[tschm]

Update rhiza template: v1.8.0 → v1.9.0

Template repo: jebel-quant/rhiza

The sync changed 11 files (10 template files plus .rhiza/template.lock). There were no conflicts, and nothing was left unstaged in the working tree.

• .github/workflows/rhiza_release.yml: fixes the conda recipe job (fix(release): retry grayskull on a missing recipe, not on its exit code Jebel-Quant/rhiza#1702). The job now pins grayskull==3.2.0 and passes --no-use-v1-format, so grayskull writes meta.yaml again. It also fails immediately on a real grayskull error instead of retrying it as PyPI lag. This is the failure in the v2.3.4 release run: https://github.com/tschm/pyhrp/actions/runs/36538348782/job/109308115664
• .github/PULL_REQUEST_TEMPLATE.md: new file.
• The other rhiza_*.yml workflows get small updates from the template.

No gates were run. Run /rhiza:quality for a scorecard.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Documentation
  • Added a pull request template with prompts and checklists for describing changes, testing, documentation, and potential breaking changes.
• Chores
  • Updated automated project workflows to a newer shared workflow version and made credential forwarding more specific.
  • Updated package recipe generation to use a fixed tool version and retry when a recipe is not produced.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 18670084-5a9e-4c85-931d-31840f9b12cd

📥 Commits

Reviewing files that changed from the base of the PR and between 95f587a and 58656f6.

⛔ Files ignored due to path filters (1)

• .rhiza/template.lock is excluded by !**/*.lock

📒 Files selected for processing (11)

• .github/PULL_REQUEST_TEMPLATE.md
• .github/workflows/rhiza_benchmark.yml
• .github/workflows/rhiza_book.yml
• .github/workflows/rhiza_ci.yml
• .github/workflows/rhiza_codeql.yml
• .github/workflows/rhiza_marimo.yml
• .github/workflows/rhiza_paper.yml
• .github/workflows/rhiza_release.yml
• .github/workflows/rhiza_scorecard.yml
• .github/workflows/rhiza_weekly.yml
• .rhiza/template.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The PR adds a pull request template, updates reusable workflow references and secret forwarding, and revises Conda recipe generation with a pinned grayskull version and new retry checks.

Changes

Contribution Template

Layer / File(s)	Summary
Pull request contribution prompts .github/PULL_REQUEST_TEMPLATE.md	Adds optional prompts and checklists, plus guidance for titles, checks, template-owned files, documentation, and breaking changes.

Automation Updates

Layer / File(s)	Summary
Reusable workflow versions and secrets .github/workflows/rhiza_{benchmark,book,ci,codeql,marimo,paper,scorecard,weekly}.yml, .rhiza/template.yml	Updates reusable workflow references and the template version to v1.9.0. Several jobs explicitly forward selected secrets instead of inheriting all secrets.
Conda recipe generation .github/workflows/rhiza_release.yml	Pins grayskull to 3.2.0 and adds --no-use-v1-format. The workflow retries when a successful run does not produce meta.yaml; it fails immediately on a nonzero exit and after five attempts without a recipe.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~20 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 58656

This template sync bumps workflow versions, forwards secrets explicitly, and pins grayskull for release recipe generation. No actionable merge-blocking risk was found. The workflows were not run as part of this change.

Architecture Summary

Architecture risk: 🔵 Low · up to 58656

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/PULL_REQUEST_TEMPLATE.md: Added the pull request template, including optional contribution prompts and checklists for general and user-visible changes.
• observed — Modified behavior in .github/workflows/rhiza_benchmark.yml: The benchmark job switches the reusable workflow reference from v1.8.0 to v1.9.0 and replaces secrets: inherit with explicit forwarding of GH_PAT and UV_EXTRA_INDEX_URL. Comments describe the empty-secret and github.token fallback behavior.
• observed — Modified behavior in .github/workflows/rhiza_book.yml: The book job now uses reusable workflow v1.9.0 and explicitly passes GH_PAT and UV_EXTRA_INDEX_URL; this replaces v1.8.0 and secrets: inherit.
• observed — Modified behavior in .github/workflows/rhiza_ci.yml: The reusable workflow reference changes from v1.8.0 to v1.9.0. The inherited-secrets configuration is replaced with explicit forwarding of GH_PAT and UV_EXTRA_INDEX_URL; a comment describes the forwarding limitation and fallback.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating Rhiza references from v1.8.0 to v1.9.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}