[pull] release/3.0.0-beta2 from isaac-sim:release/3.0.0-beta2

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,5 +1,10 @@
 # Description
 
+> [!IMPORTANT]
+> Confirm the pull request base before submitting. Target `develop` for all
+> contributions. The `release/3.0.0-beta2` branch is a frozen stable landing
+> snapshot and is not used for ongoing maintenance.
+
 <!--
 Thank you for your interest in sending a pull request. Please make sure to check the contribution guidelines.
 

.github/actions/ecr-build-push-pull/README.md

@@ -10,7 +10,7 @@ ECR is also used as the BuildKit layer cache.
   with:
     image-tag: ${{ env.DOCKER_IMAGE_TAG }}
     isaacsim-base-image: nvcr.io/nvidia/isaac-sim
-    isaacsim-version: 6.0.0
+    isaacsim-version: 6.0.1
     dockerfile-path: docker/Dockerfile.base
     cache-tag: cache-base
     ecr-url: (optional, complete url for ECR storage)

.github/actions/run-package-tests/test_cleanup_docker_storage.py

@@ -104,7 +104,7 @@ def _run_cleanup(
         [
             "bash",
             str(_SCRIPT_PATH),
-            "nvcr.io/nvidian/isaac-sim:latest-develop",
+            "nvcr.io/nvidia/isaac-sim:6.0.1",
             "isaacsim-pin-test",
             "test-cleanup",
             "true",

.github/workflows/README.md

@@ -1,7 +1,8 @@
 # CI Workflows
 
-`schedule:` and `workflow_dispatch:` triggers fire **only from the default
-branch (`main`)**. A workflow YAML must live on `main` for its cron to
-register — the same file on other branches has no effect. `pull_request:`
-and `push:` triggers fire from the event branch's file and work normally
-on `develop`.
+`schedule:` triggers run only from the repository's current default branch.
+A scheduled workflow YAML must live on that branch for its cron to register;
+the same schedule on another branch has no effect. A `workflow_dispatch:`
+workflow must also exist on the default branch, although a manual dispatch can
+select another branch or tag. `pull_request:` and `push:` triggers use the
+event branch normally.

.github/workflows/build.yaml

@@ -706,7 +706,7 @@ jobs:
         isaacsim-base-image: ${{ needs.config.outputs.isaacsim_image_name }}
         isaacsim-version: ${{ needs.config.outputs.isaacsim_image_tag }}
         filter-pattern: "isaaclab_tasks"
-        extra-pip-packages: "ovrtx ovphysx==0.4.13"
+        extra-pip-packages: "ovrtx>=0.3.0,<0.4.0 ovphysx==0.4.13"
         include-files: >-
           test_rendering_cartpole_kitless.py,
           test_rendering_dexsuite_kuka_homo_kitless.py,

.github/workflows/check-links.yml

@@ -34,6 +34,9 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v6
       with:
+        # Scheduled runs continue checking the active main branch even while
+        # the repository landing/default branch points to the frozen release.
+        ref: ${{ github.event_name == 'schedule' && 'main' || '' }}
         fetch-depth: 2
         filter: tree:0
 
@@ -68,7 +71,7 @@ jobs:
 
     - name: Run Link Checker
       if: steps.check_docs.outputs.run_job == 'true' || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'
-      uses: lycheeverse/lychee-action@v2
+      uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
       with:
         # Check all markdown files and documentation
         # Excluded are known crawl blockers

.github/workflows/config.yaml

@@ -5,6 +5,6 @@
 
 # Shared image config for CI workflows. Loaded by the `config` job in each
 # workflow via yq and exposed as job outputs (see e.g. .github/workflows/build.yaml).
-isaacsim_image_name: nvcr.io/nvidian/isaac-sim
-isaacsim_image_tag: latest-develop
+isaacsim_image_name: nvcr.io/nvidia/isaac-sim
+isaacsim_image_tag: 6.0.1
 isaaclab_image_name: nvcr.io/nvidian/isaac-lab