This is an automated email from the ASF dual-hosted git repository. tqchen pushed a commit to branch jenkins-cleanup-trusted-main in repository https://gitbox.apache.org/repos/asf/tvm.git
commit e040f2efd87cb6a6345862324dd0828f327ca99a Author: Tianqi Chen <[email protected]> AuthorDate: Thu Oct 15 15:46:18 2026 +0000 [CI] Explain trusted helper rejection and preserve native test targets --- ci/jenkins/generated/arm_jenkinsfile.groovy | 11 ++++++++++- ci/jenkins/generated/common.groovy | 1 + ci/jenkins/generated/cpu_jenkinsfile.groovy | 11 ++++++++++- ci/jenkins/generated/docker_jenkinsfile.groovy | 10 +++++++++- ci/jenkins/generated/gpu_jenkinsfile.groovy | 10 +++++++++- ci/jenkins/generated/wasm_jenkinsfile.groovy | 11 ++++++++++- 6 files changed, 49 insertions(+), 5 deletions(-) diff --git a/ci/jenkins/generated/arm_jenkinsfile.groovy b/ci/jenkins/generated/arm_jenkinsfile.groovy index 348fb57dd1..1429442a03 100644 --- a/ci/jenkins/generated/arm_jenkinsfile.groovy +++ b/ci/jenkins/generated/arm_jenkinsfile.groovy @@ -16,7 +16,15 @@ // under the License. // Reject untrusted helper edits before allocating nodes or running pipeline steps. -ci = evaluate(readTrusted('ci/jenkins/generated/common.groovy')) +def helper_source +try { + helper_source = readTrusted('ci/jenkins/generated/common.groovy') +} catch (Throwable ex) { + echo 'Jenkinsfile changes must be pushed to an upstream branch. ' + + 'arm/pr-head will fail for these changes; check arm/branch status instead.' + throw ex +} +ci = evaluate(helper_source) ci.start() stage('Build') { @@ -38,6 +46,7 @@ stage('Build') { --sccache-bucket tvm-sccache-prod \ --sccache-region us-west-2 \ --cmake-target cpptest \ + --cmake-target tirx_cpptest \ --build-dir build """, label: 'Make C++ tests', diff --git a/ci/jenkins/generated/common.groovy b/ci/jenkins/generated/common.groovy index 9cab4eaf09..b393a94790 100644 --- a/ci/jenkins/generated/common.groovy +++ b/ci/jenkins/generated/common.groovy @@ -21,6 +21,7 @@ import org.jenkinsci.plugins.pipeline.modeldefinition.Utils image_platforms = [ci_arm: 'ARM', ci_cpu: 'CPU', ci_gpu: 'GPU', ci_wasm: 'CPU'] images = image_platforms.collectEntries { name, platform -> [(name): ''] } source_images = [:] +// Resolve Hub inputs through the caller account ECR cache; false keeps public names. enable_docker_hub_cache = true built_images = [:] upstream_revision = null diff --git a/ci/jenkins/generated/cpu_jenkinsfile.groovy b/ci/jenkins/generated/cpu_jenkinsfile.groovy index 760ce31831..88b0b88067 100644 --- a/ci/jenkins/generated/cpu_jenkinsfile.groovy +++ b/ci/jenkins/generated/cpu_jenkinsfile.groovy @@ -16,7 +16,15 @@ // under the License. // Reject untrusted helper edits before allocating nodes or running pipeline steps. -ci = evaluate(readTrusted('ci/jenkins/generated/common.groovy')) +def helper_source +try { + helper_source = readTrusted('ci/jenkins/generated/common.groovy') +} catch (Throwable ex) { + echo 'Jenkinsfile changes must be pushed to an upstream branch. ' + + 'cpu/pr-head will fail for these changes; check cpu/branch status instead.' + throw ex +} +ci = evaluate(helper_source) ci.start() stage('Build') { @@ -38,6 +46,7 @@ stage('Build') { --sccache-bucket tvm-sccache-prod \ --sccache-region us-west-2 \ --cmake-target cpptest \ + --cmake-target tirx_cpptest \ --build-dir build """, label: 'Make C++ tests', diff --git a/ci/jenkins/generated/docker_jenkinsfile.groovy b/ci/jenkins/generated/docker_jenkinsfile.groovy index 35da2c773f..a4b57b9c10 100644 --- a/ci/jenkins/generated/docker_jenkinsfile.groovy +++ b/ci/jenkins/generated/docker_jenkinsfile.groovy @@ -16,7 +16,15 @@ // under the License. // Reject untrusted helper edits before allocating nodes or running pipeline steps. -ci = evaluate(readTrusted('ci/jenkins/generated/common.groovy')) +def helper_source +try { + helper_source = readTrusted('ci/jenkins/generated/common.groovy') +} catch (Throwable ex) { + echo 'Jenkinsfile changes must be pushed to an upstream branch. ' + + 'docker/pr-head will fail for these changes; check docker/branch status instead.' + throw ex +} +ci = evaluate(helper_source) ci.start() def ecr_push(full_name) { diff --git a/ci/jenkins/generated/gpu_jenkinsfile.groovy b/ci/jenkins/generated/gpu_jenkinsfile.groovy index 2ed9a9e0b2..7bf001aa8a 100644 --- a/ci/jenkins/generated/gpu_jenkinsfile.groovy +++ b/ci/jenkins/generated/gpu_jenkinsfile.groovy @@ -16,7 +16,15 @@ // under the License. // Reject untrusted helper edits before allocating nodes or running pipeline steps. -ci = evaluate(readTrusted('ci/jenkins/generated/common.groovy')) +def helper_source +try { + helper_source = readTrusted('ci/jenkins/generated/common.groovy') +} catch (Throwable ex) { + echo 'Jenkinsfile changes must be pushed to an upstream branch. ' + + 'gpu/pr-head will fail for these changes; check gpu/branch status instead.' + throw ex +} +ci = evaluate(helper_source) ci.start() stage('Build') { diff --git a/ci/jenkins/generated/wasm_jenkinsfile.groovy b/ci/jenkins/generated/wasm_jenkinsfile.groovy index 8547cfff50..593da51094 100644 --- a/ci/jenkins/generated/wasm_jenkinsfile.groovy +++ b/ci/jenkins/generated/wasm_jenkinsfile.groovy @@ -16,7 +16,15 @@ // under the License. // Reject untrusted helper edits before allocating nodes or running pipeline steps. -ci = evaluate(readTrusted('ci/jenkins/generated/common.groovy')) +def helper_source +try { + helper_source = readTrusted('ci/jenkins/generated/common.groovy') +} catch (Throwable ex) { + echo 'Jenkinsfile changes must be pushed to an upstream branch. ' + + 'wasm/pr-head will fail for these changes; check wasm/branch status instead.' + throw ex +} +ci = evaluate(helper_source) ci.start() stage('Build') { @@ -38,6 +46,7 @@ stage('Build') { --sccache-bucket tvm-sccache-prod \ --sccache-region us-west-2 \ --cmake-target cpptest \ + --cmake-target tirx_cpptest \ --build-dir build """, label: 'Make C++ tests',
