Strip srcpkg artifact build path

Remove srcpkg-artifact support from pkg-build-reusable-workflow.

Keep build source flow branch-based via debian-ref only.

Update pkg-release wiring and reusable workflow docs.

Signed-off-by: Simon Beaudoin <sbeaudoi@qti.qualcomm.com>

Author: simonbeaudoin0935

.github/workflows/pkg-build-reusable-workflow.yml

@@ -58,17 +58,6 @@ on:
         type: boolean
         default: false
 
-      srcpkg-artifact:
-        description: |
-          Name of a GitHub Actions artifact containing a pre-prepared source tree
-          used as the build source checkout. When set, debian-ref checkout is
-          skipped and the artifact is downloaded instead for both Docker and
-          Debusine build paths. Used for packages like pkg-linux-qcom where the
-          source tree is assembled at CI time rather than managed in a single
-          git repository.
-        type: string
-        default: ""
-
       assemble-orig:
         description: |
           When true, generate-source-package creates the .orig.tar.gz directly
@@ -230,29 +219,13 @@ jobs:
             scripts
 
       - name: Checkout Repository
-        if: ${{ inputs.srcpkg-artifact == '' }}
         uses: actions/checkout@v5
         with:
           ref: ${{ inputs.debian-ref }}
           path: package-repo
           fetch-depth: 0
           fetch-tags: true
 
-      - name: Download pre-prepared source tree
-        if: ${{ inputs.srcpkg-artifact != '' }}
-        uses: actions/download-artifact@v8
-        with:
-          name: ${{ inputs.srcpkg-artifact }}
-          path: /tmp/srcpkg-artifact
-
-      - name: Extract pre-prepared source tree
-        if: ${{ inputs.srcpkg-artifact != '' }}
-        run: |
-          # Single *.tar.gz in the artifact; glob decouples from producer naming.
-          mkdir package-repo
-          tar xzf /tmp/srcpkg-artifact/*.tar.gz \
-            -C package-repo --strip-components=1 --no-same-owner
-
       - name: Collect source package metadata
         id: metadata
         run: |
@@ -318,35 +291,13 @@ jobs:
             lib
 
       - name: Checkout Repository
-        if: ${{ inputs.srcpkg-artifact == '' }}
         uses: actions/checkout@v5
         with:
           ref: ${{ inputs.debian-ref }}
           path: srcpkg
           fetch-depth: 0
           fetch-tags: true
 
-      - name: Download pre-prepared source tree
-        if: ${{ inputs.srcpkg-artifact != '' }}
-        uses: actions/download-artifact@v8
-        with:
-          name: ${{ inputs.srcpkg-artifact }}
-          path: /tmp/srcpkg-artifact
-
-      - name: Extract pre-prepared source tree
-        if: ${{ inputs.srcpkg-artifact != '' }}
-        run: |
-          # The artifact is a tar.gz archive created by the caller to preserve
-          # Unix execute permissions on kernel build scripts. zip format (used
-          # by actions/upload-artifact) strips execute bits; tar does not.
-          # --strip-components=1 extracts the top-level directory directly into
-          # srcpkg/ without depending on its name inside the archive.
-          # The artifact contains exactly one *.tar.gz, so the glob below stays
-          # unambiguous while decoupling this step from the producer's filename.
-          mkdir srcpkg
-          tar xzf /tmp/srcpkg-artifact/*.tar.gz \
-            -C srcpkg --strip-components=1 --no-same-owner
-
       - name: Prepare release
         if: ${{ inputs.release }}
         env:
@@ -458,29 +409,13 @@ jobs:
             lib
 
       - name: Checkout Repository
-        if: ${{ needs.resolve.outputs.family == 'debian' && needs.resolve.outputs.force_docker_build != 'true' && inputs.srcpkg-artifact == '' }}
+        if: ${{ needs.resolve.outputs.family == 'debian' && needs.resolve.outputs.force_docker_build != 'true' }}
         uses: actions/checkout@v5
         with:
           ref: ${{ inputs.debian-ref }}
           path: srcpkg
           fetch-depth: 1
 
-      - name: Download pre-prepared source tree
-        if: ${{ needs.resolve.outputs.family == 'debian' && inputs.srcpkg-artifact != '' }}
-        uses: actions/download-artifact@v8
-        with:
-          name: ${{ inputs.srcpkg-artifact }}
-          path: /tmp/srcpkg-artifact
-
-      - name: Extract pre-prepared source tree
-        if: ${{ needs.resolve.outputs.family == 'debian' && inputs.srcpkg-artifact != '' }}
-        run: |
-          # Single *.tar.gz in the artifact; glob decouples from the
-          # producer's filename (see build-job extract step for rationale).
-          mkdir srcpkg
-          tar xzf /tmp/srcpkg-artifact/*.tar.gz \
-            -C srcpkg --strip-components=1 --no-same-owner
-
       - name: Validate installability from Debusine CI workspace
         # Temporarily disabled while dependency repository injection is unresolved.
         if: ${{ false }}

.github/workflows/pkg-release-reusable-workflow.yml

@@ -222,7 +222,6 @@ jobs:
       debian-ref: ${{ inputs.debian-branch }}
       release: true
       debusine-parent-workspace: ${{ inputs.debusine-parent-workspace }}
-      srcpkg-artifact: ${{ needs.prepare-release-source.outputs.srcpkg_artifact }}
     secrets:
       DEBUSINE_USER: ${{ secrets.DEBUSINE_USER }}
       DEBUSINE_TOKEN: ${{ secrets.DEBUSINE_TOKEN }}

docs/reusable-workflows.md

@@ -49,7 +49,6 @@ flowchart TD
 | `job-index` | string | No | `"0"` | Optional matrix index used to keep Debusine child workspace names unique |
 | `release` | boolean | No | `false` | Whether to prepare the release bundle before generating the Debian release source package |
 | `debusine-parent-workspace` | string | No | `ci` | Parent Debusine workspace used to create child CI workspaces for Debian builds |
-| `srcpkg-artifact` | string | No | `""` | Optional pre-prepared source-tree artifact used instead of checking out `debian-ref` |
 
 ### Secrets
 
@@ -180,7 +179,7 @@ reusable workflow: split on `/`, take the last two fields as
 ### Workflow Steps
 
 1. **Prepare release source**: For Ubuntu branches, finalize changelog and create local release commit/tag, then upload the prepared git repo as an artifact
-2. **Build and test once**: Reuse `pkg-build-reusable-workflow` (`release=true`) and feed the prepared source artifact when Ubuntu
+2. **Build and test once**: Reuse `pkg-build-reusable-workflow` (`release=true`) with `debian-branch` as the build source ref
 3. **Environment gate + provenance file**: Require `pkg-release-approval` after build/test and generate provenance from the exact built source state
 4. **Debian release path**: For Debian and `test-run=false`, publish Debusine CI workspace to prod, push git state, then publish provenance
 5. **Ubuntu release path**: Push git state atomically (branch + tag), publish provenance, and upload previously-built Docker artifacts to S3