Sync upstream rust-v0.63.0

.github/workflows/ci.yml

@@ -1,8 +1,6 @@
 name: ci
 
-on:
-  pull_request: {}
-  push: { branches: [main] }
+on: workflow_dispatch
 
 jobs:
   build-test:

.github/workflows/cla.yml

@@ -1,9 +1,5 @@
 name: CLA Assistant
-on:
-  issue_comment:
-    types: [created]
-  pull_request_target:
-    types: [opened, closed, synchronize]
+on: workflow_dispatch
 
 permissions:
   actions: write

.github/workflows/close-stale-contributor-prs.yml

@@ -1,9 +1,6 @@
 name: Close stale contributor PRs
 
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: "0 6 * * *"
+on: workflow_dispatch
 
 permissions:
   contents: read

.github/workflows/codespell.yml

@@ -2,11 +2,7 @@
 ---
 name: Codespell
 
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
+on: workflow_dispatch
 
 permissions:
   contents: read

.github/workflows/issue-deduplicator.yml

@@ -1,10 +1,6 @@
 name: Issue Deduplicator
 
-on:
-  issues:
-    types:
-      - opened
-      - labeled
+on: workflow_dispatch
 
 jobs:
   gather-duplicates:
@@ -46,7 +42,6 @@ jobs:
         with:
           openai-api-key: ${{ secrets.CODEX_OPENAI_API_KEY }}
           allow-users: "*"
-          model: gpt-5.1
           prompt: |
             You are an assistant that triages new GitHub issues by identifying potential duplicates.
 

.github/workflows/issue-labeler.yml

@@ -1,10 +1,6 @@
 name: Issue Labeler
 
-on:
-  issues:
-    types:
-      - opened
-      - labeled
+on: workflow_dispatch
 
 jobs:
   gather-labels:

.github/workflows/rust-release.yml

@@ -6,10 +6,7 @@
 # ```
 
 name: rust-release
-on:
-  push:
-    tags:
-      - "rust-v*.*.*"
+on: workflow_dispatch
 
 concurrency:
   group: ${{ github.workflow }}
@@ -371,8 +368,20 @@ jobs:
           path: |
             codex-rs/dist/${{ matrix.target }}/*
 
+  shell-tool-mcp:
+    name: shell-tool-mcp
+    needs: tag-check
+    uses: ./.github/workflows/shell-tool-mcp.yml
+    with:
+      release-tag: ${{ github.ref_name }}
+      # We are not ready to publish yet.
+      publish: false
+    secrets: inherit
+
   release:
-    needs: build
+    needs:
+      - build
+      - shell-tool-mcp
     name: release
     runs-on: ubuntu-latest
     permissions:
@@ -395,6 +404,14 @@ jobs:
       - name: List
         run: ls -R dist/
 
+      # This is a temporary fix: we should modify shell-tool-mcp.yml so these
+      # files do not end up in dist/ in the first place.
+      - name: Delete entries from dist/ that should not go in the release
+        run: |
+          rm -rf dist/shell-tool-mcp*
+
+          ls -R dist/
+
       - name: Define release name
         id: release_name
         run: |

.github/workflows/sdk.yml

@@ -1,9 +1,6 @@
 name: sdk
 
-on:
-  push:
-    branches: [main]
-  pull_request: {}
+on: workflow_dispatch
 
 jobs:
   sdks:

.github/workflows/shell-tool-mcp-ci.yml

@@ -0,0 +1,36 @@
+name: shell-tool-mcp CI
+
+on: workflow_dispatch
+
+env:
+  NODE_VERSION: 22
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          run_install: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: "pnpm"
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Format check
+        run: pnpm --filter @openai/codex-shell-tool-mcp run format
+
+      - name: Run tests
+        run: pnpm --filter @openai/codex-shell-tool-mcp test
+
+      - name: Build
+        run: pnpm --filter @openai/codex-shell-tool-mcp run build