From 003e5697108a1d05edf46d3dc84240b6f130873d Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Tue, 14 Jul 2026 14:47:57 -0500 Subject: [PATCH 1/9] ci: enable codecov for Python test coverage Removes the explicit `run_codecov: false` override in pr.yaml and test.yaml, restoring the shared-workflow default (true). Adds codecov.yml at repo root with patch checks set to informational so coverage never blocks a PR. Adds disable_warnings to .coveragerc to suppress spurious coverage.py noise. Excludes codecov.yml from changed-files triggers so a config-only edit does not re-run CI. Note: requires CODECOV_TOKEN to be set as a repo or org secret. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 5 ++++- .github/workflows/test.yaml | 1 - codecov.yml | 12 ++++++++++++ python/.coveragerc | 2 ++ 4 files changed, 18 insertions(+), 2 deletions(-) create mode 100644 codecov.yml diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index c49be71af1..ceffdb9225 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -97,6 +97,7 @@ jobs: - '!.github/workflows/trigger-breaking-change-alert.yaml' - '!.gitignore' - '!.pre-commit-config.yaml' + - '!codecov.yml' - '!AGENTS.md' - '!CHANGELOG.md' - '!CONTRIBUTING.md' @@ -155,6 +156,7 @@ jobs: - '!.github/workflows/trigger-breaking-change-alert.yaml' - '!.gitignore' - '!.pre-commit-config.yaml' + - '!codecov.yml' - '!AGENTS.md' - '!CONTRIBUTING.md' - '!LICENSE' @@ -224,6 +226,7 @@ jobs: - '!.github/workflows/trigger-breaking-change-alert.yaml' - '!.gitignore' - '!.pre-commit-config.yaml' + - '!codecov.yml' - '!AGENTS.md' - '!CONTRIBUTING.md' - '!LICENSE' @@ -290,6 +293,7 @@ jobs: - '!.github/workflows/trigger-breaking-change-alert.yaml' - '!.gitignore' - '!.pre-commit-config.yaml' + - '!codecov.yml' - '!AGENTS.md' - '!CONTRIBUTING.md' - '!LICENSE' @@ -410,7 +414,6 @@ jobs: uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main if: fromJSON(needs.changed-files.outputs.changed_file_groups).test_python_conda with: - run_codecov: false build_type: pull-request script: ci/test_python.sh secrets: diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 3158118324..16c2438243 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -59,7 +59,6 @@ jobs: pull-requests: read uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main with: - run_codecov: false build_type: ${{ inputs.build_type }} branch: ${{ inputs.branch }} date: ${{ inputs.date }} diff --git a/codecov.yml b/codecov.yml new file mode 100644 index 0000000000..b034ba32d8 --- /dev/null +++ b/codecov.yml @@ -0,0 +1,12 @@ +# Configuration File for CodeCov +comment: false +coverage: + status: + project: off + patch: + default: + target: auto + threshold: 5% + informational: true +github_checks: + annotations: true diff --git a/python/.coveragerc b/python/.coveragerc index a4d048db8a..714b2eac3f 100644 --- a/python/.coveragerc +++ b/python/.coveragerc @@ -4,3 +4,5 @@ include = cuopt/cuopt/* cuopt_server/cuopt_server/* omit = cuopt_server/cuopt_server/tests/* cuopt/cuopt/tests/* +disable_warnings = module-not-measured + no-data-collected From 3a9e2f3e5ab1d871c16fc4c9e1c6c147e42ea51b Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Wed, 15 Jul 2026 10:43:18 -0500 Subject: [PATCH 2/9] ci: trigger CI Signed-off-by: Ramakrishna Prabhu From a5edaecb9905993e3c97ba44e6bddea4b5d1c69c Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Wed, 15 Jul 2026 12:10:40 -0500 Subject: [PATCH 3/9] ci: pass CODECOV_TOKEN via secrets inherit for PR builds Switch conda-python-tests in pr.yaml to secrets: inherit so CODECOV_TOKEN reaches the shared-workflow codecov step. S3/AWS secrets are not needed for PR builds (nightly_report_helper skips S3 when RAPIDS_BUILD_TYPE!=nightly). Re-add run_codecov: false to test.yaml conda-python-tests since S3 explicit secrets are required there for nightly report aggregation, leaving no slot for CODECOV_TOKEN until rapidsai/shared-workflows# lands. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 8 +------- .github/workflows/test.yaml | 1 + 2 files changed, 2 insertions(+), 7 deletions(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index ceffdb9225..9445ae8777 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,13 +416,7 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: - script-env-secret-1-key: CUOPT_S3_URI - script-env-secret-1-value: ${{ secrets.CUOPT_S3_URI }} - script-env-secret-2-key: CUOPT_AWS_ACCESS_KEY_ID - script-env-secret-2-value: ${{ secrets.CUOPT_AWS_ACCESS_KEY_ID }} - script-env-secret-3-key: CUOPT_AWS_SECRET_ACCESS_KEY - script-env-secret-3-value: ${{ secrets.CUOPT_AWS_SECRET_ACCESS_KEY }} + secrets: inherit # zizmor: ignore[secrets-inherit] docs-build: needs: [conda-python-build, changed-files] permissions: diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 16c2438243..3158118324 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -59,6 +59,7 @@ jobs: pull-requests: read uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main with: + run_codecov: false build_type: ${{ inputs.build_type }} branch: ${{ inputs.branch }} date: ${{ inputs.date }} From c06c38fd06362773c5189a6b8456df96857c3edb Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Wed, 15 Jul 2026 13:36:04 -0500 Subject: [PATCH 4/9] ci: pass CODECOV_TOKEN via script-env-secret-4 Use the same key/value pattern as S3/AWS secrets to pass CODECOV_TOKEN to the conda-python-tests shared workflow. Requires rapidsai/shared-workflows#593. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 4 +++- .github/workflows/test.yaml | 3 ++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 9445ae8777..0012bdda7b 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,7 +416,9 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: inherit # zizmor: ignore[secrets-inherit] + secrets: + script-env-secret-4-key: CODECOV_TOKEN + script-env-secret-4-value: ${{ secrets.CODECOV_TOKEN }} docs-build: needs: [conda-python-build, changed-files] permissions: diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 3158118324..6b702a5c50 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -59,7 +59,6 @@ jobs: pull-requests: read uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main with: - run_codecov: false build_type: ${{ inputs.build_type }} branch: ${{ inputs.branch }} date: ${{ inputs.date }} @@ -72,6 +71,8 @@ jobs: script-env-secret-2-value: ${{ secrets.CUOPT_AWS_ACCESS_KEY_ID }} script-env-secret-3-key: CUOPT_AWS_SECRET_ACCESS_KEY script-env-secret-3-value: ${{ secrets.CUOPT_AWS_SECRET_ACCESS_KEY }} + script-env-secret-4-key: CODECOV_TOKEN + script-env-secret-4-value: ${{ secrets.CODECOV_TOKEN }} wheel-tests-cuopt: permissions: From 044c38d7c44c6bfaa6e3ddef096a753ce1bbd0de Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Wed, 15 Jul 2026 13:36:47 -0500 Subject: [PATCH 5/9] Revert "ci: pass CODECOV_TOKEN via script-env-secret-4" This reverts commit c06c38fd06362773c5189a6b8456df96857c3edb. Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 4 +--- .github/workflows/test.yaml | 3 +-- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 0012bdda7b..9445ae8777 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,9 +416,7 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: - script-env-secret-4-key: CODECOV_TOKEN - script-env-secret-4-value: ${{ secrets.CODECOV_TOKEN }} + secrets: inherit # zizmor: ignore[secrets-inherit] docs-build: needs: [conda-python-build, changed-files] permissions: diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 6b702a5c50..3158118324 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -59,6 +59,7 @@ jobs: pull-requests: read uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main with: + run_codecov: false build_type: ${{ inputs.build_type }} branch: ${{ inputs.branch }} date: ${{ inputs.date }} @@ -71,8 +72,6 @@ jobs: script-env-secret-2-value: ${{ secrets.CUOPT_AWS_ACCESS_KEY_ID }} script-env-secret-3-key: CUOPT_AWS_SECRET_ACCESS_KEY script-env-secret-3-value: ${{ secrets.CUOPT_AWS_SECRET_ACCESS_KEY }} - script-env-secret-4-key: CODECOV_TOKEN - script-env-secret-4-value: ${{ secrets.CODECOV_TOKEN }} wheel-tests-cuopt: permissions: From 67d3d62b6e9471f57b0c401aa17fe114af9b99eb Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Thu, 16 Jul 2026 15:00:02 -0500 Subject: [PATCH 6/9] ci: pass CODECOV_TOKEN explicitly in pr.yaml S3/AWS secrets are not needed for PR builds so slot 1 is free. Use script-env-secret-1 for CODECOV_TOKEN instead of secrets: inherit. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 9445ae8777..dbdf0993b5 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,7 +416,9 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: inherit # zizmor: ignore[secrets-inherit] + secrets: + script-env-secret-1-key: CODECOV_TOKEN + script-env-secret-1-value: ${{ secrets.CODECOV_TOKEN }} docs-build: needs: [conda-python-build, changed-files] permissions: From 8a511a912aca23ec4a6236ad5c30e92c82b93a1d Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Thu, 16 Jul 2026 16:41:50 -0500 Subject: [PATCH 7/9] ci: revert to secrets: inherit until shared-workflows#593 merges The explicit script-env-secret-1 approach injects CODECOV_TOKEN via GITHUB_ENV but the current shared workflow overrides it with an empty secrets.CODECOV_TOKEN in the codecov step. Revert to inherit for now. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index dbdf0993b5..9445ae8777 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,9 +416,7 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: - script-env-secret-1-key: CODECOV_TOKEN - script-env-secret-1-value: ${{ secrets.CODECOV_TOKEN }} + secrets: inherit # zizmor: ignore[secrets-inherit] docs-build: needs: [conda-python-build, changed-files] permissions: From 381fc2fe8a5ecb731099ed6ed826d03fd2e81788 Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Thu, 16 Jul 2026 16:44:39 -0500 Subject: [PATCH 8/9] Revert "ci: revert to secrets: inherit until shared-workflows#593 merges" This reverts commit 8a511a912aca23ec4a6236ad5c30e92c82b93a1d. Signed-off-by: Ramakrishna Prabhu --- .github/workflows/pr.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 9445ae8777..dbdf0993b5 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -416,7 +416,9 @@ jobs: with: build_type: pull-request script: ci/test_python.sh - secrets: inherit # zizmor: ignore[secrets-inherit] + secrets: + script-env-secret-1-key: CODECOV_TOKEN + script-env-secret-1-value: ${{ secrets.CODECOV_TOKEN }} docs-build: needs: [conda-python-build, changed-files] permissions: From 65362364c3307906527d72bee4cd0fe9fcfafe12 Mon Sep 17 00:00:00 2001 From: Ramakrishna Prabhu Date: Thu, 16 Jul 2026 16:47:00 -0500 Subject: [PATCH 9/9] ci: trigger CI Signed-off-by: Ramakrishna Prabhu