Skip to content

[pull] release/3.0.0-beta2 from isaac-sim:release/3.0.0-beta2 - #24

Merged
pull[bot] merged 2 commits into
mataylor-nvidia:release/3.0.0-beta2from
isaac-sim:release/3.0.0-beta2
Aug 10, 2026
Merged

[pull] release/3.0.0-beta2 from isaac-sim:release/3.0.0-beta2#24
pull[bot] merged 2 commits into
mataylor-nvidia:release/3.0.0-beta2from
isaac-sim:release/3.0.0-beta2

Conversation

@pull

@pull pull Bot commented Aug 10, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

# Description

Add a nightly GitHub Actions workflow that resolves the private Isaac
Sim
`latest-develop` image tag to its immutable manifest digest and prepares
a
draft PR updating the shared CI image pin on `develop`.

The workflow runs daily at 08:00 UTC and can also be started manually in
dry-run
mode. It reuses the existing `isaaclab-bot` GitHub App credentials so
pushes and
draft PR updates trigger normal CI, and it avoids pushing a redundant
commit
when the update branch already contains the current digest.

Deployment requires the existing `NGC_API_KEY`,
`CHANGELOG_APP_CLIENT_ID`, and
`CHANGELOG_APP_PRIVATE_KEY` secrets. The App installation must have
`contents: write` and `pull requests: write` permissions.

## Type of change

- New feature (non-breaking change which adds functionality)

## Validation

- `uv run isaaclab -f`
- `actionlint` with ShellCheck enabled
- `git diff --check`

The authenticated NGC lookup and bot write path can be exercised after
merge
through the workflow's `dry_run` input in the GitHub Actions UI.

## Checklist

- [x] I have read and understood the contribution guidelines
- [x] I have run the pre-commit checks with `uv run isaaclab -f`
- [x] Documentation changes are not required for this CI-only workflow
- [x] My changes generate no new warnings
- [x] I have run focused workflow and shell validation
- [x] A package changelog fragment is not required because no source
package changed
- [x] My name already exists in `CONTRIBUTORS.md`
# Description

Request the `workflows: write` permission when minting the
`isaaclab-bot`
installation token for the nightly Isaac Sim image updater.

The updater changes `.github/workflows/config.yaml`, so GitHub rejected
the
bot branch push even though the App already had `contents: write`. The
App
registration and repository installation now grant `workflows: write`,
and
the bot is an always-allow bypass actor for the applicable branch
rulesets.
This workflow input ensures the generated installation token carries the
newly approved permission.

Failed run:
https://github.com/isaac-sim/IsaacLab/actions/runs/31424451461/job/93572726513

## Type of change

- Bug fix (non-breaking change which fixes an issue)

## Validation

- Confirmed the installed `isaaclab-bot` permissions include `workflows:
write`
- `uv run isaaclab -f`
- `actionlint` with ShellCheck enabled, excluding its two known stale
`v3`
  metadata diagnostics for the supported `client-id` input
- `git diff --check`

## Checklist

- [x] I have read and understood the contribution guidelines
- [x] I have run the pre-commit checks with `uv run isaaclab -f`
- [x] Documentation changes are not required for this CI-only fix
- [x] My changes generate no new warnings
- [x] I have run focused workflow validation
- [x] A package changelog fragment is not required because no source
package changed
- [x] My name already exists in `CONTRIBUTORS.md`
@pull pull Bot locked and limited conversation to collaborators Aug 10, 2026
@pull pull Bot added the ⤵️ pull label Aug 10, 2026
@pull
pull Bot merged commit 2e44ddb into mataylor-nvidia:release/3.0.0-beta2 Aug 10, 2026
7 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant