From 139b6d12d34a4e772f5e7b5c12820820ec64db52 Mon Sep 17 00:00:00 2001 From: arcusbuilds Date: Sun, 9 Aug 2026 14:49:50 +0530 Subject: [PATCH 1/6] fix: allow update-version.sh to run with RAPIDS_RUN_CONTEXT unset The script runs under 'set -u', so the documented fallback invocation 'bash update-version.sh ' aborted with 'RAPIDS_RUN_CONTEXT: unbound variable' before any substitution ran. Use ${VAR:-} so the documented default-to-main behavior actually happens. --- ci/release/update-version.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index d480f942..ccd28dd9 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -42,7 +42,7 @@ NEXT_FULL_TAG="$VERSION_ARG" if [[ -n "$CLI_RUN_CONTEXT" ]]; then RUN_CONTEXT="$CLI_RUN_CONTEXT" echo "Using run-context from CLI: $RUN_CONTEXT" -elif [[ -n "${RAPIDS_RUN_CONTEXT}" ]]; then +elif [[ -n "${RAPIDS_RUN_CONTEXT:-}" ]]; then RUN_CONTEXT="$RAPIDS_RUN_CONTEXT" echo "Using run-context from environment: $RUN_CONTEXT" else From a8d8e2db6c00d276a66f297b8349dced446d5176 Mon Sep 17 00:00:00 2001 From: arcusbuilds Date: Sun, 9 Aug 2026 16:36:04 +0530 Subject: [PATCH 2/6] fix: match multi-digit minor versions in CONTRIBUTING.md The minor-version group was a single [[:digit:]] rather than [[:digit:]]\+, so bumping 26.06 -> 26.08 rewrote only 'RAPIDS_VER=26.0' and left the trailing digit, producing 'RAPIDS_VER=26.086'. That value is live on release/26.08 today. The other version-matching seds in this file already use the one-or-more form, apart from the SECURITY.md line just below, which has the same bug and is removed in a later commit. --- ci/release/update-version.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index ccd28dd9..f37b2e3c 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -101,7 +101,7 @@ sed_runner "s|ARG RAPIDS_BRANCH=\"release/[0-9]\+\.[0-9]\+\"|ARG RAPIDS_BRANCH=\ sed_runner "s|ARG RAPIDS_BRANCH=\"main\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAME}\"|g" Dockerfile # docs -sed_runner "s|RAPIDS_VER=[[:digit:]]\+\.[[:digit:]]|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md +sed_runner "s|RAPIDS_VER=[[:digit:]]\+\.[[:digit:]]\+|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md sed_runner "s|[[:digit:]]\+\.[[:digit:]]-cuda|${NEXT_SHORT_TAG}-cuda|g" SECURITY.md # CI files From 183da77176ed1d6ecfdb47da0c068466f423b3b7 Mon Sep 17 00:00:00 2001 From: arcusbuilds Date: Sun, 9 Aug 2026 16:36:05 +0530 Subject: [PATCH 3/6] fix: preserve inline comments when rewriting shared-workflows refs 's|@.*|@REF|' is greedy to end-of-line, so rewriting a ref also deletes whatever follows it on that line. Cutting release/26.06 (935ed5a) stripped the trailing '# zizmor: ignore[unpinned-uses]' comments from all three shared-workflows 'uses:' lines and broke pre-commit (#877). #877 fixed the fallout by adding .github/zizmor.yml but left the sed alone, so cutting release/26.08 (d711b42) stripped the two remaining comments again. Those comments are redundant today, since .github/zizmor.yml exempts 'rapidsai/shared-workflows/*' from unpinned-uses. But the sed still silently drops any trailing comment on a line it rewrites, which is churn in every release diff and a trap for any future comment. Anchor the match to the ref token with '@[^[:space:]]\+' and drop the 'g' flag, since there is one ref per line. Refs with no trailing comment, such as the one in trigger-breaking-change-alert.yaml, are still rewritten. --- ci/release/update-version.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index f37b2e3c..762bd499 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -106,7 +106,7 @@ sed_runner "s|[[:digit:]]\+\.[[:digit:]]-cuda|${NEXT_SHORT_TAG}-cuda|g" SECURITY # CI files for FILE in .github/workflows/*.yaml .github/workflows/*.yml; do - sed_runner "/shared-workflows/ s|@.*|@${WORKFLOW_BRANCH_REF}|g" "${FILE}" + sed_runner "/shared-workflows/ s|@[^[:space:]]\+|@${WORKFLOW_BRANCH_REF}|" "${FILE}" done sed_runner "s/v[[:digit:]]\+\.[[:digit:]]\+/v${NEXT_SHORT_TAG}/g" dockerhub-readme.md From 92acc01916cae6dce454914f4e90f0e9f5a3c706 Mon Sep 17 00:00:00 2001 From: arcusbuilds Date: Sun, 9 Aug 2026 14:52:24 +0530 Subject: [PATCH 4/6] chore: drop the no-op SECURITY.md substitution SECURITY.md carries no version string, so this sed has matched nothing since it was added in #877. It also had the same single-digit-minor bug as the CONTRIBUTING.md line. Removing rather than repairing it, since there is nothing in that file to keep in sync. --- ci/release/update-version.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index 762bd499..235bedb8 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -102,7 +102,6 @@ sed_runner "s|ARG RAPIDS_BRANCH=\"main\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAM # docs sed_runner "s|RAPIDS_VER=[[:digit:]]\+\.[[:digit:]]\+|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md -sed_runner "s|[[:digit:]]\+\.[[:digit:]]-cuda|${NEXT_SHORT_TAG}-cuda|g" SECURITY.md # CI files for FILE in .github/workflows/*.yaml .github/workflows/*.yml; do From 624ab6cf6b6d31d2b10aa540095c1994405060fb Mon Sep 17 00:00:00 2001 From: arcusbuilds Date: Wed, 16 Sep 2026 17:57:15 +0530 Subject: [PATCH 5/6] Apply suggestion from @msarahan Co-authored-by: Mike Sarahan --- ci/release/update-version.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index 235bedb8..6840dce8 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -101,7 +101,7 @@ sed_runner "s|ARG RAPIDS_BRANCH=\"release/[0-9]\+\.[0-9]\+\"|ARG RAPIDS_BRANCH=\ sed_runner "s|ARG RAPIDS_BRANCH=\"main\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAME}\"|g" Dockerfile # docs -sed_runner "s|RAPIDS_VER=[[:digit:]]\+\.[[:digit:]]\+|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md +sed_runner "s|RAPIDS_VER=[[:digit:]]\{1,2\}\.[[:digit:]]\{1,2\}|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md # CI files for FILE in .github/workflows/*.yaml .github/workflows/*.yml; do From 4d23561a1db0ce0dd024d9e8defb6a716ccfb70c Mon Sep 17 00:00:00 2001 From: Michael Sarahan Date: Thu, 8 Oct 2026 10:50:11 -0500 Subject: [PATCH 6/6] fix: normalize release version updates --- ci/release/update-version.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ci/release/update-version.sh b/ci/release/update-version.sh index 6840dce8..8d24864e 100755 --- a/ci/release/update-version.sh +++ b/ci/release/update-version.sh @@ -1,5 +1,5 @@ #!/bin/bash -# Copyright (c) 2023-2026, NVIDIA CORPORATION. +# Copyright (c) 2023-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved. ## Usage # Primary interface: bash update-version.sh [--run-context=main|release] @@ -101,11 +101,11 @@ sed_runner "s|ARG RAPIDS_BRANCH=\"release/[0-9]\+\.[0-9]\+\"|ARG RAPIDS_BRANCH=\ sed_runner "s|ARG RAPIDS_BRANCH=\"main\"|ARG RAPIDS_BRANCH=\"${RAPIDS_BRANCH_NAME}\"|g" Dockerfile # docs -sed_runner "s|RAPIDS_VER=[[:digit:]]\{1,2\}\.[[:digit:]]\{1,2\}|RAPIDS_VER=${NEXT_SHORT_TAG}|g" CONTRIBUTING.md +sed_runner "s|^export RAPIDS_VER=.*$|export RAPIDS_VER=${NEXT_SHORT_TAG}|" CONTRIBUTING.md # CI files for FILE in .github/workflows/*.yaml .github/workflows/*.yml; do - sed_runner "/shared-workflows/ s|@[^[:space:]]\+|@${WORKFLOW_BRANCH_REF}|" "${FILE}" + sed_runner "/shared-workflows/ s|@[^[:space:]][^[:space:]]*|@${WORKFLOW_BRANCH_REF}|" "${FILE}" done sed_runner "s/v[[:digit:]]\+\.[[:digit:]]\+/v${NEXT_SHORT_TAG}/g" dockerhub-readme.md