Merge branch 'main' into multinode-integration

Author: cquil11

.github/workflows/label-validation.yml

@@ -6,17 +6,20 @@ concurrency:
   cancel-in-progress: true
 
 on:
-  pull_request:
+  pull_request_target:
     types: [labeled, synchronize]
 
 jobs:
   get-jobs:
     runs-on: ubuntu-latest
+    environment: fork-pr-validation
     outputs:
       search-space-config: ${{ steps.get-jobs.outputs.search-space-config }}
     steps:
       - name: Checkout code
         uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - id: get-jobs
         shell: python
@@ -79,12 +82,15 @@ jobs:
 
   validate:
     needs: get-jobs
-    if: ${{ needs.get-jobs.outputs.search-space-config != '[]' }}
+    if: ${{ always() && needs.get-jobs.result == 'success' && needs.get-jobs.outputs.search-space-config != '[]' }}
     uses: ./.github/workflows/benchmark-tmpl.yml
     strategy:
       fail-fast: false
       matrix:
-        config: ${{ fromJson(needs.get-jobs.outputs.search-space-config) }}
+        # The '|| '[]'' fallback is required because GitHub evaluates the matrix expression
+        # before the 'if' condition. Without it, fromJson() throws a parse error when the
+        # output is empty/undefined (e.g., when get-jobs is pending approval or was skipped).
+        config: ${{ fromJson(needs.get-jobs.outputs.search-space-config || '[]') }}
     secrets: inherit
     name: validate ${{ matrix.config.runner }}
     with:
@@ -106,14 +112,14 @@ jobs:
       disagg: ${{ matrix.config.disagg }}
 
   collect-results:
-    needs: validate
-    if: ${{ always() }}
+    needs: [get-jobs, validate]
+    if: ${{ always() && needs.get-jobs.result == 'success' }}
     uses: ./.github/workflows/collect-results.yml
     secrets: inherit
 
   calc-success-rate:
-    needs: collect-results
-    if: ${{ always() }}
+    needs: [get-jobs, collect-results]
+    if: ${{ always() && needs.get-jobs.result == 'success' }}
     runs-on: ubuntu-latest
 
     env: