ci: overhaul CI pipeline — release workflow, traceability labels, and quality gates

.github/workflows/build-all-images.yaml

@@ -62,16 +62,19 @@ jobs:
         platform: [linux/amd64, linux/arm64]
         ros-distro: [humble, jazzy]
     steps:
+      - name: Checkout OpenADKit repository
+        uses: actions/checkout@v6
+
+      - name: Free Disk Space (Ubuntu)
+        uses: ./.github/actions/free-disk-space
+
       - name: Install jq and vcs2l
         run: |
           sudo apt-get update
           sudo apt-get install -y jq pipx
           pipx install vcs2l
         shell: bash
 
-      - name: Checkout OpenADKit repository
-        uses: actions/checkout@v6
-
       - name: Checkout Autoware repository
         uses: actions/checkout@v6
         with:
@@ -159,6 +162,8 @@ jobs:
             *.platform=${{ matrix.platform }}
             *.args.ROS_DISTRO=${{ matrix.ros-distro }}
             *.args.BASE_IMAGE=ros:${{ matrix.ros-distro }}-ros-base-${{ matrix.ros-distro == 'jazzy' && 'noble' || 'jammy' }}
+            *.labels."org.opencontainers.image.build-tag"=${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.run-id"=${{ github.run_id }}
             *.cache-from=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:common-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main
             *.cache-to=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:common-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main,mode=max
 
@@ -178,6 +183,8 @@ jobs:
             *.platform=${{ matrix.platform }}
             *.args.ROS_DISTRO=${{ matrix.ros-distro }}
             *.args.BASE_IMAGE=ros:${{ matrix.ros-distro }}-ros-base-${{ matrix.ros-distro == 'jazzy' && 'noble' || 'jammy' }}
+            *.labels."org.opencontainers.image.build-tag"=${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.run-id"=${{ github.run_id }}
             *.cache-from=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:common-cuda-${{ matrix.ros-distro }}-main
             *.cache-to=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:common-cuda-${{ matrix.ros-distro }}-main,mode=max
 
@@ -213,16 +220,19 @@ jobs:
             ros-distro: jazzy
             target: sensing-perception-cuda
     steps:
+      - name: Checkout OpenADKit repository
+        uses: actions/checkout@v6
+
+      - name: Free Disk Space (Ubuntu)
+        uses: ./.github/actions/free-disk-space
+
       - name: Install jq and vcs2l
         run: |
           sudo apt-get update
           sudo apt-get install -y jq pipx
           pipx install vcs2l
         shell: bash
 
-      - name: Checkout OpenADKit repository
-        uses: actions/checkout@v6
-
       - name: Checkout Autoware repository
         uses: actions/checkout@v6
         with:
@@ -274,6 +284,8 @@ jobs:
             *.args.COMMON_BASE_CUDA_IMAGE=${{ env.IMAGE_PREFIX_COMMON }}:base-cuda-amd64-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
             *.args.COMMON_DEVEL_IMAGE=${{ env.IMAGE_PREFIX_COMMON }}:devel-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
             *.args.COMMON_DEVEL_CUDA_IMAGE=${{ env.IMAGE_PREFIX_COMMON }}:devel-cuda-amd64-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.build-tag"=${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.run-id"=${{ github.run_id }}
             *.cache-from=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:${{ matrix.target }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main
             *.cache-to=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:${{ matrix.target }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main,mode=max
 
@@ -374,6 +386,8 @@ jobs:
             *.args.API_IMAGE=${{ env.IMAGE_PREFIX_COMPONENT }}:api-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
             *.args.VISUALIZER_IMAGE=${{ env.IMAGE_PREFIX_COMPONENT }}:visualizer-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
             *.args.SIMULATOR_IMAGE=${{ env.IMAGE_PREFIX_COMPONENT }}:simulator-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.build-tag"=${{ needs.prepare.outputs.build_tag }}
+            *.labels."org.opencontainers.image.run-id"=${{ github.run_id }}
             *.cache-from=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:${{ matrix.target }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main
             *.cache-to=type=registry,ref=ghcr.io/${{ github.repository_owner }}/openadkit-buildcache:${{ matrix.target }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}-${{ matrix.ros-distro }}-main,mode=max
 
@@ -417,3 +431,44 @@ jobs:
             universe
             universe-cuda
           token: ${{ secrets.GITHUB_TOKEN }}
+
+  summarize:
+    runs-on: ubuntu-latest
+    needs: [prepare, create-manifests]
+    if: success()
+    steps:
+      - name: Write job summary
+        run: |
+          {
+            echo "## Build Complete"
+            echo "| Key | Value |"
+            echo "|-----|-------|"
+            echo "| **build_tag** | \`${{ needs.prepare.outputs.build_tag }}\` |"
+            echo "| **autoware_ref** | \`${{ needs.prepare.outputs.autoware_ref }}\` |"
+            echo ""
+            echo "To release this build:"
+            echo "1. Go to **Actions → release → Run workflow**"
+            echo "2. Set \`build_tag\` to \`${{ needs.prepare.outputs.build_tag }}\`"
+          } >> $GITHUB_STEP_SUMMARY
+
+  notify-failure:
+    runs-on: ubuntu-latest
+    needs: [prepare, build-common, build-components, build-universe, create-manifests]
+    if: failure() && github.event_name == 'schedule'
+    permissions:
+      issues: write
+    steps:
+      - name: Create failure issue
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.issues.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              title: `Scheduled build failed (${new Date().toISOString().split('T')[0]})`,
+              body: [
+                '**Scheduled build-all-images workflow failed.**',
+                '',
+                `Run: ${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`,
+              ].join('\n'),
+            })

.github/workflows/deploy-docs.yaml

@@ -36,17 +36,7 @@ jobs:
           python-version: '3.11'
 
       - name: Install dependencies
-        run: |
-          pip install mkdocs-material
-          pip install mkdocs-awesome-pages-plugin
-          pip install mkdocs-exclude
-          pip install mkdocs-macros-plugin
-          pip install mkdocs-same-dir
-          pip install pymdown-extensions
-          pip install python-markdown-math
-          pip install mdx-truly-sane-lists
-          pip install plantuml-markdown
-          pip install mkdocs-mermaid2-plugin
+        run: pip install -r docs/requirements.txt
 
       - name: Build with MkDocs
         run: mkdocs build --clean --verbose

.github/workflows/lint.yaml

@@ -0,0 +1,19 @@
+name: lint
+
+on:
+  pull_request:
+    paths:
+      - '**/*.sh'
+
+jobs:
+  shellcheck:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Run ShellCheck
+        uses: ludeeus/action-shellcheck@2.0.0
+        with:
+          severity: error