Install a github action lint in pre-commit

.github/actionlint.yaml

@@ -0,0 +1,30 @@
+self-hosted-runner:
+  # Custom self-hosted runner labels used in this repository
+  labels:
+    - 1-gpu-runner
+    - 2-gpu-runner
+    - 4-gpu-a10
+    - 4-gpu-b200
+    - 4-gpu-gb200
+    - 4-gpu-h100
+    - 8-gpu-b200
+    - 8-gpu-h20
+    - 8-gpu-h200
+    - 8-gpu-h200-oracle
+    - amd-docker-scale
+    - arm-docker-build-node
+    - arm-kernel-build-node
+    - intel-bmg
+    - linux-aarch64-a3-16
+    - linux-arm64-npu-1
+    - linux-arm64-npu-2
+    - linux-arm64-npu-4
+    - linux-mi300-gpu-1
+    - linux-mi300-gpu-2
+    - linux-mi300-gpu-8
+    - linux-mi325-gpu-2-nightly
+    - ubuntu-22.04-arm
+    - x64-cu13-kernel-tests
+    - x64-docker-build-node
+    - x64-kernel-build-node
+    - xeon-gnr

.github/workflows/auto-format.yml

@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.10"
 
@@ -39,9 +39,9 @@ jobs:
         id: check_changes
         run: |
           if [[ -n $(git status -s) ]]; then
-            echo "has_changes=true" >> $GITHUB_OUTPUT
+            echo "has_changes=true" >> "$GITHUB_OUTPUT"
           else
-            echo "has_changes=false" >> $GITHUB_OUTPUT
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Commit and push changes

.github/workflows/bot-bump-kernel-version-to-sglang.yml

@@ -43,9 +43,9 @@ jobs:
           KERNEL_VERSION="${{ steps.check_sync.outputs.kernel_version }}"
           BRANCH_NAME="bot/bump-kernel-version-to-sglang-${KERNEL_VERSION}-${RANDOM_SUFFIX}"
           git checkout -b "$BRANCH_NAME"
-          echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
-          echo "KERNEL_VERSION=$KERNEL_VERSION" >> $GITHUB_ENV
-          echo "branch_name=$BRANCH_NAME" >> $GITHUB_OUTPUT
+          echo "BRANCH_NAME=$BRANCH_NAME" >> "$GITHUB_ENV"
+          echo "KERNEL_VERSION=$KERNEL_VERSION" >> "$GITHUB_ENV"
+          echo "branch_name=$BRANCH_NAME" >> "$GITHUB_OUTPUT"
 
       - name: Run kernel version bump script
         if: steps.check_sync.outputs.needs_sync == 'true'

.github/workflows/bot-bump-kernel-version.yml

@@ -37,7 +37,7 @@ jobs:
           RANDOM_SUFFIX=$(echo $RANDOM | md5sum | head -c 4)
           BRANCH_NAME="bot/bump-kernel-version-${{ github.event.inputs.new_version }}-${RANDOM_SUFFIX}"
           git checkout -b "$BRANCH_NAME"
-          echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
+          echo "BRANCH_NAME=$BRANCH_NAME" >> "$GITHUB_ENV"
 
       - name: Run kernel version bump script
         run: |

.github/workflows/bot-bump-sglang-version.yml

@@ -40,8 +40,7 @@ jobs:
           RANDOM_SUFFIX=$(echo $RANDOM | md5sum | head -c 4)
           BRANCH_NAME="bot/bump-sglang-version-${{ github.event.inputs.new_version }}-${RANDOM_SUFFIX}"
           git checkout -b "$BRANCH_NAME"
-          echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
-          echo "branch_name=$BRANCH_NAME" >> $GITHUB_OUTPUT
+          echo "BRANCH_NAME=$BRANCH_NAME" >> "$GITHUB_ENV"
 
       - name: Run SGLang version bump script
         run: |

.github/workflows/cancel-all-pending-pr-test-runs.yml

@@ -38,7 +38,7 @@ jobs:
               --json databaseId,status \
               --limit 1000 \
               | jq -r '.[] | select(.status=="queued" or .status=="in_progress") | .databaseId' \
-              | while read run_id; do
+              | while read -r run_id; do
                   echo "Cancelling run ID: $run_id for workflow: $workflow_file"
                   gh run cancel "$run_id" --repo "$REPO"
                 done

.github/workflows/ci-failure-monitor.yml

@@ -50,10 +50,10 @@ jobs:
         run: |
           cd scripts/ci_monitor
           python ci_failures_analysis.py \
-            --token $GITHUB_TOKEN \
-            --limit ${{ inputs.limit || '800' }} \
-            --threshold ${{ inputs.threshold || '4' }} \
-            --output ci_failure_analysis_$(date +%Y%m%d_%H%M%S).json
+            --token "$GITHUB_TOKEN" \
+            --limit "${{ inputs.limit || '800' }}" \
+            --threshold "${{ inputs.threshold || '4' }}" \
+            --output "ci_failure_analysis_$(date +%Y%m%d_%H%M%S).json"
 
       - name: Upload Analysis Results
         uses: actions/upload-artifact@v4

.github/workflows/ci-monitor.yml

@@ -44,7 +44,7 @@ jobs:
           PYTHONIOENCODING: utf-8
         run: |
           cd scripts/ci_monitor
-          python ci_analyzer.py --token $GITHUB_TOKEN --limit ${{ inputs.limit || '1000' }} --output ci_analysis_$(date +%Y%m%d_%H%M%S).json
+          python ci_analyzer.py --token "$GITHUB_TOKEN" --limit "${{ inputs.limit || '1000' }}" --output "ci_analysis_$(date +%Y%m%d_%H%M%S).json"
 
       - name: Run Nightly Test Analysis
         env:
@@ -53,7 +53,7 @@ jobs:
           PYTHONIOENCODING: utf-8
         run: |
           cd scripts/ci_monitor
-          python ci_analyzer.py --token $GITHUB_TOKEN --mode nightly --days 2 --output nightly_analysis_$(date +%Y%m%d_%H%M%S).json
+          python ci_analyzer.py --token "$GITHUB_TOKEN" --mode nightly --days 2 --output "nightly_analysis_$(date +%Y%m%d_%H%M%S).json"
 
       - name: Run Performance Analysis
         env:
@@ -62,7 +62,7 @@ jobs:
           PYTHONIOENCODING: utf-8
         run: |
           cd scripts/ci_monitor
-          python ci_analyzer_perf.py --token $GITHUB_TOKEN --limit ${{ inputs.limit || '1000' }} --output-dir performance_tables_$(date +%Y%m%d_%H%M%S) --upload-to-github
+          python ci_analyzer_perf.py --token "$GITHUB_TOKEN" --limit "${{ inputs.limit || '1000' }}" --output-dir "performance_tables_$(date +%Y%m%d_%H%M%S)" --upload-to-github
 
       - name: Upload Analysis Results
         uses: actions/upload-artifact@v4
@@ -99,7 +99,7 @@ jobs:
           PYTHONIOENCODING: utf-8
         run: |
           cd scripts/ci_monitor
-          python ci_analyzer_balance.py --token $GITHUB_TOKEN --limit ${{ inputs.limit || '1000' }} --output test_balance_report_$(date +%Y%m%d_%H%M%S).json
+          python ci_analyzer_balance.py --token "$GITHUB_TOKEN" --limit "${{ inputs.limit || '1000' }}" --output "test_balance_report_$(date +%Y%m%d_%H%M%S).json"
 
       - name: Upload Balance Analysis Results
         uses: actions/upload-artifact@v4

.github/workflows/close-inactive-issues.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check and close inactive issues
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |

.github/workflows/lint.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: "3.10"
 

.github/workflows/nightly-release-gateway.yml

@@ -75,7 +75,7 @@ jobs:
           sed -i.bak "s/version = \"${CURRENT_VERSION}\"/version = \"${NIGHTLY_VERSION}\"/" bindings/python/pyproject.toml
 
           # Verify the change
-          cat bindings/python/pyproject.toml | grep "^version"
+          grep "^version" < bindings/python/pyproject.toml
         shell: bash
 
       - name: Install twine and tomli
@@ -161,7 +161,7 @@ jobs:
           sed -i "s/version = \"${CURRENT_VERSION}\"/version = \"${NIGHTLY_VERSION}\"/" bindings/python/pyproject.toml
 
           # Verify the change
-          cat bindings/python/pyproject.toml | grep "^version"
+          grep "^version" < bindings/python/pyproject.toml
 
       - name: Build SDist
         uses: PyO3/maturin-action@v1

.github/workflows/nightly-test-amd.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Nightly Test
         run: |
           bash scripts/ci/amd_ci_exec.sh -e GITHUB_STEP_SUMMARY="/sglang-checkout/github_summary.md" python3 run_suite.py --suite nightly-amd --timeout-per-file 7200
-          echo "$(<github_summary.md )" >> $GITHUB_STEP_SUMMARY
+          echo "$(<github_summary.md )" >> "$GITHUB_STEP_SUMMARY"
 
   check-all-jobs:
     if: always() && (github.repository == 'sgl-project/sglang' || github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch')

.github/workflows/nightly-test-nvidia.yml

@@ -9,6 +9,12 @@ on:
     paths:
       - "python/sglang/version.py"
   workflow_dispatch:
+  workflow_call:
+    inputs:
+      ref:
+        description: 'Git ref to checkout (branch, tag, or SHA)'
+        required: false
+        type: string
 
 concurrency:
   group: nightly-test-nvidia-${{ github.ref }}
@@ -22,6 +28,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -40,6 +48,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -60,6 +70,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -158,6 +170,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -178,6 +192,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -196,6 +212,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -227,6 +245,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -245,6 +265,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -281,6 +303,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -312,6 +336,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -338,6 +364,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |
@@ -358,6 +386,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - name: Install dependencies
         run: |

.github/workflows/pr-gate.yml

@@ -53,7 +53,7 @@ jobs:
       - name: Require run-ci label (optional)
         if:  github.event_name == 'pull_request' && inputs.require-run-ci == true
         run: |
-          labels='${{ steps.pr.outputs.labels }}'
+          _labels='${{ steps.pr.outputs.labels }}'
           if [[ "${{ contains(fromJson(steps.pr.outputs.labels), 'run-ci') }}" == "false" ]]; then
             echo "Missing required label 'run-ci'."
             exit 1