Clean up #80007
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| workflow_dispatch: | |
| inputs: | |
| delete_draft_releases: | |
| type: boolean | |
| description: Delete all draft releases on GitHub. This will interfere with any active publishing workflow. | |
| required: false | |
| default: false | |
| delete_temp_branches: | |
| type: boolean | |
| description: Delete temporary branches created for publishing. This will interfere with any active publishing workflow. | |
| required: false | |
| default: false | |
| schedule: | |
| - cron: "*/5 * * * *" | |
| pull_request_target: | |
| types: | |
| - closed | |
| name: Clean up | |
| jobs: | |
| bot_branches: | |
| name: Delete temporary bot/* branches | |
| if: github.event_name == 'workflow_dispatch' && inputs.delete_temp_branches | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: | | |
| branches_to_delete=`gh api --paginate \ | |
| -H "Accept: application/vnd.github+json" \ | |
| -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| /repos/${{ github.repository }}/branches \ | |
| --jq '.[] | select(.name | test("^bot/[0-9]+")).name'` | |
| for branch in $branches_to_delete; do | |
| echo "Deleting $branch." | |
| gh api \ | |
| --method DELETE \ | |
| -H "Accept: application/vnd.github+json" \ | |
| -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| /repos/nvidia/cuda-quantum/git/refs/heads/$branch | |
| done | |
| env: | |
| GH_TOKEN: ${{ secrets.REPO_BOT_ACCESS_TOKEN || github.token }} | |
| draft_releases: | |
| name: Delete draft release | |
| if: github.event_name == 'workflow_dispatch' && inputs.delete_draft_releases | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: | | |
| gh release list -L 1000 -R ${{ github.repository }} > rels.txt | |
| while read rel _; do | |
| isDraft=`gh release view $rel -R ${{ github.repository }} --json isDraft --jq '.isDraft'` | |
| isPrerelease=`gh release view $rel -R ${{ github.repository }} --json isPrerelease --jq '.isPrerelease'` | |
| if $isDraft && $isPrerelease; then | |
| echo "Deleting release $rel." | |
| gh release delete $rel -R ${{ github.repository }} -y | |
| else | |
| echo "Skipping release $rel." | |
| fi | |
| done < rels.txt | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| ghcr_images: | |
| name: Clean up GHCR images | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| image_name: [cuda-quantum, cuda-quantum-assets, cuda-quantum-dev, cuda-quantum-devdeps, open-mpi] | |
| fail-fast: false | |
| steps: | |
| # We need to keep a good number of untagged manifests, | |
| # since each tagged image contains/depends on untagged components | |
| - name: Delete untagged images | |
| uses: actions/delete-package-versions@v5 | |
| with: | |
| package-name: ${{ matrix.image_name }} | |
| package-type: 'container' | |
| min-versions-to-keep: 200 | |
| delete-only-untagged-versions: 'true' | |
| - name: Log in to the container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ github.token }} | |
| - name: Find matching signatures files | |
| id: sig_files | |
| run: | | |
| gh api -X GET --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| /orgs/${{ github.repository_owner }}/packages/container/${{ matrix.image_name }}/versions >> packages.json | |
| sig_tags=`cat packages.json | jq -r ".[] | select(.metadata.package_type==\"container\").metadata.container.tags[]" | (egrep -o '^sha256-\S+\.sig$' || true)` | |
| nr_sigs=100 # limit how much we delete at a time to avoid exceeding the service rate limit | |
| for sig in $sig_tags; do | |
| if [ $nr_sigs -lt 1 ]; then continue; fi | |
| matching_image=`cat packages.json | jq -r ".[] | select(.name==\"sha256:${sig:7:-4}\").id"` | |
| if [ -z "$matching_image" ]; then | |
| echo "Marking signature $sig for deletion." | |
| delete+=", $sig" | |
| nr_sigs=$(($nr_sigs-1)) | |
| fi | |
| done | |
| echo "tags_to_remove=${delete:2}" >> $GITHUB_OUTPUT | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - name: Look up version numbers | |
| id: packages | |
| run: | | |
| for tag in ${{ steps.sig_files.outputs.tags_to_remove }}; do | |
| echo "Finding version id for tag ${tag%,}." | |
| version_id=`cat packages.json | jq ".[] | select(.metadata.package_type==\"container\" and (.metadata.container.tags[] | contains(\"${tag%,}\")))" | jq '.id'` | |
| if [ -n "$version_id" ]; then | |
| echo "Marking version $version_id for deletion." | |
| delete+=", $version_id" | |
| fi | |
| done | |
| echo "[${delete:2}]" | |
| echo "versions_to_remove=${delete:2}" >> $GITHUB_OUTPUT | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - name: Delete matching signatures | |
| if: steps.packages.outputs.versions_to_remove | |
| uses: actions/delete-package-versions@v5 | |
| with: | |
| package-name: ${{ matrix.image_name }} | |
| package-type: 'container' | |
| package-version-ids: '${{ steps.packages.outputs.versions_to_remove }}' | |
| # We use environments to deploy to a public registry after PRs are merged. | |
| # Since we use the same workflows during CI, a default environment that defines | |
| # the necessary variables is used instead. Unfortunately, this automatically | |
| # also creates an (unwanted) deployment, which we delete with this job. | |
| # See also https://github.com/actions/runner/issues/2120 | |
| deployments: | |
| name: Deployments | |
| runs-on: ubuntu-latest | |
| permissions: | |
| deployments: write | |
| steps: | |
| - uses: actions/github-script@v7 | |
| with: | |
| script: | | |
| const deployments = await github.rest.repos.listDeployments({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| environment: 'default' | |
| }); | |
| await Promise.all( | |
| deployments.data.map(async (deployment) => { | |
| await github.rest.repos.createDeploymentStatus({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| deployment_id: deployment.id, | |
| state: 'inactive' | |
| }); | |
| return github.rest.repos.deleteDeployment({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| deployment_id: deployment.id | |
| }); | |
| }) | |
| ); | |
| pr_cleanup: | |
| name: Clean up documentation previews | |
| if: github.event_name == 'pull_request_target' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ vars.preview_branch }} | |
| - name: Delete preview folder | |
| run: | | |
| git config --global user.name "cuda-quantum-bot" | |
| git config --global user.email "cuda-quantum-bot@users.noreply.github.com" | |
| git rm -r "pr-${{ github.event.pull_request.number }}" --ignore-unmatch | |
| git commit --allow-empty -m "Cleaning up docs preview for PR #${{ github.event.pull_request.number }}." | |
| git config pull.rebase true | |
| git pull --no-edit && git push |