mirror of
https://github.com/openai/codex.git
synced 2026-08-23 13:09:46 +00:00
2a16af8234
## Why R2 publication waited for DotSlash to finish before uploading any release assets, extending the release pipeline's critical path. ## What changed - Start an `assets` stage after the GitHub release is created, in parallel with DotSlash publication. Upload available assets concurrently without publishing release metadata or channel aliases. - Run a `finalize` stage after both jobs complete. Verify assets already present in R2, upload any assets DotSlash added, and then publish metadata, stable installer aliases, and release channels. - Validate downloaded assets before upload and retain no-overwrite semantics across both stages. GitOrigin-RevId: 1c3e8ca715be4064c2532a5c651f1bbe03ed96a4
54 lines
1.5 KiB
YAML
54 lines
1.5 KiB
YAML
name: publish-r2-release
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
tag:
|
|
required: true
|
|
type: string
|
|
make_latest:
|
|
required: true
|
|
type: boolean
|
|
prerelease:
|
|
required: true
|
|
type: boolean
|
|
stage:
|
|
required: true
|
|
type: string
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 60
|
|
environment: codex-r2-publisher
|
|
permissions:
|
|
contents: read
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Publish release assets and metadata to R2
|
|
# R2 exposes an S3-compatible API, so the AWS CLI reads AWS-named variables.
|
|
env:
|
|
AWS_ACCESS_KEY_ID: ${{ secrets.CODEX_R2_ACCESS_KEY_ID }}
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.CODEX_R2_SECRET_ACCESS_KEY }}
|
|
AWS_ENDPOINT_URL: ${{ vars.CODEX_R2_ENDPOINT_URL }}
|
|
AWS_REGION: ${{ vars.CODEX_R2_REGION }}
|
|
GH_TOKEN: ${{ github.token }}
|
|
RELEASE_TAG: ${{ inputs.tag }}
|
|
RELEASE_MAKE_LATEST: ${{ inputs.make_latest }}
|
|
RELEASE_PRERELEASE: ${{ inputs.prerelease }}
|
|
RELEASE_STAGE: ${{ inputs.stage }}
|
|
run: |
|
|
set -euo pipefail
|
|
python3 .github/scripts/publish_r2_release.py \
|
|
--tag "${RELEASE_TAG}" \
|
|
--make-latest "${RELEASE_MAKE_LATEST}" \
|
|
--prerelease "${RELEASE_PRERELEASE}" \
|
|
--stage "${RELEASE_STAGE}"
|