Skip to content

ci : add approval gate to remaining workflows#23526

Closed
ggerganov wants to merge 2 commits into
masterfrom
gg/ci-approval
Closed

ci : add approval gate to remaining workflows#23526
ggerganov wants to merge 2 commits into
masterfrom
gg/ci-approval

Conversation

@ggerganov

Copy link
Copy Markdown
Member

Overview

Extend the manual CI approval gate (from approval.yml) to all remaining workflows that were missed in the initial rollout. This prevents expensive CI runs on non-master branches from executing without manual approval via the ci-approval environment.

Covered workflows (17 files):

  • build-3rd-party, build-android, build-cache, build-cann, build-cross
  • build-msys, build-openvino, build-riscv, build-sanitize
  • build-self-hosted, build-sycl, build-virtgpu, build-vulkan
  • server, server-sanitize, server-self-hosted
  • ui-ci

ui-build.yml and ui-publish.yml are skipped as they're only triggered via workflow_call and inherit the gate from their caller.

Requirements

  • I have read and agree with the contributing guidelines
  • AI usage disclosure: YES. llama.cpp + pi + Qwen3.6-27B-MTP:Q4_K

ggerganov added 2 commits May 22, 2026 13:58
Extend the manual approval gate to all remaining workflows:
build-3rd-party, build-android, build-cache, build-cann, build-cross,
build-msys, build-openvino, build-riscv, build-sanitize,
build-self-hosted, build-sycl, build-virtgpu, build-vulkan,
server, server-sanitize, server-self-hosted, ui-ci

Note: ui-build.yml and ui-publish.yml are skipped as they are only
triggered via workflow_call and inherit the gate from the caller.

Assisted-by: llama.cpp:local pi
@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

Massive notification spam, but ohwell...

@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

What initial rollout BTW? :)

@ggerganov

ggerganov commented May 22, 2026

Copy link
Copy Markdown
Member Author

@CISC There are 2 big problems with this approach:

  • There is no way to turn off the "Deployment review" notifications from Github (https://github.com/orgs/community/discussions/14564)
  • All approvals for a given environment are "queued" - they need to happen one-by-one. This means we can't reuse a single approval.yml for all workflows. Each workflow has to have it's own approval environment. Unless there is some limit on the number of environments we can create, this should be resolvable. Nvm, it is possible to approve individual workflows - it's just the UX is a bit obscure.

Not sure what to do about the notifications.

What initial rollout BTW? :)

This is because I continued the branch from yesterday ggml-org#33 and didn't explain that to the bot.

@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

The new sidebar link is useful I guess, even though the filtering is not.
https://github.com/ggml-org/llama.cpp/deployments

@ggerganov

Copy link
Copy Markdown
Member Author

I really can't believe there isn't a way to disable the notifications ... This is basically a showstopper for this approach.

IMG_2310

@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

I really can't believe there isn't a way to disable the notifications ... This is basically a showstopper for this approach.

Yeah, and for years to boot...

@ggerganov

Copy link
Copy Markdown
Member Author

The boot would probably be simple to solve by having a dedicated self-hosted runner for the approvals.

@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

The boot would probably be simple to solve by having a dedicated self-hosted runner for the approvals.

Sorry, that was "to boot", as in the idiom. :)

It's quite unbelievable this has not been addressed in the many years it has been a feature.

@CISC

CISC commented May 22, 2026

Copy link
Copy Markdown
Member

I imagine we will get the same spam every time a Collaborator is pushing a change as well.

@github-actions github-actions Bot added the devops improvements to build systems and github actions label May 22, 2026
@ggerganov ggerganov closed this May 25, 2026
@ggerganov ggerganov deleted the gg/ci-approval branch May 25, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

devops improvements to build systems and github actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants