Skip to content

fix zizmor checks, nightly builds, and update-version.sh #877

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rapids-bot merged 4 commits into from
May 19, 2026
Merged

fix zizmor checks, nightly builds, and update-version.sh #877

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c350aa1
fix zizmor checks
jameslamb May 18, 2026
e3c932b
force-reinstall conda
jameslamb May 18, 2026
6a5c1b1
fix update-version.sh
jameslamb May 18, 2026
1a55210
minor formatting fixes
jameslamb May 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions .github/zizmor.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
# Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.

rules:
unpinned-uses:
config:
policies:
# We require SHA-pinning for all workflows and actions _except_ for those from
# rapidsai/shared-workflows and rapidsai/shared-actions
"rapidsai/shared-workflows/*": any
"rapidsai/shared-actions/*": any
"actions/*": ref-pin
"*": hash-pin
2 changes: 1 addition & 1 deletion CONTRIBUTING.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ export LINUX_VER=ubuntu24.04
export PYTHON_VER=3.14

# RAPIDS version in {major}.{minor}
export RAPIDS_VER=26.04
export RAPIDS_VER=26.06

# rapidsai/base
docker build $(ci/compute-build-args.sh) \
Expand Down
6 changes: 5 additions & 1 deletion ci/release/update-version.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
#!/bin/bash
# Copyright (c) 2023-2025, NVIDIA CORPORATION.
# Copyright (c) 2023-2026, NVIDIA CORPORATION.

## Usage
# Primary interface: bash update-version.sh <new_version> [--run-context=main|release]
Expand Down Expand Up @@ -100,6 +100,10 @@ sed_runner "s/com\.nvidia\.workbench\.image-version=.*/com.nvidia.workbench.imag
sed_runner "s|ARG RAPIDS_BRANCH=\"release/[0-9]\+\.[0-9]\+\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAME}\"|g" Dockerfile
sed_runner "s|ARG RAPIDS_BRANCH=\"main\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAME}\"|g" Dockerfile

# docs
sed_runner "s|RAPIDS_VER=[[:digit:]]\+\.[[:digit:]]|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md
sed_runner "s|[[:digit:]]\+\.[[:digit:]]-cuda|${NEXT_SHORT_TAG}-cuda|g" SECURITY.md

# CI files
for FILE in .github/workflows/*.yaml .github/workflows/*.yml; do
sed_runner "/shared-workflows/ s|@.*|@${WORKFLOW_BRANCH_REF}|g" "${FILE}"
Expand Down
5 changes: 5 additions & 0 deletions context/scripts/configure-conda-base-environment
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,11 @@ if [[ "$PYTHON_VERSION_PADDED" > "3.12" ]]; then
else
PYTHON_ABI_TAG="cpython"
fi

# force-reinstall 'conda' first, to clear out any files left behind from updates
rapids-conda-retry install -y -n base --force-reinstall 'conda>=26.5.0'

# update Python in the environment
rapids-conda-retry install -y -n base "python>=${PYTHON_VERSION},<${PYTHON_UPPER_BOUND}=*_${PYTHON_ABI_TAG}"
rapids-conda-retry update --all -y -n base
find /opt/conda -follow -type f -name '*.a' -delete
Expand Down
Loading