TheRock/rocm-libraries/.github/workflows/therock-multi-arch-ci-nightly.yml

# Copyright Advanced Micro Devices, Inc.
# SPDX-License-Identifier: MIT

# Multi-Arch Nightly CI for rocm-libraries
#
# This workflow runs TheRock's multi-arch CI pipeline on a nightly schedule.
# It builds and tests for gfx94X, gfx950 (Linux) and gfx1151 (Windows).
#
# For manual triggering with custom GPU families, use therock-multi-arch-ci.yml.

name: TheRock Multi-Arch Nightly CI

# TheRock ref: the setup job resolves the live tip of ROCm/TheRock@main to one
# concrete SHA (needs.setup.outputs.ref) and every downstream build/test job
# consumes that SHA so the whole run is locked to a single TheRock commit. See
# ROCm/rocm-libraries#9507 (this supersedes the earlier pinned-SHA plan in
# TheRock#3343). The `uses: ...@main` lines below are the workflow-definition
# ref (Actions forbids an expression there) and are deliberately separate from
# the build-source `ref:` inputs.

on:
  schedule:
    - cron: "0 7 * * *" # Runs nightly at 7 AM UTC
  workflow_dispatch:
    inputs:
      therock_ref_override:
        type: string
        description: "Optional explicit TheRock ref (branch/tag/SHA) to build against. Empty resolves the live tip of ROCm/TheRock@main."
        default: ""

permissions:
  contents: read

concurrency:
  # A PR number if a pull request and otherwise the commit hash. This cancels
  # queued and in-progress runs for the same PR (presubmit) or commit
  # (postsubmit). The workflow name is prepended to avoid conflicts between
  # different workflows.
  group: ${{ github.workflow }}-${{ github.event.number || github.sha }}
  cancel-in-progress: true

jobs:
  setup:
    uses: ROCm/TheRock/.github/workflows/setup_multi_arch.yml@release/therock-10.0
    with:
      build_variant: "release"
      # Limit GPU families for nightly CI: gfx94X, gfx950 (Linux) and gfx1151 (Windows)
      linux_amdgpu_families: 'gfx94X,gfx950'
      windows_amdgpu_families: 'gfx1151'
      linux_test_labels: ''
      windows_test_labels: ''
      prebuilt_stages: ''
      baseline_run_id: ''
      repository: ROCm/TheRock
      # Default resolves the live tip of ROCm/TheRock@main; workflow_dispatch can
      # pin an explicit ref via therock_ref_override. setup resolves this to one
      # concrete SHA (needs.setup.outputs.ref) for every downstream job.
      ref: ${{ inputs.therock_ref_override || 'main' }}
      external_repo: '{"repository":"${{ github.repository }}","ref":"${{ github.sha }}"}'

  log_therock_ref:
    name: Locked TheRock ref
    needs: [setup]
    runs-on: ubuntu-24.04
    steps:
      - name: Surface locked TheRock ref
        run: |
          RESOLVED_REF="${{ needs.setup.outputs.ref }}"
          COMMIT_URL="https://github.com/ROCm/TheRock/commit/${RESOLVED_REF}"
          echo "Locked TheRock ref for this run: ${RESOLVED_REF} (${COMMIT_URL})"
          {
            echo "### Locked TheRock ref"
            echo ""
            echo "Every build/test job in this run is locked to ROCm/TheRock commit [\`${RESOLVED_REF}\`](${COMMIT_URL})."
          } >> "$GITHUB_STEP_SUMMARY"

  linux_build_and_test:
    name: Linux::${{ fromJSON(needs.setup.outputs.linux_build_config || '{}').build_variant_label || 'skip' }}
    needs: [setup]
    if: >-
      ${{
        needs.setup.outputs.linux_build_config != '' &&
        needs.setup.outputs.enable_build_jobs == 'true'
      }}
    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_linux.yml@main
    secrets: inherit
    with:
      build_config: ${{ needs.setup.outputs.linux_build_config }}
      test_labels: ${{ needs.setup.outputs.linux_test_labels }}
      rocm_package_version: ${{ needs.setup.outputs.rocm_package_version }}
      test_type: ${{ needs.setup.outputs.test_type }}
      external_repo_config: ${{ needs.setup.outputs.external_repo_config }}
      # Empty string triggers full test run in downstream workflow
      changed_projects: ''
      repository: ROCm/TheRock
      # Concrete SHA resolved once by setup; do not re-resolve main here.
      ref: ${{ needs.setup.outputs.ref }}
    permissions:
      contents: read
      id-token: write

  windows_build_and_test:
    name: Windows::${{ fromJSON(needs.setup.outputs.windows_build_config || '{}').build_variant_label || 'skip' }}
    needs: [setup]
    if: >-
      ${{
        needs.setup.outputs.windows_build_config != '' &&
        needs.setup.outputs.enable_build_jobs == 'true'
      }}
    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_windows.yml@main
    secrets: inherit
    with:
      build_config: ${{ needs.setup.outputs.windows_build_config }}
      test_labels: ${{ needs.setup.outputs.windows_test_labels }}
      rocm_package_version: ${{ needs.setup.outputs.rocm_package_version }}
      test_type: ${{ needs.setup.outputs.test_type }}
      external_repo_config: ${{ needs.setup.outputs.external_repo_config }}
      # Empty string triggers full test run in downstream workflow
      changed_projects: ''
      repository: ROCm/TheRock
      # Concrete SHA resolved once by setup; do not re-resolve main here.
      ref: ${{ needs.setup.outputs.ref }}
    permissions:
      contents: read
      id-token: write

  multi_arch_ci_summary:
    name: Multi-Arch CI Summary
    if: always()
    needs:
      - setup
      - linux_build_and_test
      - windows_build_and_test
    runs-on: ubuntu-24.04
    steps:
      - name: Checkout TheRock repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: "ROCm/TheRock"
          # Concrete SHA resolved once by setup; do not re-resolve main here.
          ref: ${{ needs.setup.outputs.ref }}
          sparse-checkout: build_tools/github_actions
          sparse-checkout-cone-mode: true

      - name: Evaluate workflow results
        env:
          GITHUB_TOKEN: ${{ github.token }}
        run: |
          python build_tools/github_actions/workflow_summary.py \
            --needs-json '${{ toJSON(needs) }}'