Skip to content

Use GH built-in runner for link check workflow - #17682

Merged
kirklandsign merged 7 commits into
mainfrom
copilot/use-gh-runner-for-script
Feb 25, 2026
Merged

kirklandsign merged 7 commits into
mainfrom
copilot/use-gh-runner-for-script

Conversation

Copilot AI commented Feb 24, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Reduce the job time from 6 minutes to 10 seconds.

Replace pytorch/test-infra reusable workflow + Docker image with direct ubuntu-latest runner for _link_check.yml. The lint scripts only need standard tools (curl, jq, perl, git, grep, sed) already on GH hosted runners. Saves server run hours and cost.

  • Switch all three jobs (lint-urls, lint-xrefs, lint-file-size) from linux_job_v2.yml + executorch-ubuntu-22.04-linter Docker image to runs-on: ubuntu-latest with actions/checkout@v4
  • Remove id-token: write permission (not needed; calling workflow doesn't grant it)
  • Replace fetch-depth: 0 (full clone) with shallow checkout + targeted git fetch --depth=1 of the base SHA
  • Replace three-dot (...) with two-dot (..) in git diff across lint_urls.sh, lint_xrefs.sh, lint_file_size.sh — direct base-to-head diff, no merge-base lookup needed

Test plan

CI — the link check jobs run on this PR.


🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

@pytorch-bot

pytorch-bot Bot commented Feb 24, 2026 •

Copy link
Copy Markdown

🔗 Helpful Links

🧪 See artifacts and rendered test results at hud.pytorch.org/pr/pytorch/executorch/17682

Note: Links to docs will display an error until the docs builds have been completed.

⏳ No Failures, 46 Pending

As of commit c7d3492 with merge base 7e1e6b4 (image):
💚 Looks good so far! There are no failures yet. 💚

This comment was automatically generated by Dr. CI and updates every 15 minutes.

@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Feb 24, 2026
@github-actions

Copy link
Copy Markdown

This PR needs a release notes: label

If your change should be included in the release notes (i.e. would users of this library care about this change?), please use a label starting with release notes:. This helps us keep track and include your important work in the next release notes.

To add a label, you can comment to pytorchbot, for example
@pytorchbot label "release notes: none"

For more information, see
https://github.com/pytorch/pytorch/wiki/PyTorch-AutoLabel-Bot#why-categorize-for-release-notes-and-how-does-it-work.

Co-authored-by: kirklandsign <107070759+kirklandsign@users.noreply.github.com>
Copilot AI changed the title [WIP] Run script using GitHub built-in runner Use GitHub built-in runner for link check workflow Feb 24, 2026
Copilot AI requested a review from kirklandsign February 24, 2026 23:28
Co-authored-by: kirklandsign <107070759+kirklandsign@users.noreply.github.com>
@kirklandsign
kirklandsign marked this pull request as ready for review February 24, 2026 23:33
Copilot AI review requested due to automatic review settings February 24, 2026 23:33

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the reusable link-check workflow to run directly on GitHub-hosted runners (ubuntu-latest) instead of delegating to the pytorch/test-infra reusable workflow and its Docker image, keeping the existing lint script behavior while reducing runtime and required permissions.

Changes:

  • Replaced uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main with runs-on: ubuntu-latest + actions/checkout@v4 for each link-check job.
  • Set minimal job permissions (contents: read) and removed the previously implied id-token: write need.
  • Preserved the existing script invocation logic, including diff-range selection and error messaging.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: kirklandsign <107070759+kirklandsign@users.noreply.github.com>
…t scripts

Co-authored-by: kirklandsign <107070759+kirklandsign@users.noreply.github.com>
Copilot AI requested a review from GregoryComer as a code owner February 24, 2026 23:56
Copilot AI changed the title Use GitHub built-in runner for link check workflow Use GH built-in runner for link check workflow Feb 24, 2026
@kirklandsign kirklandsign reopened this Feb 25, 2026
@kirklandsign
kirklandsign merged commit 3d1062c into main Feb 25, 2026
324 of 335 checks passed
@kirklandsign
kirklandsign deleted the copilot/use-gh-runner-for-script branch February 25, 2026 02:54
psiddh added a commit to psiddh/executorch that referenced this pull request Aug 12, 2026
The URL, xref, and file size linters diffed base..head, where base is the tip
of the base branch rather than the point the branch left it. A branch cut
before recent commits still carries the lines those commits replaced, so
against the newer tip its old copies read as additions and the branch is
blamed for links someone else already repaired. pytorch#21729 failed exactly that
way, on nine links pytorch#21694 had already fixed or ignored.

The workflow resolves the merge base and passes it down. That is the half that
matters for branches already open: on a pull request the reusable workflow
resolves from the merge commit, so it carries this fix even though scripts/
still comes from the branch itself. The scripts switch to three dot ranges so
running them by hand behaves the same way.

Computing a merge base needs history, so the pull request path checks out in
full, restoring what pytorch#17682 traded away for speed at a measured 25s of wall
clock. Pushes and the nightly whole tree scan cannot use a merge base and stay
shallow. A missing merge base leaves the range unset for a whole tree scan
rather than substituting the base tip, which two of the three scripts accept
and then quietly pass.

Authored with Claude Code (Claude Opus 5).
psiddh added a commit to psiddh/executorch that referenced this pull request Aug 12, 2026
The URL, xref, and file size linters diffed base..head, where base is the tip
of the base branch rather than the point the branch left it. A branch cut
before recent commits still carries the lines those commits replaced, so
against the newer tip its old copies read as additions and the branch is
blamed for links someone else already repaired. pytorch#21729 failed exactly that
way, on nine links pytorch#21694 had already fixed or ignored.

The workflow resolves the merge base and passes it down. That is the half that
matters for branches already open: on a pull request the reusable workflow
resolves from the merge commit, so it carries this fix even though scripts/
still comes from the branch itself. The scripts switch to three dot ranges so
running them by hand behaves the same way.

Computing a merge base needs history, so the pull request path checks out in
full, restoring what pytorch#17682 traded away for speed at a measured 25s of wall
clock. Pushes and the nightly whole tree scan cannot use a merge base and stay
shallow. A missing merge base leaves the range unset for a whole tree scan
rather than substituting the base tip, which two of the three scripts accept
and then quietly pass.

Authored with Claude Code (Claude Opus 5).
psiddh added a commit that referenced this pull request Aug 12, 2026
…21765)

### Summary

The URL, xref, and file-size linters diffed `base..head`, where `base`
is the **tip** of the base branch rather than the point the branch left
it. A branch cut before recent commits still carries the lines those
commits replaced, so against the newer tip its old copies read as
additions, and the branch gets blamed for links someone else already
repaired.

#21729 failed exactly this way. It touches 18 files and adds no URLs at
all, but the two-dot diff scoped the lint to 143 files and flagged nine
links that #21694 had already fixed or `@lint-ignore`d. #21707 is
starker: one Python file with no URLs in it, 199 files linted, the same
nine failures.

```
base..head    143 files   <- what CI linted
base...head    18 files   <- what the PR actually changes
```

The stray `jq: parse error` lines in #21729's log are the same symptom
from the other direction: the job runs the branch's own pre-#21694 copy
of `lint_urls.sh`.

### Fix

The workflow resolves the merge base and passes it down. That is the
half that matters for branches already open: on a `pull_request` the
reusable workflow resolves from the merge commit, so it carries this fix
even though `scripts/` still comes from the branch itself. The scripts
also switch to three-dot ranges so `./scripts/lint_urls.sh main HEAD` by
hand behaves the same. `lint_xrefs.sh` and `lint_file_size.sh` had the
identical bug and get the identical change.

**Cost, stated plainly.** A merge base needs real history, so this
restores `fetch-depth: 0` on the `pull_request` path — line for line
what #17682 removed in February for speed. Measured on this branch, that
is ~25s of added wall clock and ~79s of runner time across the three
concurrent jobs. #17682's 6min → 10s was mostly the runner and Docker
change rather than the fetch depth, though the commit changes both at
once and I can't fully separate them. Pushes and the nightly whole-tree
scan cannot use a merge base and stay shallow:

```yaml
fetch-depth: ${{ github.event_name == 'pull_request' && '0' || '1' }}
```

The quotes matter — bare `0` is falsy in GitHub expressions, so `&& 0 ||
1` always yields `1` and would silently disable the fix.

**No silent fallback.** When there is no merge base there is no usable
range, so the range is left unset and the linters scan the whole tree.
Substituting the base tip instead produces a range the scripts fail on
quietly: verified against unrelated histories, `lint_urls.sh` and
`lint_xrefs.sh` both exit **0** having checked nothing, while
`lint_file_size.sh` exits 128 and the wrapper reports "some files exceed
the 1 MB limit", which is not what happened. Unset args are loud instead
— verified rc=1 on a tree containing a dead link.

**`--no-color`.** Both `git diff` calls now pass it, matching the `git
grep --no-color` two lines below. With `color.ui = always` in a
developer's config, added lines arrive wrapped in escape sequences,
`grep -E '^\+'` matches nothing, and the check passes having found
nothing (measured: 2 matches → 0).

### Test plan

`.ci/scripts/tests/test_link_check_diff_selection.py` builds a diverged
history where `main` repairs bad links and shrinks an oversized file
while the feature branch simply predates all of it. Four fixture files
each pin a different part, and `curl` is stubbed so there is no network:

| Fixture | Pins |
|---|---|
| `both_sides.md` — edited on both branches | the per-file diff range |
| `big.bin` — oversized at the branch point, shrunk on main |
`lint_file_size.sh`'s range |
| `colorful.gitconfig` — `color.ui = always` | `--no-color` |
| `base_only.md` / `feature_only.md` | that main-only changes stay
invisible and the branch's own additions are still checked |

```
pytest .ci/scripts/tests/test_link_check_diff_selection.py   # 4 passed
```

Mutating each changed line individually:

```
inner per-file range -> ..     3 failed   caught
lint_file_size range -> ..     1 failed   caught
drop --no-color                1 failed   caught
file-selection range -> ..     4 passed   equivalent mutant, see below
```

The file-selection range is not pinned because it cannot be: with the
per-file diff at three dots, the extra files it selects produce empty
diffs. Replayed against #21707's real 199-file range, both variants emit
byte-identical output. It is changed for consistency, not behaviour.

**Narrowing the scope must not blunt the check**, so each linter also
has a positive control where the branch itself adds the bad thing:

```
lint_urls      adds a dead URL         -> rc=1, reports example.invalid/dead
lint_xrefs     adds a broken reference -> rc=1, reports sub/missing.md
lint_file_size adds a 1MB+ file        -> rc=1, reports feature_big.bin
```

End to end on real content: a synthetic commit on top of `main` that
puts #21694's nine repaired links back, as if a PR had added them, gives
`rc=1` with 9 FAIL and 5 OK against the live network. Incidentally
`musl.cc` answered this time where CI saw `000`, and
`pybind/cmake_example` now 404s where CI saw `301` — which is the
retry-then-WARN path earning its keep.

Also replayed #21729's and #21707's exact CI refs through the fixed
scripts (exit 0 each), and ran all three linters plus `lintrunner`
against this PR's own diff.

### Known limitations

- The checkout is `head.sha`, so references still resolve against the
branch tree rather than the merge result — the mirror image of the bug
fixed here. Pre-existing and not worsened by this PR.
- The whole-tree branch swallows a `git grep` failure and exits 0, so on
a git built without PCRE the scan silently checks nothing. Reachable
locally, not on the runners, which is why the nightly scan works.
Pre-existing; worth a follow-up rather than widening this PR.

### Rollout

This does **not** repair a currently red run. A rerun keeps the original
`GITHUB_SHA`, and advancing the base alone does not fire `synchronize`,
so an already-open PR picks the fix up only on its next newly triggered
pull-request run — any push, or close/reopen. That is still cheaper than
a content rebase: no history rewrite, no conflicts, nothing to
re-review.

Supersedes #21762, which fixes the same bug but leaves the checkout
shallow and misses `lint_urls.sh`. Its reviewer's shallow-checkout point
is exactly right: a `--depth=1` fetch writes a shallow graft even into
an otherwise complete clone, after which `git merge-base` fails and
`A...B` is fatal, so the two halves of this change are a pair. The
regression test here is adapted from that PR.

Authored with Claude Code (Claude Opus 5).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants