pr.yaml

name: pr
on:
  push:
    branches:
      - "pull-request/[0-9]+"
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
permissions: {}
jobs:
  pr-builder:
    needs:
      - build-details
      - check-nightly-ci
      - changed-files
      - checks
      - check-c-abi
      - security-suite
      - conda-cpp-build
      - conda-cpp-tests
      - conda-cpp-checks
      - conda-python-build
      - conda-python-tests
      - rocky8-clib-standalone-build
      - rocky8-clib-tests
      - conda-java-build
      - conda-java-tests
      - conda-lucene-build
      - conda-lucene-tests
      - conda-lucene-tests-min-jdk
      - rust-build
      - go-build
      - docs-build
      - docs-build-matrix
      - wheel-build-libcuvs
      - wheel-build-cuvs
      - wheel-tests-cuvs
      - devcontainer
    uses: rapidsai/shared-workflows/.github/workflows/pr-builder.yaml@main
    permissions:
      contents: read
    if: always()
    with:
      needs: ${{ toJSON(needs) }}
  build-details:
    uses: rapidsai/shared-workflows/.github/workflows/compute-build-details.yaml@main
  check-nightly-ci:
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      id-token: write
      pull-requests: read
    env:
      GH_TOKEN: ${{ github.token }}
    steps:
      - name: Get PR Info
        id: get-pr-info
        uses: nv-gha-runners/get-pr-info@main
      - name: Check if nightly CI is passing
        uses: rapidsai/shared-actions/check_nightly_success/dispatch@main
        with:
          repo: ${{ github.repository }}
          target-branch: ${{ fromJSON(steps.get-pr-info.outputs.pr-info).base.ref }}
          max-days-without-success: 30
  changed-files:
    permissions:
      actions: read
      contents: read
      packages: read
      pull-requests: read
    uses: rapidsai/shared-workflows/.github/workflows/changed-files.yaml@main
    with:
      files_yaml: |
        build_docs:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!Dockerfile'
          - '!SECURITY.md'
          - '!ci/build_wheel*.sh'
          - '!ci/check_style.sh'
          - '!ci/release/update-version.sh'
          - '!ci/run*.sh'
          - '!ci/test*.sh'
          - '!ci/validate_wheel.sh'
          - '!thirdparty/LICENSES/**'
        test_cpp:
          - '.github/workflows/pr.yaml'
          - 'RAPIDS_BRANCH'
          - 'VERSION'
          - 'build.sh'
          - 'c/**'
          - 'ci/build_cpp.sh'
          - 'ci/get_test_data.sh'
          - 'ci/test_cpp.sh'
          - 'cmake/**'
          - 'conda/recipes/libcuvs/**'
          - 'cpp/**'
          - 'dependencies.yaml'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!cpp/doxygen/**'
        test_standalone_c:
          - '.github/workflows/pr.yaml'
          - 'RAPIDS_BRANCH'
          - 'VERSION'
          - 'build.sh'
          - 'c/**'
          - 'ci/standalone_c/**'
          - 'ci/test_standalone_c.sh'
          - 'cmake/**'
          - 'cpp/**'
          - 'dependencies.yaml'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!cpp/doxygen/**'
        test_java:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!CODEOWNERS'
          - '!Dockerfile'
          - '!README.md'
          - '!SECURITY.md'
          - '!ci/build_docs.sh'
          - '!ci/build_go.sh'
          - '!ci/build_python.sh'
          - '!ci/build_rust.sh'
          - '!ci/build_wheel*.sh'
          - '!ci/checkstyle.sh'
          - '!ci/run_cuvs_pytests.sh'
          - '!ci/test_cpp.sh'
          - '!ci/test_python.sh'
          - '!ci/test_wheel_cuvs.sh'
          - '!ci/validate_wheel.sh'
          - '!conda/environments/**'
          - '!conda/recipes/cuvs/**'
          - '!conda/recipes/cuvs-bench/**'
          - '!conda/recipes/cuvs-bench-cpu/**'
          - '!docs/**'
          - '!examples/.clang-format'
          - '!examples/.clang-tidy'
          - '!examples/.clangd'
          - '!examples/README.md'
          - '!examples/build.sh'
          - '!examples/c/**'
          - '!examples/cmake/**'
          - '!examples/cpp/**'
          - '!examples/go/**'
          - '!fern/**'
          - '!go/**'
          - '!img/**'
          - '!notebooks/**'
          - '!pyproject.toml'
          - '!python/**'
          - '!rust/**'
          - '!thirdparty/LICENSES/**'
        test_python_conda:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!ci/build_go.sh'
          - '!ci/build_java.sh'
          - '!ci/build_lucene.sh'
          - '!ci/build_rust.sh'
          - '!ci/check_style.sh'
          - '!ci/release/update-version.sh'
          - '!ci/run_ctests.sh'
          - '!ci/test_cpp.sh'
          - '!ci/test_java.sh'
          - '!ci/test_lucene.sh'
          - '!ci/test_standalone_c.sh'
          - '!ci/test_wheel_cuvs.sh'
          - '!ci/validate_wheel.sh'
          - '!cpp/.clang-format'
          - '!cpp/.clang-tidy'
          - '!CODEOWNERS'
          - '!Dockerfile'
          - '!README.md'
          - '!SECURITY.md'
          - '!docs/**'
          - '!examples/**'
          - '!fern/**'
          - '!go/**'
          - '!img/**'
          - '!java/**'
          - '!notebooks/**'
          - '!rust/**'
          - '!thirdparty/LICENSES/**'
        test_python_wheels:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!ci/build_cpp.sh'
          - '!ci/build_docs.sh'
          - '!ci/build_go.sh'
          - '!ci/build_java.sh'
          - '!ci/build_lucene.sh'
          - '!ci/build_python.sh'
          - '!ci/build_rust.sh'
          - '!ci/build_standalone_c.sh'
          - '!ci/check_style.sh'
          - '!ci/release/update-version.sh'
          - '!ci/run_ctests.sh'
          - '!ci/test_cpp.sh'
          - '!ci/test_java.sh'
          - '!ci/test_lucene.sh'
          - '!ci/test_python.sh'
          - '!ci/test_standalone_c.sh'
          - '!ci/validate_wheel.sh'
          - '!CODEOWNERS'
          - '!Dockerfile'
          - '!README.md'
          - '!SECURITY.md'
          - '!conda/**'
          - '!cpp/.clang-format'
          - '!cpp/.clang-tidy'
          - '!docs/**'
          - '!examples/**'
          - '!fern/**'
          - '!java/**'
          - '!go/**'
          - '!img/**'
          - '!notebooks/**'
          - '!rust/**'
          - '!thirdparty/LICENSES/**'
        test_rust:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!CODEOWNERS'
          - '!Dockerfile'
          - '!README.md'
          - '!SECURITY.md'
          - '!ci/build_docs.sh'
          - '!ci/build_go.sh'
          - '!ci/build_java.sh'
          - '!ci/build_lucene.sh'
          - '!ci/build_python.sh'
          - '!ci/build_wheel*.sh'
          - '!ci/check_style.sh'
          - '!ci/release/update-version.sh'
          - '!ci/run_ctests.sh'
          - '!ci/run_cuvs_pytests.sh'
          - '!ci/test_cpp.sh'
          - '!ci/test_java.sh'
          - '!ci/test_lucene.sh'
          - '!ci/test_python.sh'
          - '!ci/test_wheel_cuvs.sh'
          - '!ci/validate_wheel.sh'
          - '!docs/**'
          - '!examples/**'
          - '!fern/**'
          - '!go/**'
          - '!img/**'
          - '!java/**'
          - '!notebooks/**'
          - '!python/**'
          - '!thirdparty/LICENSES/**'
        test_go:
          - '**'
          - '!**/*/REVIEW_GUIDELINES.md'
          - '!.coderabbit.yaml'
          - '!.devcontainer/**'
          - '!.github/CODEOWNERS'
          - '!.github/ISSUE_TEMPLATE/**'
          - '!.github/PULL_REQUEST_TEMPLATE.md'
          - '!.github/copy-pr-bot.yaml'
          - '!.github/labeler.yml'
          - '!.github/ops-bot.yaml'
          - '!.github/release.yml'
          - '!.github/workflows/build.yaml'
          - '!.github/workflows/check-c-abi.yaml'
          - '!.github/workflows/labeler.yml'
          - '!.github/workflows/publish-rust.yaml'
          - '!.github/workflows/security-suite.yml'
          - '!.github/workflows/store-c-abi-baseline.yaml'
          - '!.github/workflows/test.yaml'
          - '!.github/workflows/trigger-breaking-change-alert.yaml'
          - '!.github/workflows/update-c-abi-baseline.yaml'
          - '!.pre-commit-config.yaml'
          - '!.shellcheckrc'
          - '!.yamllint.yaml'
          - '!CODEOWNERS'
          - '!Dockerfile'
          - '!README.md'
          - '!SECURITY.md'
          - '!ci/build_docs.sh'
          - '!ci/build_java.sh'
          - '!ci/build_lucene.sh'
          - '!ci/build_python.sh'
          - '!ci/build_rust.sh'
          - '!ci/build_wheel*.sh'
          - '!ci/check_style.sh'
          - '!ci/release/update-version.sh'
          - '!ci/run_ctests.sh'
          - '!ci/run_cuvs_pytests.sh'
          - '!ci/test_cpp.sh'
          - '!ci/test_java.sh'
          - '!ci/test_lucene.sh'
          - '!ci/test_python.sh'
          - '!ci/test_standalone_c.sh'
          - '!ci/test_wheel_cuvs.sh'
          - '!ci/validate_wheel.sh'
          - '!docs/**'
          - '!examples/.clang-format'
          - '!examples/.clang-tidy'
          - '!examples/.clangd'
          - '!examples/README.md'
          - '!examples/build.sh'
          - '!examples/c/**'
          - '!examples/cmake/**'
          - '!examples/cpp/**'
          - '!examples/java/**'
          - '!fern/**'
          - '!img/**'
          - '!java/**'
          - '!notebooks/**'
          - '!python/**'
          - '!rust/**'
          - '!thirdparty/LICENSES/**'
        devcontainer_build_inputs:
          - '.devcontainer/**'
          - '.github/workflows/pr.yaml'
          - 'RAPIDS_BRANCH'
          - 'c/**'
          - 'cmake/**'
          - 'cpp/**'
          - 'dependencies.yaml'
          - 'python/**'
          - '!**/*.md'
  checks:
    uses: rapidsai/shared-workflows/.github/workflows/checks.yaml@main
    permissions:
      contents: read
    with:
      enable_check_generated_files: false
      # Main builds seed this cache. PR merge refs can restore it but should not create
      # duplicate archives that are inaccessible to other PRs.
      pre-commit-cache-read-only: true
  check-c-abi:
    permissions:
      actions: read
      contents: read
      issues: write
      pull-requests: read
    uses: ./.github/workflows/check-c-abi.yaml
  security-suite:
    permissions:
      actions: read
      contents: read
      id-token: write # OIDC -> Vault -> nvcr.io image pull
      security-events: write # publish redacted SARIF to code scanning
    uses: ./.github/workflows/security-suite.yml
  conda-cpp-build:
    needs: [build-details, checks]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/conda-cpp-build.yaml@main
    with:
      build_type: pull-request
      build-datetime: ${{ needs.build-details.outputs.build-datetime }}
      node_type: cpu16
      script: ci/build_cpp.sh
      matrix_type: pull-request
  conda-cpp-tests:
    needs: [conda-cpp-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/conda-cpp-tests.yaml@main
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
    # Split the C++ tests across several jobs for each CUDA/GPU configuration
    strategy:
      fail-fast: false
      matrix:
        shard: [1, 2, 3, 4]
        num_shards: [4]
    with:
      build_type: pull-request
      script: "ci/test_cpp.sh ${{ matrix.shard }} ${{ matrix.num_shards }}"
      cache-paths: .cache/cuda-jit
      # One cache per test shard: each shard links a different set of kernels.
      cache-key-prefix: libcuvs-cudajit-v1-shard${{ matrix.shard }}of${{ matrix.num_shards }}
      # Caches are immutable. Re-key when the JIT-relevant sources change so a completed run can
      # save newly compiled entries; restore a compatible earlier archive first.
      cache-key-files: |
        cpp/CMakeLists.txt
        cpp/cmake/**
        cpp/include/cuvs/detail/jit_lto/**
        cpp/src/detail/jit_lto/**
        cpp/src/distance/detail/pairwise_matrix/jit_lto_kernels/**
        cpp/src/neighbors/detail/cagra/jit_lto_kernels/**
        cpp/src/neighbors/detail/jit_lto_kernels/**
        cpp/src/neighbors/ivf_flat/detail/jit_lto_kernels/**
        cpp/src/neighbors/ivf_pq/detail/jit_lto_kernels/**
        cpp/src/neighbors/ivf_rabitq/jit_lto_kernels/**
        cpp/src/neighbors/ivf_sq/detail/jit_lto_kernels/**
        cpp/tests/**
        dependencies.yaml
      # The CUDA driver's JIT cache is independent of the Python interpreter used to run C++ tests.
      cache-key-matrix-fields: |
        CUDA_VER
        ARCH
        LINUX_VER
        GPU
        DRIVER
        DEPENDENCIES
      # PRs restore a compatible main cache but do not create merge-ref-scoped entries.
      cache-read-only: true
      cache-environment: |
        CUDA_CACHE_PATH=.cache/cuda-jit
      matrix_type: pull-request
  conda-cpp-checks:
    needs: conda-cpp-build
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: rapidsai/shared-workflows/.github/workflows/conda-cpp-post-build-checks.yaml@main
    with:
      build_type: pull-request
      symbol_exclusions: (void (thrust::|cub::))
      package_name: libcuvs
  conda-python-build:
    needs: [build-details, conda-cpp-build]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/conda-python-build.yaml@main
    with:
      build_type: pull-request
      build-datetime: ${{ needs.build-details.outputs.build-datetime }}
      script: ci/build_python.sh
      # Build a conda package for each CUDA x ARCH x minimum supported Python version
      matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
      matrix_type: pull-request
  conda-python-tests:
    needs: [conda-python-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_conda
    with:
      build_type: pull-request
      script: ci/test_python.sh
      matrix_type: pull-request
  rocky8-clib-standalone-build:
    needs: checks
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/clib-build.yaml
    with:
      build_type: pull-request
      matrix_type: pull-request
  rocky8-clib-tests:
    needs: [rocky8-clib-standalone-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_standalone_c
    with:
      build_type: pull-request
      container-image-repository: "rapidsai/citestwheel"
      script: "ci/test_standalone_c.sh"
      matrix_type: pull-request
  conda-java-build:
    needs: [conda-cpp-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_java || fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
    # Artifacts are not published from these jobs, so it's safe to run for multiple CUDA versions.
    # If these jobs start producing artifacts, the names will have to differentiate between CUDA versions.
    with:
      build_type: pull-request
      node_type: cpu8
      matrix_filter: map(select(.ARCH == "amd64"))
      script: "ci/build_java.sh"
      artifact-name-prefix: "cuvs-java"
      file_to_upload: "java/cuvs-java/target/"
      matrix_type: pull-request
  conda-java-tests:
    needs: conda-java-build
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    with:
      build_type: pull-request
      script: "ci/test_java.sh"
      matrix_type: pull-request
  conda-lucene-build:
    # Depends on the Java job for the cuvs-java artifact that cuvs-lucene builds against.
    needs: conda-java-build
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    # Artifacts are not published from these jobs, so it's safe to run for multiple CUDA versions.
    # If these jobs start producing artifacts, the names will have to differentiate between CUDA versions.
    with:
      build_type: pull-request
      node_type: cpu8
      matrix_filter: map(select(.ARCH == "amd64"))
      script: "ci/build_lucene.sh"
      artifact-name-prefix: "cuvs-lucene"
      file_to_upload: "java/cuvs-lucene/*/target/"
      matrix_type: pull-request
  conda-lucene-tests:
    needs: conda-lucene-build
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    with:
      build_type: pull-request
      script: "ci/test_lucene.sh"
      matrix_type: pull-request
  conda-lucene-tests-min-jdk:
    # Verifies that cuvs-lucene loads and works without the GPU on the oldest JDK it supports
    # (java_min_jdk in dependencies.yaml), by running its test suite against the amd64-built
    # classes without recompiling -- see ci/test_lucene.sh. It runs once, not per CUDA version: it
    # uses no GPU, so the artifacts of any amd64 entry of the build matrix will do. This matters
    # because many applications built on Lucene support older JDKs than the 22 that cuvs-java needs
    # for the GPU. cuvs-lucene can't stop such an application from starting on an older JDK, so
    # there it has to load and fall back to the CPU.
    needs: conda-lucene-build
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    with:
      build_type: pull-request
      node_type: cpu8
      matrix_filter: '[map(select(.ARCH == "amd64")) | max_by(.CUDA_VER | split(".") | map(tonumber))]'
      matrix_type: pull-request
      script: "ci/test_lucene.sh --min-jdk"
  rust-build:
    needs: [conda-cpp-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_rust || fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
    # Artifacts are not published from these jobs, so it's safe to run for multiple CUDA versions.
    # If these jobs start producing artifacts, the names will have to differentiate between CUDA versions.
    with:
      build_type: pull-request
      matrix_filter: map(select(.ARCH == "amd64"))
      script: "ci/build_rust.sh"
      matrix_type: pull-request
  go-build:
    needs: [conda-cpp-build, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    uses: ./.github/workflows/matrix-job.yaml
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_go || fromJSON(needs.changed-files.outputs.changed_file_groups).test_cpp
    # Artifacts are not published from these jobs, so it's safe to run for multiple CUDA versions.
    # If these jobs start producing artifacts, the names will have to differentiate between CUDA versions.
    with:
      build_type: pull-request
      matrix_filter: map(select(.ARCH == "amd64"))
      script: "ci/build_go.sh"
      matrix_type: pull-request
  docs-build-matrix:
    permissions:
      contents: read
    uses: rapidsai/shared-workflows/.github/workflows/compute-matrix.yaml@main
    with:
      build_type: pull-request
      matrix_name: docs-build
      matrix_type: pull-request
  docs-build:
    needs: [docs-build-matrix, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/custom-job.yaml@main
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).build_docs
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.docs-build-matrix.outputs.matrix) }}
    with:
      build_type: pull-request
      node_type: "gpu-${{ matrix.GPU }}-${{ matrix.DRIVER }}-1"
      arch: "${{ matrix.arch }}"
      container_image: "rapidsai/ci-conda:26.12-cuda${{ matrix.CUDA_VER }}-${{ matrix.LINUX_VER }}-py${{ matrix.PY_VER }}"
      script: "ci/build_docs.sh"
  wheel-build-libcuvs:
    needs: [build-details, checks]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/wheels-build.yaml@main
    with:
      build_type: pull-request
      build-datetime: ${{ needs.build-details.outputs.build-datetime }}
      node_type: cpu16
      script: ci/build_wheel_libcuvs.sh
      # build for every combination of arch and CUDA version, but only for the latest Python
      matrix_filter: group_by([.ARCH, (.CUDA_VER|split(".")|map(tonumber)|.[0])]) | map(max_by(.PY_VER|split(".")|map(tonumber)))
      package-name: libcuvs
      package-type: cpp
      matrix_type: pull-request
  wheel-build-cuvs:
    needs: [build-details, wheel-build-libcuvs]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/wheels-build.yaml@main
    with:
      build_type: pull-request
      build-datetime: ${{ needs.build-details.outputs.build-datetime }}
      node_type: cpu8
      script: ci/build_wheel_cuvs.sh
      package-name: cuvs
      package-type: python
      # Build a wheel for each CUDA x ARCH x minimum supported Python version
      matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
      matrix_type: pull-request
  wheel-tests-cuvs:
    needs: [wheel-build-cuvs, changed-files]
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    uses: rapidsai/shared-workflows/.github/workflows/wheels-test.yaml@main
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_wheels
    with:
      build_type: pull-request
      script: ci/test_wheel_cuvs.sh
      matrix_type: pull-request
  devcontainer:
    permissions:
      actions: read
      contents: read
      id-token: write
      packages: read
      pull-requests: read
    secrets: inherit # zizmor: ignore[secrets-inherit]
    needs: [changed-files]
    if: fromJSON(needs.changed-files.outputs.changed_file_groups).devcontainer_build_inputs
    uses: rapidsai/shared-workflows/.github/workflows/build-in-devcontainer.yaml@main
    with:
      arch: '["amd64", "arm64"]'
      cuda: '["13.4"]'
      node_type: "cpu8"
      env: |
        SCCACHE_DIST_MAX_RETRIES=inf
        SCCACHE_SERVER_LOG=sccache=debug
        SCCACHE_DIST_FALLBACK_TO_LOCAL_COMPILE=false
      build_command: |
        sccache --zero-stats;
        build-all -j0 --verbose;
        sccache --show-adv-stats;