Llmodel batch

.github/workflows/private-release.yaml

@@ -16,8 +16,8 @@ name: Private Release
 run-name: Privately ( artifactory only ) releasing ${{ inputs.version }} (${{ github.ref_name }})
 
 permissions:
-  # Read repository contents
-  contents: read
+  # Write repository contents (needed to push tags)
+  contents: write
   packages: write
 
 on:
@@ -35,7 +35,7 @@ on:
       artifactory_docker_repo:
         description: 'Artifactory docker repository name'
         required: false
-        default: 'mlrun-staging/mlrun'
+        default: 'mlrun-staging'
         type: string
       artifactory_pypi_repo:
         description: 'Artifactory PyPI repository name'
@@ -95,18 +95,27 @@ jobs:
         env:
           BUMP_VERSION_MODE_INPUT: ${{ github.event.inputs.bump_version_mode }}
           VERSION_INPUT: ${{ github.event.inputs.version }}
-          ARTIFACTORY_DOCKER_REPO: ${{ github.event.inputs.artifactory_docker_repo }}
           ARTIFACTORY_PYPI_REPO: ${{ github.event.inputs.artifactory_pypi_repo }}
           UI_REF_INPUT: ${{ github.event.inputs.ui_ref }}
 
+      - name: Display calculated version
+        run: |
+          echo "## 🚀 Private Release" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** \`${{ steps.resolve.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Branch:** \`${{ github.ref_name }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Previous Version:** \`${{ steps.resolve.outputs.previous_version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Is Stable:** \`${{ steps.resolve.outputs.is_stable_version }}\`" >> $GITHUB_STEP_SUMMARY
+
+
   trigger-and-wait-for-mlrun-image-building:
     name: Build and push images to Artifactory
     needs: prepare-inputs
     uses: ./.github/workflows/build-internal.yaml
     with:
       version: ${{ needs.prepare-inputs.outputs.version }}
       runner: 'mlrun-release'
-      docker_repo: ${{ inputs.artifactory_docker_repo }}
+      docker_repo: ${{ inputs.artifactory_docker_repo }}/mlrun
       is_private_release: true
       # On the fork the caches needs to be disabled because ghcr is hardcoded and used for caches. 
       # Having to use mlrun ( due to some product limitations) causes permission issues on forks only, we could set this to true once merged.
@@ -170,3 +179,58 @@ jobs:
           UV_PUBLISH_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
           UV_PUBLISH_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
         run: uv run --no-project --with packaging~=25.0 make publish-package
+
+  create-tag:
+    name: Create tag
+    runs-on: ubuntu-latest
+    needs: [prepare-inputs, trigger-and-wait-for-ui-image-building, trigger-and-wait-for-mlrun-image-building, publish-to-artifactory]
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Create git tag for mlrun version
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -a "v${{ needs.prepare-inputs.outputs.version }}" -m "Release v${{ needs.prepare-inputs.outputs.version }}"
+          git push origin "v${{ needs.prepare-inputs.outputs.version }}"
+          echo "✅ Created and pushed tag: v${{ needs.prepare-inputs.outputs.version }}"
+
+      - name: Generate GitHub App Token for ui repo
+        id: ui-app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: ui
+
+      - name: Create git tag for UI repo
+        env:
+          GH_TOKEN: ${{ steps.ui-app-token.outputs.token }}
+        run: |
+          VERSION="v${{ needs.prepare-inputs.outputs.version }}"
+          UI_REF="${{ needs.prepare-inputs.outputs.ui_ref }}"
+          UI_REPO="${{ github.repository_owner }}/ui"
+
+          # Get the SHA of the ui_ref (try as branch first, then as tag)
+          SHA=$(gh api "repos/${UI_REPO}/git/ref/heads/${UI_REF}" --jq '.object.sha' 2>/dev/null || \
+                gh api "repos/${UI_REPO}/git/ref/tags/${UI_REF}" --jq '.object.sha')
+
+          echo "Creating tag ${VERSION} on UI repo at SHA ${SHA} (from ref: ${UI_REF})"
+
+          # Create annotated tag object
+          TAG_SHA=$(gh api "repos/${UI_REPO}/git/tags" \
+            -X POST \
+            -f tag="${VERSION}" \
+            -f message="Release ${VERSION}" \
+            -f object="${SHA}" \
+            -f type="commit" \
+            --jq '.sha')
+
+          # Create tag reference
+          gh api "repos/${UI_REPO}/git/refs" \
+            -X POST \
+            -f ref="refs/tags/${VERSION}" \
+            -f sha="${TAG_SHA}"
+
+          echo "✅ Created and pushed tag: ${VERSION} on UI repo"        

.github/workflows/release-promotion.yaml

@@ -37,7 +37,7 @@ on:
       source_artifactory_docker_repo:
         description: 'Source Artifactory Docker repository name'
         required: false
-        default: 'mlrun-staging'
+        default: 'mlrun-staging/mlrun'
         type: string
       target_docker_registries:
         description: 'Comma separated list of target docker registries to push promoted images to (e.g., ghcr.io/,quay.io/,registry.hub.docker.com/)'
@@ -258,11 +258,14 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ prepare-inputs, promote-pypi-package ]
     steps:
-      - uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # 1.20.0
+      - name: Create GitHub release (using existing tag from private-release)
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # 1.20.0
         if: github.event.inputs.skip_create_tag_release != 'true'
         with:
           tag: v${{ needs.prepare-inputs.outputs.version }}
-          commit: ${{ github.ref_name }}
+          # Use existing tag created by private-release workflow (don't create new tag)
+          # allowUpdates allows creating a release on an existing tag
+          allowUpdates: true
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: Generate GitHub App Token for ui repo
         if: github.event.inputs.skip_create_tag_release != 'true'
@@ -273,12 +276,14 @@ jobs:
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
           repositories: ui
-      - uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # 1.20.0
+      - name: Create UI repo release (tag should exist from ui-promotion workflow)
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # 1.20.0
         if: github.event.inputs.skip_create_tag_release != 'true'
         with:
           repo: ui
           tag: v${{ needs.prepare-inputs.outputs.version }}
-          commit: ${{ github.ref_name }}
+          # Use existing tag (don't create new one)
+          allowUpdates: true
           token: ${{ steps.ui-release-app-token.outputs.token }}
           # experienced 500 errors when trying to create release notes for ui repo with `prerelease flag`
           # prerelease: ${{ needs.prepare-inputs.outputs.prerelease }}

Makefile

@@ -38,7 +38,7 @@ MLRUN_MYSQL_IMAGE ?= gcr.io/iguazio/mlrun-mysql:8.4
 MLRUN_POSTGRES_IMAGE = gcr.io/iguazio/postgres:17
 
 # TODO: remove this once iguazio package is released to PyPI and move to requirements.txt
-IGUAZIO_PACKAGE_VERSION ?= 0.0.1a22
+IGUAZIO_PACKAGE_VERSION ?= 0.0.1a27
 
 MLRUN_SKIP_COMPILE_SCHEMAS ?=
 INCLUDE_PYTHON_VERSION_SUFFIX ?=