Merge remote-tracking branch 'origin/master' into sync_msft_24042026

Author: AIFrameworksIntegration

.github/workflows/linux_cuda_ci.yml

@@ -44,6 +44,7 @@ jobs:
     runs-on:
       - self-hosted
       - "1ES.Pool=onnxruntime-github-linux-a10"
+      - "1ES.ImageOverride=onnxruntime-ubuntu2204-CUDA-A10-Test"
       - "JobId=test-linux-cuda-x64-release-${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}"
     permissions:
       contents: read

.github/workflows/linux_tensorrt_ci.yml

@@ -38,12 +38,33 @@ jobs:
     secrets:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Pass token for reusable workflow needs (e.g., docker build action)
 
+  build-linux-TensorRT-CUDA-Minimal-x64-release:
+    name: Build Linux TensorRT CUDA Minimal x64 Release
+    # Build-only job for CUDA minimal build (no tests, no unit tests)
+    uses: ./.github/workflows/reusable_linux_build.yml
+    with:
+      pool_name: "onnxruntime-github-Ubuntu2204-AMD-CPU"
+      build_config: Release
+      architecture: x64
+      dockerfile_path: tools/ci_build/github/linux/docker/Dockerfile.manylinux2_28_cuda
+      docker_build_args: '--build-arg BASEIMAGE=onnxruntimebuildcache.azurecr.io/internal/azureml/onnxruntime/build/cuda12_x64_almalinux8_gcc14:20251017.1 --build-arg TRT_VERSION=10.14.1.48-1.cuda12.9 --network=host'
+      docker_image_repo: onnxruntimetensorrt86gpubuild
+      extra_build_flags: '--use_binskim_compliant_compile_flags --build_wheel --cuda_version=12.8 --cuda_home=/usr/local/cuda-12.8 --cudnn_home=/usr/local/cuda-12.8 --use_tensorrt --tensorrt_home /usr --build_java --enable_cuda_minimal_build --disable_generation_ops --cmake_extra_defines CMAKE_CUDA_ARCHITECTURES=86 onnxruntime_BUILD_UNIT_TESTS=OFF'
+      python_path_prefix: 'PATH=/opt/python/cp310-cp310/bin:$PATH'
+      run_tests: false
+      upload_build_output: false
+      execution_providers: 'cuda tensorrt'
+      job_identifier: build-linux-TensorRT-CUDA-Minimal-x64-release
+    secrets:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
   test-linux-TensorRT-x64-release:
     name: Test Linux TensorRT x64 Release
     needs: build-linux-TensorRT-x64-release
     runs-on:
       - self-hosted
       - "1ES.Pool=onnxruntime-github-linux-a10"
+      - "1ES.ImageOverride=onnxruntime-ubuntu2204-CUDA-A10-Test"
       - "JobId=test-linux-TensorRT-x64-release-${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}"
     permissions:
       contents: read

.github/workflows/publish-c-apidocs.yml

@@ -1,20 +1,28 @@
 name: Update C/C++ API Docs
 
-# Run when the C API changes or every month so that the artifact does not expire
+# Run when the C API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
       - main
     paths:
       - include/onnxruntime/core/session/**
       - orttraining/orttraining/training_api/include/**
+      - docs/c_cxx/**
+  pull_request:
+    paths:
+      - include/onnxruntime/core/session/**
+      - orttraining/orttraining/training_api/include/**
+      - docs/c_cxx/**
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-c"
-  cancel-in-progress: false
+  group: "apidocs-c-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -46,9 +54,10 @@ jobs:
       - name: Move C/C++ docs into site
         run: |
           mkdir -p _site/docs/api
-          rm -rf site/docs/api/c
+          rm -rf _site/docs/api/c
           mv build/doxygen/html _site/docs/api/c
       - name: Upload new site
+        if: github.ref == 'refs/heads/main'
         uses: actions/upload-artifact@v6
         with:
           name: onnxruntime-c-apidocs

.github/workflows/publish-csharp-apidocs.yml

@@ -1,19 +1,24 @@
 name: Update C# API Docs
 
-# Run when the C# API changes or every month so that the artifact does not expire
+# Run when the C# API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
       - main
     paths:
       - csharp/**
+  pull_request:
+    paths:
+      - csharp/**
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-csharp"
-  cancel-in-progress: false
+  group: "apidocs-csharp-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -60,6 +65,7 @@ jobs:
         if (Test-Path $OutputDirectory) { Remove-Item -Recurse -Force $OutputDirectory }
         Move-Item -Path csharp\ApiDocs\csharp -Destination $OutputDirectory
     - name: Upload docs artifact
+      if: github.ref == 'refs/heads/main'
       uses: actions/upload-artifact@v6
       with:
         name: onnxruntime-csharp-apidocs

.github/workflows/publish-java-apidocs.yml

@@ -1,19 +1,24 @@
 name: Update Java API Docs
 
-# Run when the Java API changes or every month so that the artifact does not expire
+# Run when the Java API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
       - main
     paths:
       - java/**
+  pull_request:
+    paths:
+      - java/**
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-java"
-  cancel-in-progress: false
+  group: "apidocs-java-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -47,6 +52,7 @@ jobs:
           mkdir -p _site/docs/api
           mv java/build/docs/javadoc _site/docs/api/java
       - name: Upload new site
+        if: github.ref == 'refs/heads/main'
         uses: actions/upload-artifact@v6
         with:
           name: onnxruntime-java-apidocs

.github/workflows/publish-js-apidocs.yml

@@ -1,19 +1,24 @@
 name: Update JS API Docs
 
-# Run when the JS API changes or every month so that the artifact does not expire
+# Run when the JS API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
       - main
     paths:
       - js/common/**
+  pull_request:
+    paths:
+      - js/common/**
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-js"
-  cancel-in-progress: false
+  group: "apidocs-js-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -47,6 +52,7 @@ jobs:
           mkdir -p _site/docs/api
           mv js/common/docs _site/docs/api/js
       - name: Upload docs artifact
+        if: github.ref == 'refs/heads/main'
         uses: actions/upload-artifact@v6
         with:
           name: onnxruntime-node-apidocs

.github/workflows/publish-objectivec-apidocs.yml

@@ -1,19 +1,24 @@
 name: Update Objective-C API Docs
 
-# Run when the Objective-C API changes or every month so that the artifact does not expire
+# Run when the Objective-C API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
     - main
     paths:
     - objectivec/**
+  pull_request:
+    paths:
+    - objectivec/**
   schedule:
   - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-objectivec"
-  cancel-in-progress: false
+  group: "apidocs-objectivec-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -52,6 +57,7 @@ jobs:
       shell: bash
 
     - name: Upload new site
+      if: github.ref == 'refs/heads/main'
       uses: actions/upload-artifact@v6
       with:
         name: onnxruntime-objectivec-apidocs

.github/workflows/publish-python-apidocs.yml

@@ -1,20 +1,26 @@
 name: Update Python API Docs
 
-# Run when the Python API changes or every month so that the artifact does not expire
+# Run when the Python API changes or every week so that the artifact does not expire.
+# Also runs on pull requests that touch relevant files so doc generation errors
+# are caught early. The artifact is only published on the main branch.
 on:
   push:
     branches:
       - main
     paths:
       - onnxruntime/python/**
       - docs/python/**
+  pull_request:
+    paths:
+      - onnxruntime/python/**
+      - docs/python/**
   schedule:
     - cron: '0 0 * * 0'
   workflow_dispatch:
 
 concurrency:
-  group: "apidocs-python"
-  cancel-in-progress: true
+  group: "apidocs-python-${{ github.ref }}"
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 permissions:
   contents: write
@@ -54,6 +60,7 @@ jobs:
           mkdir -p _site/docs/api/
           mv build/docs/html _site/docs/api/python
       - name: Upload docs artifact
+        if: github.ref == 'refs/heads/main'
         uses: actions/upload-artifact@v6
         with:
           name: onnxruntime-python-apidocs