chore: never modify the COPYRIGHT template and guard .github templates

[mc-nv]

What does the PR do?

Aligns this repository's self-contained copyright hook with NVIDIA's copyright/license header guidance. model_analyzer keeps its own SPDX implementation (Apache-2.0) and does not adopt the centralized developer_tools hooks:

• tools/add_copyright.py computes the header's copyright year in memory instead of rewriting the tools/COPYRIGHT template file on every run — hooks never modify license/copyright source files.
• The add-copyright hook excludes .github/ so GitHub issue/PR templates keep their YAML frontmatter first.
• Pre-commit CI runs only on files modified by the PR (mirroring the other triton-inference-server repos) — a full --all-files run bumps every stale copyright year and fails any PR at year rollover.
• Adopts the org-wide GitHub defaults: PR templates inherited from triton-inference-server/.github (local copies removed) and the conventional-pr caller stub (@v1.4.3) — title validation, multi-label from commit types, org-wide label colors, cherry-pick detection.
• Workflow files use this repo's Apache SPDX header convention (the BSD long-form headers on conventional-pr.yml, codeql.yml, and python-package.yaml are converted), and the add-copyright exclude is narrowed to template paths so .github/workflows/ is under header enforcement.

Pros / Cons

Pros

• Hook runs no longer produce surprise diffs on tools/COPYRIGHT at year rollover; newly-inserted headers always carry the current year.
• .github/ templates are protected from header injection that would break their frontmatter.

Cons / risks

• None identified — inserted header text is unchanged; only the side effect on the template file is removed.

Related Issues / PRs

• Resolves: TRI-1100

Related PRs:

• ci: migrate the centralized add-license hook to the org .github repository developer_tools#61 (equivalent fixes in the centralized hooks; this repo intentionally stays self-contained)

Test plan

• pre-commit validate-config passes.
• Running the hook on a new file inserts the standard two-line SPDX Apache-2.0 header with the current year while tools/COPYRIGHT stays byte-identical (verified via md5).

Caveats

• None.

[Vinya567]

@greptileai

[greptile-apps]

Greptile Summary

This PR refactors the copyright tooling and CI so that pre-commit hooks never produce surprise diffs on the tools/COPYRIGHT template file and GitHub issue/PR templates are shielded from header injection. It also consolidates the workflow license headers from BSD long-form to the two-line Apache SPDX convention used by the rest of the repo.

• get_license() now computes the copyright header in memory (always with the current year) instead of first mutating tools/COPYRIGHT; the regex substitution is correct and behaviorally identical to the old single-year path.
• The add-copyright hook gains an exclude for .github/ISSUE_TEMPLATE/ and .github/PULL_REQUEST_TEMPLATE paths, and pre-commit.yml switches to a git diff HEAD^1 HEAD approach (with fetch-depth: 2) that runs hooks only on PR-modified files.
• conventional-pr.yml is a new thin-caller workflow that routes same-repo PRs through pull_request and fork PRs through pull_request_target with a mutually-exclusive if guard and appropriately scoped write permissions.

Confidence Score: 5/5

Safe to merge — the changes are confined to CI tooling, copyright header plumbing, and license-text normalization; no application logic is affected.

The core change — computing the copyright header in memory instead of rewriting the template file — is a clean, well-scoped refactor. The regex substitution in get_license() behaves identically to the old disallow_range=True path. The workflow changes (targeted pre-commit diff, caching, header normalization, new conventional-pr caller) are all standard patterns and the pull_request_target guard correctly prevents double-triggering and limits permissions to PR/issue writes.

No files require special attention. The new conventional-pr.yml delegates to an external reusable workflow (@v1.4.3); reviewers may want to confirm that tag is immutable in the org .github repo, consistent with the comment in the file.

Important Files Changed

Filename	Overview
tools/add_copyright.py	Replaces file-mutating update_and_get_license() with in-memory get_license(); COPYRIGHT template is no longer modified on each run. Logic for year substitution is correct — single current year is always used for new headers, and existing headers are updated via the existing update_copyright_year path.
.github/workflows/pre-commit.yml	Replaces pre-commit/action with a manual pip install + git diff approach targeting only PR-modified files (HEAD^1..HEAD via fetch-depth: 2). Adds pre-commit cache and minimal contents: read permission. The approach is correct for GitHub Actions merge-commit checkout semantics.
.pre-commit-config.yaml	Adds exclude pattern for .github/ template paths to the add-copyright hook, preventing header injection that would break YAML frontmatter. Copyright year bumped to 2026.
.github/workflows/conventional-pr.yml	New thin-caller workflow using pull_request for same-repo PRs and pull_request_target for forks (with the mutually-exclusive if guard). Delegates to org-wide reusable workflow pinned at v1.4.3 with appropriately scoped permissions.
.github/workflows/codeql.yml	License header converted from 27-line BSD long-form to 2-line Apache SPDX. No logic changes.
.github/workflows/python-package.yaml	License header converted from BSD long-form to Apache SPDX. No logic changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[PR opened / pushed] --> B{pull_request event}
    B --> C[actions/checkout\nfetch-depth: 2]
    C --> D[actions/cache\n~/.cache/pre-commit]
    D --> E[pip install pre-commit]
    E --> F[git diff --name-only -z\n--diff-filter=d HEAD^1 HEAD]
    F --> G{Any modified\nnon-deleted files?}
    G -- No files --> H[xargs --no-run-if-empty\nskips — exit 0]
    G -- Files listed --> I[pre-commit run --files\non changed paths only]
    I --> J[add-copyright hook]
    J --> K{File in exclude\npattern?}
    K -- Yes --> L[Skip — no header injection]
    K -- No --> M[get_license in memory\ncurrent year only]
    M --> N{File has\ncopyright already?}
    N -- Yes --> O[update_copyright_year\nin file]
    N -- No --> P[Insert header\nwith current year]
    O --> Q[COPYRIGHT template\nunchanged]
    P --> Q

Loading

_{Reviews (3): Last reviewed commit: "ci: keep this repo's Apache SPDX header ..." | Re-trigger Greptile}

[mc-nv]

Closing: the team is moving away from centralized org-level configuration in favor of per-repository self-contained setups (see triton-inference-server/server#8897 for the first decentralized implementation). Branch retained for reference. TRI-1100