Skip to content

fix(gemma4): Restore KV sharing for the Gemma 4 assistants and their targets #18473

fix(gemma4): Restore KV sharing for the Gemma 4 assistants and their targets

fix(gemma4): Restore KV sharing for the Gemma 4 assistants and their targets #18473

name: Post CI Dashboard Link

Check warning on line 1 in .github/workflows/pr-ci-post-dashboard-link.yml

View workflow run for this annotation

GitHub Actions / Post CI Dashboard Link

Workflow execution policy warning (evaluate mode)

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
pull_request_target:
types: [opened, reopened] # for post-link: inject the CI dashboard badge as soon as a PR opens
workflow_run:
workflows: ["PR CI"]
types: [completed] # for post-mlinter-review: post inline findings after CI finishes
permissions: {}
jobs:
post-link:
permissions:
actions: read
contents: read
pull-requests: write
if: github.event_name == 'pull_request_target'
runs-on: ubuntu-22.04
steps:
- name: Download PR CI dashboard badge script
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# Always run the trusted workflow revision, never code from the PR head.
SCRIPT_REF: ${{ github.workflow_sha }}
run: |
gh api \
-H "Accept: application/vnd.github.raw" \
"/repos/${GITHUB_REPOSITORY}/contents/utils/add_pr_ci_dashboard_badge.py?ref=${SCRIPT_REF}" \
> add_pr_ci_dashboard_badge.py
gh api \
-H "Accept: application/vnd.github.raw" \
"/repos/${GITHUB_REPOSITORY}/contents/utils/github_utils.py?ref=${SCRIPT_REF}" \
> github_utils.py
- name: Add PR CI dashboard badge
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: python3 add_pr_ci_dashboard_badge.py
post-mlinter-review:
permissions:
actions: read
contents: read
pull-requests: write
if: github.event_name == 'workflow_run' && github.event.workflow_run.event == 'pull_request'
runs-on: ubuntu-22.04
steps:
- name: Checkout repo (for post_mlinter_review.py and github_utils.py)
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Download mlinter findings artifact
id: download
continue-on-error: true
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
with:
name: mlinter-findings
path: ${{ runner.temp }}/mlinter-findings
run-id: ${{ github.event.workflow_run.id }}
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Post mlinter review
if: steps.download.outcome == 'success'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
MLINTER_FINDINGS_DIR: ${{ runner.temp }}/mlinter-findings
run: python3 utils/post_mlinter_review.py "$MLINTER_FINDINGS_DIR"