add a release workflow

Author: leofang

.github/workflows/build-docs.yml

@@ -6,6 +6,26 @@ on:
       build-ctk-ver:
         type: string
         required: true
+      component:
+        description: "Component(s) to build docs for"
+        required: true
+        default: "all"
+        type: choice
+        options:
+          - cuda-core
+          - cuda-bindings
+          - cuda-python
+          - all
+      git-tag:
+        description: "Target git tag to build docs for"
+        required: true
+        default: ""
+        type: string
+      is-release:
+        description: "Are we building release docs?"
+        required: true
+        default: false
+        type: boolean
 
 jobs:
   build:
@@ -27,6 +47,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          ref: ${{ inputs.git-tag }}
 
       # TODO: cache conda env to speed up the workflow once conda-incubator/setup-miniconda#267
       # is resolved
@@ -114,23 +135,40 @@ jobs:
 
           pip install cuda_python*.whl
 
-      # This step sets the PR_NUMBER env var.
+      # This step sets the PR_NUMBER/BUILD_LATEST/BUILD_PREVIEW env vars.
       - name: Get PR number
+        if: ${{ !inputs.is-release }}
         uses: ./.github/actions/get_pr_number
 
-      - name: Build all (latest) docs
-        id: build
+      - name: Set up artifact directories
+        run: |
+          mkdir -p artifacts/docs
+          # create an empty folder for removal use
+          mkdir -p artifacts/empty_docs
+
+      - name: Build all docs
+        if: ${{ inputs.component == 'all' }}
+        env:
+          DOC_ACTION: ${{ (inputs.is-release && '') || 'latest-only' }}
         run: |
           pushd cuda_python/docs/
-          ./build_all_docs.sh latest-only
+          ./build_all_docs.sh $DOC_ACTION
           ls -l build
           popd
-
-          mkdir -p artifacts/docs
           mv cuda_python/docs/build/html/* artifacts/docs/
 
-          # create an empty folder for removal use
-          mkdir -p artifacts/empty_docs
+      - name: Build component docs
+        if: ${{ inputs.component != 'all' }}
+        env:
+          DOC_ACTION: ${{ (inputs.is-release && '') || 'latest-only' }}
+        run: |
+          COMPONENT=$(echo "${{ inputs.component }}" | tr '-' '_')
+          pushd ${COMPONENT}/docs/
+          ./build_docs.sh $DOC_ACTION
+          ls -l build
+          rm -rf build/html/latest
+          popd
+          mv ${COMPONENT}/docs/build/html/* artifacts/docs/
 
       # TODO: Consider removing this step?
       - name: Upload doc artifacts
@@ -140,19 +178,20 @@ jobs:
           retention-days: 3
 
       - name: Deploy or clean up doc preview
+        if: ${{ inputs.is-release }}
         uses: ./.github/actions/doc_preview
         with:
           source-folder: ${{ (github.ref_name != 'main' && 'artifacts/docs') ||
                               'artifacts/empty_docs' }}
           pr-number: ${{ env.PR_NUMBER }}
 
       - name: Deploy doc update
-        if: ${{ github.ref_name == 'main' }}
+        if: ${{ github.ref_name == 'main' || inputs.is-release }}
         uses: JamesIves/github-pages-deploy-action@v4
         with:
           git-config-name: cuda-python-bot
           git-config-email: [email protected]
           folder: artifacts/docs/
           target-folder: docs/
-          commit-message: "Deploy latest docs: ${{ github.sha }}"
+          commit-message: "Deploy ${{ (inputs.is-release && 'release') || 'latest' }} docs: ${{ github.sha }}"
           clean: false

.github/workflows/release.yml

@@ -0,0 +1,105 @@
+name: "CI: Release"
+
+description: Manually-triggered release workflow. Must have a release note in the draft state and the release commit tagged.
+
+on:
+  workflow_dispatch:
+    inputs:
+      component:
+        description: "Component to release"
+        required: true
+        type: choice
+        options:
+          - cuda-core
+          - cuda-bindings
+          - cuda-python
+          - all
+      git-tag:
+        description: "The release git tag"
+        required: true
+        type: string
+      run-id:
+        description: "The GHA run ID that generated validated artifacts"
+        required: true
+        type: string
+      build-ctk-ver:
+        type: string
+        required: true
+      #print_tags:
+      #  description: 'True to print to STDOUT'
+      #  required: true
+      #  type: boolean
+
+defaults:
+  run:
+    shell: bash --noprofile --norc -xeuo pipefail {0}
+
+jobs:
+  check-tag:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout ${{ github.event.repository.name }}
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Check if draft exists for the tag
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          tags=
+          for i in $(gh release list -R ${{ github.repository }} --json tagName --jq '.[]| .tagName'); do
+            tags+=( $i )
+          done
+          is_draft=
+          for i in $(gh release list -R ${{ github.repository }} --json isDraft --jq '.[]| .isDraft'); do
+            is_draft+=( $i )
+          done
+
+          found=0
+          for idx in ${!tags[@]}; do
+            if [[ "${tags[$idx]}" == "${{ inputs.git-tag }}" ]]; then
+              echo "found ${{ inputs.git-tag }}"
+              found=1
+              if [[ "${is_draft[$idx]}" != "true" ]]; then
+                echo "the release note is not in draft state"
+                exit 1
+              fi
+              break
+            fi
+          done
+          if [[ "$found" == 0 ]]; then
+            echo "the release is not yet tagged"
+            exit 1
+          fi
+
+  doc:
+    name: Build release docs
+    if: ${{ github.repository_owner == 'nvidia' }}
+    # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
+    needs:
+      - check-tag
+    secrets: inherit
+    uses:
+      ./.github/workflows/build-docs.yml
+    with:
+      build-ctk-ver: ${{ inputs.build-ctk-ver }}
+      component: ${{ inputs.component }}
+      git-tag: ${{ inputs.git-tag }}
+      is-release: true
+
+  upload-archive:
+    name: Upload source archive
+    permissions:
+      contents: write
+    needs:
+      - check-tag
+    secrets: inherit
+    uses:
+      ./.github/workflows/release-upload.yml
+    with:
+      git-tag: ${{ inputs.git-tag }}