 +00:00

python-sdk-cli-release.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

python-sdk-release.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

r2-release.yml

Guard prerelease channel and canary updates against older versions (#47597 )

2026-09-23 17:35:40 +00:00

README.md

Run required CI against pull request merge commits (#38051 )

2026-08-11 18:31:31 +00:00

repo-checks.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

rust-ci-full-nextest-platform.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

rust-ci-full.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

rust-ci.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

rust-release-argument-comment-lint.yml

Update the Rust toolchain action for argument-comment linting (#49801 )

2026-10-01 01:26:12 +00:00

rust-release-provisioned-macos.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

rust-release-windows.yml

Lock Python release build tools with uv (#56290 )

2026-10-22 23:06:25 +00:00

rust-release.yml

Lock Python release build tools with uv (#56290 )

2026-10-22 23:06:25 +00:00

rusty-v8-release.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

sdk.yml

Bump uv to 0.13.5 in CI and release workflows (#56248 )

2026-10-22 19:42:33 +00:00

v8-canary.yml

Upgrade the Rust toolchain to 1.99.1 (#55677 )

2026-10-20 21:28:45 +00:00

zstd

ci(windows): use DotSlash for zstd in rust-release-windows (#11542 )

2026-02-11 20:57:11 -08:00

README.md

Workflow Strategy

The workflows in this directory are split so that pull requests get fast, review-friendly signal while main still gets the full cross-platform verification pass.

Pull Requests

Required checks run against GitHub's synthetic merge commit, not the pull request head alone. This includes changes already on main and catches conflicts before they reach the branch.
bazel.yml is the main pre-merge verification path for Rust code. It runs Bazel test and Bazel clippy on the supported Bazel targets, including the generated Rust test binaries needed to lint inline #[cfg(test)] code.
rust-ci.yml keeps the Cargo-native PR checks intentionally small:
- cargo fmt --check
- cargo shear
- argument-comment-lint on Linux, macOS, and Windows
- tools/argument-comment-lint package tests when the lint or its workflow wiring changes

Post-Merge On `main`

bazel.yml also runs on pushes to main. This re-verifies the merged Bazel path and helps keep the BuildBuddy caches warm.
rust-ci-full.yml is the full Cargo-native verification workflow. It keeps the heavier checks off the PR path while still validating them after merge:
- the full Cargo clippy matrix
- the full Cargo nextest matrix via per-platform archive-backed shards
- Windows ARM64 nextest archives cross-compiled on Windows x64, then replayed on native Windows ARM64 shards
- release-profile Cargo builds
- cross-platform argument-comment-lint
- Linux remote-env tests

Rule Of Thumb

If a build/test/clippy check can be expressed in Bazel, prefer putting the PR-time version in bazel.yml.
Keep rust-ci.yml fast enough that it usually does not dominate PR latency.
Reserve rust-ci-full.yml for heavyweight Cargo-native coverage that Bazel does not replace yet.

README.md

Workflow Strategy

Pull Requests

Post-Merge On main

Rule Of Thumb

Post-Merge On `main`