# SPDX-FileCopyrightText: Copyright (c) 2024-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.

#

# SPDX-License-Identifier: Apache-2.0

name: "CI: Upload release artifacts"

on:

workflow_call:

inputs:

git-tag:

type: string

required: true

artifact-id:

description: "Immutable artifact ID prepared and validated by this workflow run"

type: string

required: true

component:

type: string

required: true

dry-run:

description: "Skip GitHub release uploads; preparation already saved the dry-run artifact"

type: boolean

required: false

default: false

concurrency:

group: release-upload-${{ inputs.component }}

cancel-in-progress: false

permissions:

contents: write

jobs:

upload:

if: ${{ !github.event.repository.fork && !inputs.dry-run }}

runs-on: ubuntu-latest

steps:

- name: Download prepared release artifacts

uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2

with:

artifact-ids: ${{ inputs.artifact-id }}

path: release/

merge-multiple: true

- name: Upload archive, checksum, and wheels

env:

GH_TOKEN: ${{ github.token }}

RELEASE_GIT_TAG: ${{ inputs.git-tag }}

RELEASE_REPOSITORY: ${{ github.repository }}

run: >-

gh release upload

--clobber "$RELEASE_GIT_TAG"

--repo "$RELEASE_REPOSITORY"

release/*.tar.gz release/*.sha256sum release/wheels/*.whl