Migrate Python checks to CI Gate by msyyc · Pull Request #11522 · microsoft/typespec

Yuchao Yan (msyyc) · 2026-08-03T08:46:24Z

This PR update http-client-pytthon CI to replace ADO pipeline with github action and CI cost time is reduced from 60 minutes to < 40 minutes.
NOTE: I estimate there are still optimization space about 10 minutes but it needs some code change inner python script so will make another PR to do it.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

github-actions · 2026-08-03T08:50:39Z

All changed packages have been documented.

✅ @typespec/http-client-python

Show changes

`@typespec/http-client-python` - internal ✏️

Move Python emitter PR validation into GitHub Actions CI Gate.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

azure-sdk-automation · 2026-08-03T09:00:53Z

You can try these changes here

🛝 Playground	🌐 Website	🛝 VSCode Extension

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Install the Python package dev requirements in each CI Gate job so tox-based test, lint, docs, and typecheck commands can run after restoring generated artifacts. Also enable Git long paths before the Windows checkout to avoid failures on long test-data paths. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Pre-build generated package wheels in the build job and upload them with generated artifacts. Run downstream jobs against restored artifacts with package install plus a fail-fast Python prepare step instead of rebuilding the package in each job. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Rename the Linux build job and make the Windows Python CI job build, regenerate, and test independently without restoring Linux artifacts. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Allow the Python generated artifact upload to include the hidden .wheels directory so downstream Linux jobs install pre-built wheels instead of falling back to source builds. Add concise comments documenting the CI-specific npm and Python prepare steps. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Download generated Python artifacts into packages/http-client-python so downstream jobs find tests/generated, tests/.wheels, dist, and generator at the paths expected by the package scripts. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Add direct dev dependencies for eslint and @eslint/js because the standalone http-client-python lint config imports @eslint/js in CI. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

pkg-pr-new · 2026-08-04T05:48:11Z

Open in StackBlitz

npm i https://pkg.pr.new/@typespec/http-client-python@11522

commit: 0f4953a

Use a package-local Prettier config for standalone http-client-python formatting so CI does not require the monorepo TypeSpec Prettier plugin build output. Avoid importing @eslint/js from the standalone ESLint config and add an internal Chronus entry for the Python CI Gate migration. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Build the TypeSpec Prettier plugin only in the Python Lint & Format job before running package format checks, instead of carrying a separate package-local Prettier config. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Suppressed comments (5)

.github/workflows/ci-python.yml:88

npm install --package-lock=false disables the checked-in lockfile, making CI dependency resolution non-deterministic and potentially masking/failing on transient dependency updates. Prefer npm ci --ignore-scripts for reproducible CI installs without lockfile rewrites.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:122

npm install --package-lock=false disables the checked-in lockfile, making CI dependency resolution non-deterministic. Prefer npm ci --ignore-scripts for reproducible installs in CI.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:201

npm install --package-lock=false disables the checked-in lockfile, making CI dependency resolution non-deterministic. Prefer npm ci --ignore-scripts for reproducible installs in CI.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:231

npm install --package-lock=false disables the checked-in lockfile, making CI dependency resolution non-deterministic. Prefer npm ci --ignore-scripts for reproducible installs in CI (works on Windows too).

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:156

npm install --package-lock=false disables the checked-in lockfile, making CI dependency resolution non-deterministic. Prefer npm ci --ignore-scripts for reproducible installs in CI.

          npm install --ignore-scripts --package-lock=false

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Suppressed comments (2)

.github/workflows/ci-python.yml:52

actions/upload-artifact is referenced via a floating major tag (@v7). Pin it to a full commit SHA (as done in other workflows) to avoid supply-chain risk and unexpected behavior changes.

      - name: Upload generated artifacts
        uses: actions/upload-artifact@v7

.github/workflows/ci-python.yml:77

actions/download-artifact is referenced via a floating major tag (@v8). Pin it to a full commit SHA (as done in other workflows) to avoid supply-chain risk and unexpected behavior changes. This same change should be applied to the other download-artifact steps in this workflow.

      - name: Download generated artifacts
        uses: actions/download-artifact@v8

Yuchao Yan (msyyc) · 2026-08-31T07:20:28Z

Timothee Guerin (@timotheeguerin) Is there other concern for this PR?

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

Suppressed comments (17)

.github/workflows/ci-python.yml:18

This workflow uses unpinned GitHub Actions versions (e.g. actions/checkout@v7, actions/setup-python@v7). Elsewhere in this repo, actions are pinned to a full commit SHA to reduce supply-chain risk and make builds reproducible. Please pin these actions here as well.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:53

actions/upload-artifact should be pinned to a commit SHA (consistent with other workflows in this repo) to avoid supply-chain risk from mutable tags.

      - name: Upload generated artifacts
        uses: actions/upload-artifact@v7
        with:

.github/workflows/ci-python.yml:72

This job uses unpinned GitHub Actions versions (actions/checkout@v7, actions/setup-python@v7). Pinning to a full commit SHA is the established pattern in this repo and reduces supply-chain risk.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:80

actions/download-artifact should be pinned to a commit SHA (as in other workflows) to avoid supply-chain risk from mutable tags.

      - name: Download generated artifacts
        uses: actions/download-artifact@v8
        with:
          name: python-generated
          path: packages/http-client-python

.github/workflows/ci-python.yml:106

This job uses unpinned GitHub Actions versions (actions/checkout@v7, actions/setup-python@v7). Pin to commit SHAs for consistency and to reduce supply-chain risk.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:114

actions/download-artifact should be pinned to a commit SHA (as in other workflows) to avoid supply-chain risk from mutable tags.

      - name: Download generated artifacts
        uses: actions/download-artifact@v8
        with:
          name: python-generated
          path: packages/http-client-python

.github/workflows/ci-python.yml:140

This job uses unpinned GitHub Actions versions (actions/checkout@v7, actions/setup-python@v7). Pin to commit SHAs for consistency and to reduce supply-chain risk.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:148

actions/download-artifact should be pinned to a commit SHA (as in other workflows) to avoid supply-chain risk from mutable tags.

      - name: Download generated artifacts
        uses: actions/download-artifact@v8
        with:
          name: python-generated
          path: packages/http-client-python

.github/workflows/ci-python.yml:185

This job uses unpinned GitHub Actions versions (actions/checkout@v7, actions/setup-python@v7). Pin to commit SHAs for consistency and to reduce supply-chain risk.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:193

actions/download-artifact should be pinned to a commit SHA (as in other workflows) to avoid supply-chain risk from mutable tags.

      - name: Download generated artifacts
        uses: actions/download-artifact@v8
        with:
          name: python-generated
          path: packages/http-client-python

.github/workflows/ci-python.yml:221

This job uses unpinned GitHub Actions versions (actions/checkout@v7, actions/setup-python@v7). Pin to commit SHAs for consistency and to reduce supply-chain risk.

      - uses: actions/checkout@v7

      - uses: ./.github/actions/setup

      - uses: actions/setup-python@v7

.github/workflows/ci-python.yml:28

npm install --package-lock=false bypasses the committed package-lock.json, making CI installs non-deterministic and potentially flaky. If the goal is to avoid running lifecycle scripts while still using the lockfile, npm ci --ignore-scripts is deterministic and does not rewrite the lockfile.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:88

npm install --package-lock=false bypasses the committed package-lock.json, making CI installs non-deterministic. Prefer npm ci --ignore-scripts to use the lockfile without executing lifecycle scripts.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:122

npm install --package-lock=false bypasses the committed lockfile, which can make CI results depend on registry state. Prefer npm ci --ignore-scripts for deterministic installs.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:156

npm install --package-lock=false bypasses the committed lockfile. Prefer npm ci --ignore-scripts for deterministic CI installs without lifecycle scripts.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:201

npm install --package-lock=false bypasses the committed lockfile. Prefer npm ci --ignore-scripts for deterministic CI installs without lifecycle scripts.

          npm install --ignore-scripts --package-lock=false

.github/workflows/ci-python.yml:231

npm install --package-lock=false bypasses the committed lockfile, which can make CI nondeterministic. Prefer npm ci --ignore-scripts for deterministic installs.

          npm install --ignore-scripts --package-lock=false

Copilot

🟡 Changes recommended

The new ci-python.yml workflow uses floating GitHub Action version tags instead of the repo’s pinned-SHA convention, which is a supply-chain/reproducibility risk.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Suppressed comments (2)

.github/workflows/ci-python.yml:52

Pin actions/upload-artifact to a commit SHA (repo convention) instead of a floating @v7 tag to keep the workflow reproducible and reduce supply-chain risk.

        uses: actions/upload-artifact@v7

.github/workflows/ci-python.yml:77

Pin actions/download-artifact to a commit SHA (repo convention) instead of a floating @v8 tag to keep the workflow reproducible and reduce supply-chain risk. Same applies to the other download steps in this file.

        uses: actions/download-artifact@v8

Files reviewed: 5/5 changed files
Comments generated: 1
Review effort level: Lite

ci: migrate Python checks to CI Gate

e1b262e

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

microsoft-github-policy-service Bot added the eng label Aug 3, 2026

ci: share Python workflow template

6cdf761

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Yuchao Yan (msyyc) added 3 commits August 3, 2026 17:12

ci: keep Python CI wrappers distinct

c126768

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

ci: fix Python workflow gating

b0d6b2f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

ci: use local Python setup for Python CI

62cde21

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Yuchao Yan (msyyc) changed the title ~~Migrate Python checks to CI Gate~~ Migrate Python checks to CI Gate (NOT READY FOR REVIEW) Aug 3, 2026

Yuchao Yan (msyyc) added 9 commits August 3, 2026 17:50

ci: simplify Python CI workflow

6e9597f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

ci: add standalone Python CI Gate workflow

295e2f0

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

ci: avoid Python CI lockfile mutation

60c7525

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

microsoft-github-policy-service Bot added the emitter:client:python Issue for the Python client emitter: @typespec/http-client-python label Aug 4, 2026

Yuchao Yan (msyyc) added 2 commits August 4, 2026 14:57

Yuchao Yan (msyyc) marked this pull request as ready for review August 4, 2026 07:46

Yuchao Yan (msyyc) requested review from ChenxiJiang333, catalinaperalta, iscai-msft, Libba Lawrence (l0lawrence), Laurent Mazuel (lmazuel), Chenjie Shi (tadelesh) and Timothee Guerin (timotheeguerin) as code owners August 4, 2026 07:46

Copilot AI review requested due to automatic review settings August 24, 2026 23:56

Copilot started reviewing on behalf of Yuchao Yan (msyyc) August 24, 2026 23:56 View session

Copilot AI reviewed Aug 25, 2026

View reviewed changes

Comment thread .github/workflows/ci-python.yml

Merge branch 'main' into msyyc-migrate-python-ci-gate

03d4e86

Copilot AI review requested due to automatic review settings August 26, 2026 09:06

Copilot started reviewing on behalf of Yuchao Yan (msyyc) August 26, 2026 09:07 View session

Copilot AI reviewed Aug 26, 2026

View reviewed changes

Comment thread .github/workflows/ci.yml

Merge branch 'main' into msyyc-migrate-python-ci-gate

cb3bc1f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Copilot AI review requested due to automatic review settings August 31, 2026 05:40

Copilot started reviewing on behalf of Yuchao Yan (msyyc) August 31, 2026 05:41 View session

Copilot AI reviewed Aug 31, 2026

View reviewed changes

Comment thread .github/workflows/ci-python.yml

Merge branch 'main' into msyyc-migrate-python-ci-gate

164468a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: df233d93-3288-4a30-a629-d9e53a234021

Copilot AI review requested due to automatic review settings September 1, 2026 03:51

Copilot started reviewing on behalf of Yuchao Yan (msyyc) September 1, 2026 03:52 View session

Copilot AI reviewed Sep 1, 2026

View reviewed changes

Timothee Guerin (timotheeguerin) approved these changes Sep 3, 2026

View reviewed changes

Yuchao Yan (msyyc) added this pull request to the merge queue Sep 7, 2026

This was referenced Sep 7, 2026

[Python] Clean up obsolete CI scripts after CI Gate migration Azure/typespec-azure#5410

Closed

[Python] Remove obsolete CI scripts after CI Gate migration #11873

Open

github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Sep 7, 2026

Merge branch 'main' into msyyc-migrate-python-ci-gate

0f4953a

Copilot AI review requested due to automatic review settings September 7, 2026 04:56

Copilot started reviewing on behalf of Yuchao Yan (msyyc) September 7, 2026 04:57 View session

Copilot AI reviewed Sep 7, 2026

View reviewed changes

Comment thread .github/workflows/ci-python.yml

Yuchao Yan (msyyc) enabled auto-merge September 7, 2026 06:42

Yuchao Yan (msyyc) added this pull request to the merge queue Sep 7, 2026

Merged via the queue into microsoft:main with commit 9bd7a5b Sep 7, 2026
66 of 67 checks passed

Yuchao Yan (msyyc) deleted the msyyc-migrate-python-ci-gate branch September 7, 2026 07:21

Navigation Menu

Uh oh!

Migrate Python checks to CI Gate - #11522

Migrate Python checks to CI Gate#11522
Yuchao Yan (msyyc) merged 25 commits into
microsoft:mainfrom
msyyc:msyyc-migrate-python-ci-gate

Yuchao Yan (msyyc) commented Aug 3, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 3, 2026 •

edited

Loading

`@typespec/http-client-python` - internal ✏️

Uh oh!

azure-sdk-automation Bot commented Aug 3, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Aug 4, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Yuchao Yan (msyyc) commented Aug 31, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Yuchao Yan (msyyc) commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@typespec/http-client-python - internal ✏️

Uh oh!

azure-sdk-automation Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Yuchao Yan (msyyc) commented Aug 31, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Suppressed comments (2)

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Yuchao Yan (msyyc) commented Aug 3, 2026 •

edited

Loading

github-actions Bot commented Aug 3, 2026 •

edited

Loading

`@typespec/http-client-python` - internal ✏️

azure-sdk-automation Bot commented Aug 3, 2026 •

edited

Loading

pkg-pr-new Bot commented Aug 4, 2026 •

edited

Loading