[DO-NOT-MERGE][MGPU][TEST] Integration bundle: device kwarg + kitless newton + bounded shutdown + Kit-pin

.github/actions/run-package-tests/action.yml

@@ -69,6 +69,10 @@ inputs:
     description: 'Space-separated pip packages to install inside the Docker container before pytest starts'
     default: ''
     required: false
+  extra-env-vars:
+    description: 'Extra env vars to forward into the container (one KEY=value per line)'
+    default: ''
+    required: false
   container-name:
     description: 'Docker container name prefix (run-id is appended automatically)'
     required: true
@@ -150,6 +154,7 @@ runs:
         include-files: ${{ inputs.include-files }}
         volume-mount-source: ${{ github.workspace }}
         extra-pip-packages: ${{ inputs.extra-pip-packages }}
+        extra-env-vars: ${{ inputs.extra-env-vars }}
 
     - name: Check Test Results
       if: always()

.github/actions/run-tests/action.yml

@@ -69,6 +69,14 @@ inputs:
     description: 'Space-separated pip packages to install inside the Docker container before pytest starts'
     default: ''
     required: false
+  extra-env-vars:
+    description: >-
+      Extra environment variables to forward into the container, one per line in
+      ``KEY=value`` form. Whitespace-only lines and lines starting with ``#`` are
+      ignored. Used by the multi-GPU workflow to inject
+      ``ISAACLAB_TEST_DEVICES`` / ``ISAACLAB_SIM_DEVICE``.
+    default: ''
+    required: false
 
 runs:
   using: composite
@@ -93,6 +101,7 @@ runs:
           local shard_count="${13}"
           local volume_mount_source="${14}"
           local extra_pip_packages="${15}"
+          local extra_env_vars="${16}"
           local logs_pid=""
           local wait_pid=""
           local docker_wait_file="/tmp/.docker_exit_${container_name}"
@@ -204,6 +213,24 @@ runs:
             docker_env_vars="$docker_env_vars -e TEST_EXTRA_PIP_PACKAGES"
           fi
 
+          # Caller-supplied extra env vars (one KEY=value per line). Skips
+          # blank lines and full-line comments (line where the first
+          # non-whitespace char is ``#``). Mid-line ``#`` is preserved so
+          # values like ``IMAGE_TAG=v1.0#nightly`` survive.
+          if [ -n "$extra_env_vars" ]; then
+            while IFS= read -r line; do
+              # Strip leading whitespace (YAML ``|`` block can leave indent).
+              line="${line#"${line%%[![:space:]]*}"}"
+              [ -z "$line" ] && continue
+              [ "${line:0:1}" = "#" ] && continue
+              key="${line%%=*}"
+              value="${line#*=}"
+              export "$key"="$value"
+              docker_env_vars="$docker_env_vars -e $key"
+              echo "Forwarding extra env var: $key"
+            done <<< "$extra_env_vars"
+          fi
+
           # Volume mount for deps-cache-hit mode: bind-mount the checked-out
           # source code over /workspace/isaaclab instead of baking it into the image.
           docker_volume_args=""
@@ -392,7 +419,7 @@ runs:
         }
 
         # Call the function with provided parameters
-        run_tests "${{ inputs.test-path }}" "${{ inputs.result-file }}" "${{ inputs.container-name }}" "${{ inputs.image-tag }}" "${{ inputs.reports-dir }}" "${{ inputs.pytest-options }}" "${{ inputs.filter-pattern }}" "${{ inputs.exclude-pattern }}" "${{ inputs.curobo-only }}" "${{ inputs.include-files }}" "${{ inputs.quarantined-only }}" "${{ inputs.shard-index }}" "${{ inputs.shard-count }}" "${{ inputs.volume-mount-source }}" "${{ inputs.extra-pip-packages }}"
+        run_tests "${{ inputs.test-path }}" "${{ inputs.result-file }}" "${{ inputs.container-name }}" "${{ inputs.image-tag }}" "${{ inputs.reports-dir }}" "${{ inputs.pytest-options }}" "${{ inputs.filter-pattern }}" "${{ inputs.exclude-pattern }}" "${{ inputs.curobo-only }}" "${{ inputs.include-files }}" "${{ inputs.quarantined-only }}" "${{ inputs.shard-index }}" "${{ inputs.shard-count }}" "${{ inputs.volume-mount-source }}" "${{ inputs.extra-pip-packages }}" "${{ inputs.extra-env-vars }}"
 
     - name: Kill container on cancellation
       if: cancelled()

.github/workflows/build.yaml

@@ -74,7 +74,12 @@ jobs:
     name: Detect Changes
     runs-on: ubuntu-latest
     outputs:
-      run_docker_tests: ${{ steps.detect.outputs.run_docker_tests }}
+      # TEMP (revert before final review / before landing): force
+      # run_docker_tests=false while iterating PR #5823. All gated
+      # test/build jobs skip via their existing if-gate; the
+      # single-GPU Docker + Tests matrix won't burn the gpu pool on
+      # every push. Per ~/.claude/skills/pr/ci-iteration-shortcut.md.
+      run_docker_tests: 'false'
     steps:
     - id: detect
       env:

.github/workflows/docs.yaml

@@ -25,6 +25,11 @@ jobs:
   doc-build-type:
     name: Detect Doc Build Type
     runs-on: ubuntu-latest
+    # DIAGNOSTIC PR opt-out: skip docs build entirely when the PR title is
+    # marked DO-NOT-MERGE (scratch / hypothesis-only branches don't need a
+    # full doc rebuild on every push). Push events on main/develop/release
+    # still run because they don't carry a PR title.
+    if: ${{ !(github.event_name == 'pull_request' && contains(github.event.pull_request.title, 'DO-NOT-MERGE')) }}
     outputs:
       trigger-deploy: ${{ steps.trigger-deploy.outputs.defined }}
     steps:
@@ -42,8 +47,14 @@ jobs:
     name: Build Latest Docs
     runs-on: ubuntu-latest
     needs: [doc-build-type]
-    # run on non-deploy branches to build current version docs only
-    if: needs.doc-build-type.outputs.trigger-deploy != 'true'
+    # Run on non-deploy branches to build current version docs only AND skip
+    # for DO-NOT-MERGE diagnostic PRs (the needed doc-build-type job already
+    # skips for those, but GitHub Actions evaluates `needs.X.outputs.Y` as
+    # empty when X is skipped, which keeps this `!= 'true'` gate true — so
+    # we re-check the title here to actually cascade the skip).
+    if: |
+      needs.doc-build-type.outputs.trigger-deploy != 'true'
+      && !(github.event_name == 'pull_request' && contains(github.event.pull_request.title, 'DO-NOT-MERGE'))
 
     steps:
     - name: Checkout code

.github/workflows/install-ci.yml

@@ -34,6 +34,11 @@ jobs:
   changes:
     name: Detect Changes
     runs-on: ubuntu-latest
+    # DIAGNOSTIC PR opt-out: skip install-ci entirely when the PR title is
+    # marked DO-NOT-MERGE. The downstream install-tests-x86 / install-tests-arm
+    # jobs gate on `needs.changes.outputs.run_install_tests == 'true'`; with
+    # this job skipped the output is empty and both dependents skip too.
+    if: ${{ !(github.event_name == 'pull_request' && contains(github.event.pull_request.title, 'DO-NOT-MERGE')) }}
     outputs:
       run_install_tests: ${{ steps.detect.outputs.run_install_tests }}
     steps: