#526: Migrate AWS-backed CI workflow to GitHub Actions and refactor release workflow#527
Merged
Merged
Conversation
Move the release workflow and note generation into the package CLI layer, update GitHub Actions to use the new entrypoint, and remove the legacy scripts/build, githooks, and vagrant trees. Also update the release docs/tests and remove shellcheck now that the shell-script trees are gone. Closes #525
- Rename the AWS-backed CI tests from test/codebuild to test/aws_ci - Clarify the CI docs to separate integration tests from AWS-backed CI - Keep the GitHub Actions workflow aligned with the new test path and approval gate - Remove the deprecated CodeBuild release/CI infrastructure
tkilias
commented
May 29, 2026
tkilias
commented
May 29, 2026
Use a shared GitPython-based repo root helper for release changelog lookups so check_release.py and release_notes.py do not depend on their file depth. Add a regression test for the helper and keep the changelog lookup coverage.
Set the CI version-check step to workflow_dispatch release mode so release-workflow check validates the changelog and version without treating the pull-request merge ref as a release tag. Update the workflow regression test accordingly.
Align the AWS-backed CI job with the release workflow by using release_user for the AWS user name. Update the workflow regression test to match.
- Inject AwsAccess from the release-workflow CLI before starting the release build - Remove the brittle workflow-string test for the CI YAML - Keep the release workflow tests aligned with the new run_build signature
tomuben
reviewed
May 29, 2026
Switch the AWS-backed CI workflow to the github-ai-lab-ci-role role with ci-user as the resource owner label. Update the AWS guide wording so CI and release are described as separate OIDC roles with shared baseline permissions.
tomuben
reviewed
Jun 3, 2026
Comment on lines
+26
to
+29
| env: | ||
| RELEASE_MODE: workflow_dispatch | ||
| RELEASE_TITLE: CI validation | ||
| run: poetry run -- ai-lab release check |
Collaborator
There was a problem hiding this comment.
Once we introduce the PTB here, we don't need this anymore.
tomuben
approved these changes
Jun 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
test/codebuildtotest/aws_ciValidation
poetry run -- pytest -q test/unit/test_release_build.py test/unit/test_release_notes.py test/unit/test_release_workflow.py test/unit/test_build_cli.pypoetry run -- pytest -q test/unit/test_ci_workflow.pyIssues
Closes #525
Closes #526