feat: add langflow-sdk support to release workflow

[erichare]

Summary

• Adds langflow-sdk build and publish support to the release workflow, mirroring the nightly build support from fix: Cherry-pick nightly SDK build fixes to main #12491
• lfx depends on langflow-sdk>=0.1.0, so SDK must be published to PyPI before LFX can be installed by end users
• This is the first release of langflow-sdk to PyPI

Changes

New workflow inputs

• release_sdk — controls whether langflow-sdk is built and published to PyPI

New jobs

• determine-sdk-version — reads version from src/sdk/pyproject.toml, checks PyPI (handles 404 for first-time publish), computes pre-release version if needed
• build-sdk — builds SDK wheel, verifies version, tests import, uploads dist-sdk artifact
• publish-sdk — publishes SDK to PyPI (gated on dry_run), runs after cross-platform tests and CI

Modified jobs

• validate-dependencies — enforces that release_lfx requires release_sdk (same pattern as main→base validation)
• build-lfx — downloads SDK artifact, installs SDK + LFX wheels together in a clean venv for testing (mirrors nightly pattern), adds pre-release langflow-sdk dependency handling
• build-base / build-main — download SDK artifact and include as --find-links for dependency resolution
• test-cross-platform — passes sdk-artifact-name: "dist-sdk" to include SDK in cross-platform testing
• publish-lfx — depends on publish-sdk to ensure SDK is on PyPI before LFX is published

Dependency graph (publish order)

publish-sdk → publish-lfx → publish-base → publish-main

Test plan

• Trigger workflow with dry_run=true, release_sdk=true, release_lfx=true to verify the build pipeline completes
• Verify determine-sdk-version correctly detects first-time publish (PyPI 404)
• Verify build-sdk produces correct wheel and import test passes
• Verify build-lfx installs both SDK and LFX wheels together for CLI test
• Verify validate-dependencies blocks release_lfx without release_sdk
• For actual release: run with dry_run=false to publish to PyPI

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 48709d6b-0f62-48fb-9f50-e9ea9c446615

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch eh/release-sdk-support

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.43%. Comparing base (19df460) to head (45c8ee6).
⚠️ Report is 3 commits behind head on release-1.9.0.

❌ Your project status has failed because the head coverage (49.73%) is below the target coverage (60.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@                Coverage Diff                @@
##           release-1.9.0   #12679      +/-   ##
=================================================
- Coverage          52.70%   52.43%   -0.27%     
=================================================
  Files               2020     2020              
  Lines             183333   182623     -710     
  Branches           28722    26025    -2697     
=================================================
- Hits               96617    95753     -864     
- Misses             85625    85778     +153     
- Partials            1091     1092       +1     

Flag	Coverage Δ
backend	55.68% <ø> (-0.02%)	⬇️
frontend	52.33% <ø> (-0.39%)	⬇️
lfx	49.73% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 244 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Adds first-time release support for langflow-sdk to the main release workflow, ensuring the SDK is published to PyPI before LFX (and downstream packages) so end users can install lfx successfully.

Changes:

• Introduces a release_sdk workflow input and SDK-specific determine/build/publish jobs.
• Updates build jobs (LFX/base/main) and cross-platform tests to optionally consume a locally-built SDK wheel artifact.
• Enforces release dependency ordering so publish-sdk happens before publish-lfx, then base/main.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
.secrets.baseline	Updates secret baseline metadata to reflect workflow line shifts and regeneration time.
.github/workflows/release.yml	Adds SDK release pipeline (determine/build/publish) and threads SDK artifact usage + publish ordering through existing release jobs.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Frontend Unit Test Coverage Report

Coverage Summary

Lines	Statements	Branches	Functions
	34.55% (39486/114254)	66.98% (5330/7957)	35.6% (926/2601)

Unit Test Results

Tests	Skipped	Failures	Errors	Time
3795	0 💤	0 ❌	0 🔥	7m 19s ⏱️