61a9719d7a
permissions:
- All five PR-time workflows (backend, frontend, inference smoke, tauri,
wheel) now declare permissions: contents: read at the workflow level,
matching CodeQL's default-permissions guidance and the existing pattern
in release-desktop.yml. None of these workflows write to the repo.
skipped tests:
- Repo tests (CPU) job now installs node 22 and uv, which unblocks
~60 tests that were silently skipping on CI:
- 9 tests in tests/studio/test_chat_preset_builtin_invariants.py
skipped on "node not available". Fixed in this commit; an obsolete
"unsloth_repo/" prefix in WORKDIR was also pointing the source-file
existence check at a path that no longer exists.
- tests/python/test_e2e_no_torch_sandbox.py (47), test_studio_import_no_torch.py
(29), test_tokenizers_and_torch_constraint.py (most of 42) all spawn
fresh uv venvs and self-skip when uv is missing.
- Three test_tokenizers_and_torch_constraint.py cases are deselected
because they expose a real bug in studio/backend/requirements/no-torch-runtime.txt:
the unpinned tokenizers line resolves to 0.23.1, which transformers
rejects with "tokenizers>=0.22.0,<=0.23.0 is required". Tracked
separately as a no-torch install regression.
Locally: 760 passed, 1 skipped, 23 deselected (was 694 / 67 / 23).
127 lines
4.6 KiB
YAML
127 lines
4.6 KiB
YAML
# SPDX-License-Identifier: AGPL-3.0-only
|
|
# Copyright 2026-present the Unsloth AI Inc. team. All rights reserved.
|
|
|
|
# Builds the PyPI wheel from the PR branch, then verifies the built wheel
|
|
# actually contains what we expect to ship and does NOT contain the broken
|
|
# Studio bundle that 2026.5.1 published. This is the single workflow that
|
|
# would have blocked the 2026.5.1 release before twine upload.
|
|
#
|
|
# Verified locally end-to-end against this branch:
|
|
# - python -m build produces unsloth-<version>-py3-none-any.whl in 13s
|
|
# - wheel content sanity passes:
|
|
# lockfile shipped, frontend dist shipped,
|
|
# no node_modules in wheel, no bun.lock in wheel,
|
|
# main bundle has unstable_Provider hits=1 (assistant-ui internals only).
|
|
# - Studio backend imports cleanly from the installed wheel with the
|
|
# lightweight dep set below.
|
|
|
|
name: Wheel CI
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- 'pyproject.toml'
|
|
- 'studio/**'
|
|
- 'unsloth/**'
|
|
- 'unsloth_cli/**'
|
|
- '.github/workflows/wheel-smoke.yml'
|
|
push:
|
|
branches: [main, pip]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
wheel:
|
|
name: Wheel build + content sanity + import smoke
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '22'
|
|
cache: 'npm'
|
|
cache-dependency-path: studio/frontend/package-lock.json
|
|
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: '3.12'
|
|
|
|
- name: Build frontend
|
|
run: |
|
|
cd studio/frontend
|
|
npm ci --no-fund --no-audit
|
|
npm run build
|
|
|
|
- name: Build wheel + sdist
|
|
run: |
|
|
python -m pip install --upgrade pip build
|
|
rm -rf dist build ./*.egg-info
|
|
python -m build
|
|
|
|
- name: Wheel content sanity
|
|
run: |
|
|
python - <<'PY'
|
|
import zipfile, glob, sys
|
|
w = glob.glob("dist/unsloth-*.whl")
|
|
if not w:
|
|
print("FAIL: no wheel produced"); sys.exit(2)
|
|
w = w[0]
|
|
print(f"wheel: {w}")
|
|
with zipfile.ZipFile(w) as z:
|
|
n = z.namelist()
|
|
checks = {
|
|
"lockfile shipped": any(s.endswith("studio/frontend/package-lock.json") for s in n),
|
|
"frontend dist shipped": any(s.endswith("studio/frontend/dist/index.html") for s in n),
|
|
"no node_modules": not any("studio/frontend/node_modules/" in s for s in n),
|
|
"no bun.lock": not any(s.endswith("studio/frontend/bun.lock") for s in n),
|
|
}
|
|
js = [s for s in n
|
|
if "studio/frontend/dist/assets/" in s
|
|
and s.endswith(".js")
|
|
and "/index-" in s]
|
|
if not js:
|
|
print("FAIL: no main bundle index-*.js in wheel"); sys.exit(2)
|
|
data = z.read(js[0]).decode("utf-8", "replace")
|
|
hits = data.count("unstable_Provider:")
|
|
print(f"main bundle: {js[0]}")
|
|
print(f"unstable_Provider hits: {hits} (>=4 indicates 2026.5.1 regression)")
|
|
checks["bundle has no Studio unstable_Provider call site"] = (hits < 4)
|
|
|
|
print()
|
|
for k, v in checks.items():
|
|
print(f" [{'PASS' if v else 'FAIL'}] {k}")
|
|
sys.exit(0 if all(checks.values()) else 1)
|
|
PY
|
|
|
|
- name: Studio backend import smoke
|
|
# Imports `studio.backend.main:app` from the freshly-installed wheel in
|
|
# a clean venv. This catches the class of bug that 2026.5.1 shipped with:
|
|
# frontend dist missing, package-lock.json missing, or the wheel's Python
|
|
# source tree broken in a way that surfaces only at app construction time.
|
|
run: |
|
|
python -m venv /tmp/v
|
|
/tmp/v/bin/pip install --upgrade pip
|
|
/tmp/v/bin/pip install -r studio/backend/requirements/studio.txt
|
|
/tmp/v/bin/pip install \
|
|
python-multipart aiofiles sqlalchemy cryptography \
|
|
pyyaml jinja2 mammoth unpdf requests \
|
|
'numpy<3'
|
|
/tmp/v/bin/pip install --no-deps dist/unsloth-*.whl
|
|
# Run from /tmp so Python imports the installed package, not the source tree.
|
|
cd /tmp
|
|
/tmp/v/bin/python -c "from studio.backend.main import app; print('Studio backend OK:', app.title)"
|
|
|
|
- name: Upload wheel on failure
|
|
if: failure()
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: unsloth-wheel
|
|
path: dist/
|
|
retention-days: 7
|