From 31042cccc8df2d09008e2be3b96d240fe7621577 Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Sun, 6 Sep 2026 14:28:41 -0700
Subject: [PATCH 1/9] feat: add caller cache support to conda C++ tests

---
 .github/workflows/conda-cpp-tests.yaml | 30 ++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 45da20b9..4d51f3a0 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -74,6 +74,20 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated files or directories to persist with actions/cache.
+          Must be provided together with cache-key-prefix.
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its test-matrix
+          identity so caches are not shared across incompatible runners or environments.
     secrets:
       script-env-secret-1-key:
         description: |
@@ -164,6 +178,22 @@ jobs:
           ref: ${{ inputs.sha }}
           fetch-depth: 0
           persist-credentials: true
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != ''
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}
       # This has to be AFTER the checkout step. It creates a telemetry-artifacts directory,
       # and the checkout step would destroy it.
       - name: Telemetry setup

From 4f89fab956030d19f91e0dbdd8e8cb8a45cac7c4 Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Sun, 6 Sep 2026 15:59:54 -0700
Subject: [PATCH 2/9] docs: clarify caller cache paths

---
 .github/workflows/conda-cpp-tests.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 4d51f3a0..1dc7ca68 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -79,7 +79,9 @@ on:
         required: false
         default: ""
         description: |
-          Newline-separated files or directories to persist with actions/cache.
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required so actions/cache can access paths created in the
+          job container during its host-side post-job save step.
           Must be provided together with cache-key-prefix.
       cache-key-prefix:
         type: string

From 45a21fbf8fe7efcf5ad991847ee79828dfdf8c62 Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 08:58:06 -0700
Subject: [PATCH 3/9] feat: generalize caller cache support

---
 .github/workflows/conda-cpp-build.yaml    | 19 ++++++++++
 .github/workflows/conda-cpp-tests.yaml    | 25 +++++++++++--
 .github/workflows/conda-python-build.yaml | 19 ++++++++++
 .github/workflows/conda-python-tests.yaml | 44 +++++++++++++++++++++++
 .github/workflows/wheels-test.yaml        | 44 +++++++++++++++++++++++
 5 files changed, 149 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 4f8a4461..43726f68 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -68,6 +68,10 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
+      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
+      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
 
 defaults:
   run:
@@ -122,6 +126,21 @@ jobs:
           ref: ${{ inputs.sha }}
           fetch-depth: 0
           persist-credentials: true
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
+        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
+        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
       - name: Standardize repository information
         env:
           RAPIDS_REPOSITORY: ${{ inputs.repo || github.repository }}
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 1dc7ca68..6779c01f 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -90,6 +90,20 @@ on:
         description: |
           Prefix for the actions/cache key for cache-paths. The workflow appends its test-matrix
           identity so caches are not shared across incompatible runners or environments.
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated NAME=VALUE pairs exported before the caller script runs. This is useful
+          when a tool needs to be pointed at a workspace-relative cached directory.
     secrets:
       script-env-secret-1-key:
         description: |
@@ -181,7 +195,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: true
       - name: Validate caller cache configuration
-        if: inputs.cache-paths != '' || inputs.cache-key-prefix != ''
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
         run: |
           if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
             echo "ERROR: cache-paths and cache-key-prefix must be provided together."
@@ -195,7 +209,14 @@ jobs:
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ${{ inputs.cache-paths }}
-          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: |
+            ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
       # This has to be AFTER the checkout step. It creates a telemetry-artifacts directory,
       # and the checkout step would destroy it.
       - name: Telemetry setup
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 1a2bb291..028116ad 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -78,6 +78,10 @@ on:
           or CUDA version. 'cuda_major' if the package is not dependent on
           operating system, Python minor version, or CPU architecture, but is
           dependent on CUDA major version."
+      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
+      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
 
 defaults:
   run:
@@ -132,6 +136,21 @@ jobs:
           ref: ${{ inputs.sha }}
           fetch-depth: 0
           persist-credentials: true
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
+        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
+        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
       - name: Standardize repository information
         env:
           RAPIDS_REPOSITORY: ${{ inputs.repo || github.repository }}
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index 1e151503..1b8d5d00 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -77,6 +77,26 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated workspace-relative paths to persist with actions/cache."
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: "Cache-key prefix; the workflow appends its matrix identity."
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated files or glob patterns to hash into the cache key."
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."
     secrets:
       script-env-secret-1-key:
         description: |
@@ -179,6 +199,30 @@ jobs:
           fetch-depth: 0
           persist-credentials: true
 
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: |
+            ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
+
       - name: Standardize repository information
         uses: rapidsai/shared-actions/rapids-github-info@main
         with:
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index 0c9ac9d0..2b552757 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -93,6 +93,26 @@ on:
         type: boolean
         required: false
         default: false
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated workspace-relative paths to persist with actions/cache."
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: "Cache-key prefix; the workflow appends its matrix identity."
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated files or glob patterns to hash into the cache key."
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."
     secrets:
       script-env-secret-1-key:
         description: |
@@ -187,6 +207,30 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: |
+            ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.DEPENDENCIES }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
+
       - name: Telemetry setup
         uses: rapidsai/shared-actions/telemetry-dispatch-setup@main
         continue-on-error: true

From 601b97416ea7aec1ff47d2d9373cb6bef817c2c5 Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 08:59:27 -0700
Subject: [PATCH 4/9] feat: add caller cache support to wheel builds

---
 .github/workflows/wheels-build.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index c4050159..5eadcc6e 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -108,6 +108,10 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
+      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
+      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
 
 defaults:
   run:
@@ -165,6 +169,22 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
+      - name: Validate caller cache configuration
+        if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
+        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
+        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+      - name: Cache caller paths
+        if: inputs.cache-paths != ''
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ inputs.cache-paths }}
+          key: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-${{ hashFiles(inputs.cache-key-files) }}
+          restore-keys: ${{ inputs.cache-key-prefix }}-${{ matrix.CUDA_VER }}-${{ matrix.PY_VER }}-${{ matrix.ARCH }}-${{ matrix.LINUX_VER }}-
+      - name: Configure caller cache environment
+        if: inputs.cache-environment != ''
+        run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
+        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
+
       - name: Standardize repository information
         uses: rapidsai/shared-actions/rapids-github-info@main
         with:

From 4879b18b90faf62a4a51f988e9d11f5ef04a5ded Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 09:14:49 -0700
Subject: [PATCH 5/9] docs: clarify caller cache inputs

---
 .github/workflows/conda-cpp-build.yaml    | 16 ++++++++++++++--
 .github/workflows/conda-cpp-tests.yaml    |  5 +++--
 .github/workflows/conda-python-build.yaml | 16 ++++++++++++++--
 .github/workflows/conda-python-tests.yaml |  8 ++++++--
 .github/workflows/wheels-build.yaml       | 16 ++++++++++++++--
 .github/workflows/wheels-test.yaml        |  8 ++++++--
 6 files changed, 57 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 43726f68..6c1d6143 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -68,10 +68,22 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
-      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required for cache saves from job containers.
       cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
       cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
-      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
+          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 6779c01f..dcedb798 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -102,8 +102,9 @@ on:
         required: false
         default: ""
         description: |
-          Newline-separated NAME=VALUE pairs exported before the caller script runs. This is useful
-          when a tool needs to be pointed at a workspace-relative cached directory.
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs. This is
+          useful when a tool needs to be pointed at a workspace-relative cached directory. Use
+          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 028116ad..474bd42e 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -78,10 +78,22 @@ on:
           or CUDA version. 'cuda_major' if the package is not dependent on
           operating system, Python minor version, or CPU architecture, but is
           dependent on CUDA major version."
-      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required for cache saves from job containers.
       cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
       cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
-      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
+          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index 1b8d5d00..0f9a7f0b 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -81,7 +81,9 @@ on:
         type: string
         required: false
         default: ""
-        description: "Newline-separated workspace-relative paths to persist with actions/cache."
+        description: |
+          Newline-separated workspace-relative paths to persist with actions/cache. Workspace-relative
+          paths are required for cache saves from job containers.
       cache-key-prefix:
         type: string
         required: false
@@ -96,7 +98,9 @@ on:
         type: string
         required: false
         default: ""
-        description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."
+        description: |
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
+          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index 5eadcc6e..78e31eb0 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -108,10 +108,22 @@ on:
           When this is non-empty, that secret's value is used in place of the default repo-level token
           anywhere that environment variable GH_TOKEN is set. This is especially useful for downloading
           artifacts from other private repos, which repo tokens do not have access to.
-      cache-paths: {type: string, required: false, default: "", description: "Newline-separated workspace-relative paths to cache."}
+      cache-paths:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required for cache saves from job containers.
       cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
       cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
-      cache-environment: {type: string, required: false, default: "", description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."}
+      cache-environment:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
+          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index 2b552757..8fdac015 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -97,7 +97,9 @@ on:
         type: string
         required: false
         default: ""
-        description: "Newline-separated workspace-relative paths to persist with actions/cache."
+        description: |
+          Newline-separated workspace-relative paths to persist with actions/cache. Workspace-relative
+          paths are required for cache saves from job containers.
       cache-key-prefix:
         type: string
         required: false
@@ -112,7 +114,9 @@ on:
         type: string
         required: false
         default: ""
-        description: "Newline-separated NAME=VALUE pairs exported before the caller script runs."
+        description: |
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
+          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |

From a2d8cc119c4bc2e70247f885139b14e72ad4aabb Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 10:28:21 -0700
Subject: [PATCH 6/9] fix: keep cache input descriptions literal

---
 .github/workflows/conda-cpp-build.yaml    | 2 +-
 .github/workflows/conda-cpp-tests.yaml    | 2 +-
 .github/workflows/conda-python-build.yaml | 2 +-
 .github/workflows/conda-python-tests.yaml | 2 +-
 .github/workflows/wheels-build.yaml       | 2 +-
 .github/workflows/wheels-test.yaml        | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 6c1d6143..f1357acb 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -83,7 +83,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index dcedb798..1478cdb0 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -104,7 +104,7 @@ on:
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs. This is
           useful when a tool needs to be pointed at a workspace-relative cached directory. Use
-          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 474bd42e..97682597 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -93,7 +93,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index 0f9a7f0b..d8d65d43 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -100,7 +100,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
-          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index 78e31eb0..ae31c73a 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -123,7 +123,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
 
 defaults:
   run:
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index 8fdac015..9af72dab 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -116,7 +116,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
-          ${{ github.workspace }}, not $GITHUB_WORKSPACE, for workspace paths.
+          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |

From 5eea38114b118194ab55855b8323c973294a468c Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 11:32:58 -0700
Subject: [PATCH 7/9] docs: standardize caller cache inputs

---
 .github/workflows/conda-cpp-build.yaml    | 29 +++++++++++++++++++----
 .github/workflows/conda-cpp-tests.yaml    | 12 ++++------
 .github/workflows/conda-python-build.yaml | 29 +++++++++++++++++++----
 .github/workflows/conda-python-tests.yaml | 13 ++++++----
 .github/workflows/wheels-build.yaml       | 29 +++++++++++++++++++----
 .github/workflows/wheels-test.yaml        | 13 ++++++----
 6 files changed, 95 insertions(+), 30 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index f1357acb..6e035adc 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -74,9 +74,22 @@ on:
         default: ""
         description: |
           Newline-separated workspace-relative files or directories to persist with actions/cache.
-          Workspace-relative paths are required for cache saves from job containers.
-      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
-      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix identity
+          so caches are not shared across incompatible runners or environments.
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
       cache-environment:
         type: string
         required: false
@@ -140,8 +153,14 @@ jobs:
           persist-credentials: true
       - name: Validate caller cache configuration
         if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
-        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
-        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
       - name: Cache caller paths
         if: inputs.cache-paths != ''
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index 1478cdb0..c5d97723 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -80,15 +80,14 @@ on:
         default: ""
         description: |
           Newline-separated workspace-relative files or directories to persist with actions/cache.
-          Workspace-relative paths are required so actions/cache can access paths created in the
-          job container during its host-side post-job save step.
-          Must be provided together with cache-key-prefix.
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
       cache-key-prefix:
         type: string
         required: false
         default: ""
         description: |
-          Prefix for the actions/cache key for cache-paths. The workflow appends its test-matrix
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix
           identity so caches are not shared across incompatible runners or environments.
       cache-key-files:
         type: string
@@ -102,9 +101,8 @@ on:
         required: false
         default: ""
         description: |
-          Newline-separated literal NAME=VALUE pairs exported before the caller script runs. This is
-          useful when a tool needs to be pointed at a workspace-relative cached directory. Use
-          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
+          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 97682597..50d39ebc 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -84,9 +84,22 @@ on:
         default: ""
         description: |
           Newline-separated workspace-relative files or directories to persist with actions/cache.
-          Workspace-relative paths are required for cache saves from job containers.
-      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
-      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix identity
+          so caches are not shared across incompatible runners or environments.
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
       cache-environment:
         type: string
         required: false
@@ -150,8 +163,14 @@ jobs:
           persist-credentials: true
       - name: Validate caller cache configuration
         if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
-        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
-        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
       - name: Cache caller paths
         if: inputs.cache-paths != ''
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index d8d65d43..f7c00314 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -82,18 +82,23 @@ on:
         required: false
         default: ""
         description: |
-          Newline-separated workspace-relative paths to persist with actions/cache. Workspace-relative
-          paths are required for cache saves from job containers.
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
       cache-key-prefix:
         type: string
         required: false
         default: ""
-        description: "Cache-key prefix; the workflow appends its matrix identity."
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix identity
+          so caches are not shared across incompatible runners or environments.
       cache-key-files:
         type: string
         required: false
         default: ""
-        description: "Newline-separated files or glob patterns to hash into the cache key."
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
       cache-environment:
         type: string
         required: false
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index ae31c73a..ba2ede2e 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -114,9 +114,22 @@ on:
         default: ""
         description: |
           Newline-separated workspace-relative files or directories to persist with actions/cache.
-          Workspace-relative paths are required for cache saves from job containers.
-      cache-key-prefix: {type: string, required: false, default: "", description: "Cache-key prefix; the workflow appends its matrix identity."}
-      cache-key-files: {type: string, required: false, default: "", description: "Newline-separated files or globs to hash into the cache key."}
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
+      cache-key-prefix:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix identity
+          so caches are not shared across incompatible runners or environments.
+      cache-key-files:
+        type: string
+        required: false
+        default: ""
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
       cache-environment:
         type: string
         required: false
@@ -183,8 +196,14 @@ jobs:
 
       - name: Validate caller cache configuration
         if: inputs.cache-paths != '' || inputs.cache-key-prefix != '' || inputs.cache-key-files != '' || inputs.cache-environment != ''
-        run: test -n "$INPUTS_CACHE_PATHS" -a -n "$INPUTS_CACHE_KEY_PREFIX"
-        env: {INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}, INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}}
+        run: |
+          if test -z "${INPUTS_CACHE_PATHS}" || test -z "${INPUTS_CACHE_KEY_PREFIX}"; then
+            echo "ERROR: cache-paths and cache-key-prefix must be provided together."
+            exit 1
+          fi
+        env:
+          INPUTS_CACHE_PATHS: ${{ inputs.cache-paths }}
+          INPUTS_CACHE_KEY_PREFIX: ${{ inputs.cache-key-prefix }}
       - name: Cache caller paths
         if: inputs.cache-paths != ''
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index 9af72dab..80fd4605 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -98,18 +98,23 @@ on:
         required: false
         default: ""
         description: |
-          Newline-separated workspace-relative paths to persist with actions/cache. Workspace-relative
-          paths are required for cache saves from job containers.
+          Newline-separated workspace-relative files or directories to persist with actions/cache.
+          Workspace-relative paths are required for cache saves from job containers. Must be provided
+          together with cache-key-prefix.
       cache-key-prefix:
         type: string
         required: false
         default: ""
-        description: "Cache-key prefix; the workflow appends its matrix identity."
+        description: |
+          Prefix for the actions/cache key for cache-paths. The workflow appends its matrix identity
+          so caches are not shared across incompatible runners or environments.
       cache-key-files:
         type: string
         required: false
         default: ""
-        description: "Newline-separated files or glob patterns to hash into the cache key."
+        description: |
+          Newline-separated files or glob patterns to hash into the cache key. Use this for caches
+          that must be saved again when relevant source or dependency files change.
       cache-environment:
         type: string
         required: false

From 3c48af8009035f3870022837d5d47a6b244029f4 Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 11:46:22 -0700
Subject: [PATCH 8/9] fix: use valid cache environment mappings

---
 .github/workflows/conda-cpp-build.yaml    | 3 ++-
 .github/workflows/conda-python-build.yaml | 3 ++-
 .github/workflows/wheels-build.yaml       | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 6e035adc..da782aba 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -171,7 +171,8 @@ jobs:
       - name: Configure caller cache environment
         if: inputs.cache-environment != ''
         run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
-        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
       - name: Standardize repository information
         env:
           RAPIDS_REPOSITORY: ${{ inputs.repo || github.repository }}
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index 50d39ebc..817ae811 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -181,7 +181,8 @@ jobs:
       - name: Configure caller cache environment
         if: inputs.cache-environment != ''
         run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
-        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
       - name: Standardize repository information
         env:
           RAPIDS_REPOSITORY: ${{ inputs.repo || github.repository }}
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index ba2ede2e..52d4841f 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -214,7 +214,8 @@ jobs:
       - name: Configure caller cache environment
         if: inputs.cache-environment != ''
         run: printf '%s\n' "$INPUTS_CACHE_ENVIRONMENT" >> "$GITHUB_ENV"
-        env: {INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}}
+        env:
+          INPUTS_CACHE_ENVIRONMENT: ${{ inputs.cache-environment }}
 
       - name: Standardize repository information
         uses: rapidsai/shared-actions/rapids-github-info@main

From b9a46824336629ec9a9f8de95b0cd6917cc3649b Mon Sep 17 00:00:00 2001
From: Vyas Ramasubramani <vyasr@nvidia.com>
Date: Tue, 8 Sep 2026 12:35:46 -0700
Subject: [PATCH 9/9] docs: clarify caller cache environment paths

---
 .github/workflows/conda-cpp-build.yaml    | 2 +-
 .github/workflows/conda-cpp-tests.yaml    | 2 +-
 .github/workflows/conda-python-build.yaml | 2 +-
 .github/workflows/conda-python-tests.yaml | 2 +-
 .github/workflows/wheels-build.yaml       | 2 +-
 .github/workflows/wheels-test.yaml        | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/conda-cpp-build.yaml b/.github/workflows/conda-cpp-build.yaml
index 44e39d59..98c353bb 100644
--- a/.github/workflows/conda-cpp-build.yaml
+++ b/.github/workflows/conda-cpp-build.yaml
@@ -96,7 +96,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          Use workspace-relative paths for directories managed by cache-paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-cpp-tests.yaml b/.github/workflows/conda-cpp-tests.yaml
index e1a374de..8ec8e2d5 100644
--- a/.github/workflows/conda-cpp-tests.yaml
+++ b/.github/workflows/conda-cpp-tests.yaml
@@ -102,7 +102,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          Use workspace-relative paths for directories managed by cache-paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/conda-python-build.yaml b/.github/workflows/conda-python-build.yaml
index b255213b..33c239b9 100644
--- a/.github/workflows/conda-python-build.yaml
+++ b/.github/workflows/conda-python-build.yaml
@@ -106,7 +106,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          Use workspace-relative paths for directories managed by cache-paths.
 
 defaults:
   run:
diff --git a/.github/workflows/conda-python-tests.yaml b/.github/workflows/conda-python-tests.yaml
index 3c939d91..f31d8c2a 100644
--- a/.github/workflows/conda-python-tests.yaml
+++ b/.github/workflows/conda-python-tests.yaml
@@ -105,7 +105,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
-          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          workspace-relative paths for directories managed by cache-paths.
     secrets:
       script-env-secret-1-key:
         description: |
diff --git a/.github/workflows/wheels-build.yaml b/.github/workflows/wheels-build.yaml
index d4460a25..f8705584 100644
--- a/.github/workflows/wheels-build.yaml
+++ b/.github/workflows/wheels-build.yaml
@@ -136,7 +136,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs.
-          Use the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          Use workspace-relative paths for directories managed by cache-paths.
 
 defaults:
   run:
diff --git a/.github/workflows/wheels-test.yaml b/.github/workflows/wheels-test.yaml
index b5e52d50..031d90ed 100644
--- a/.github/workflows/wheels-test.yaml
+++ b/.github/workflows/wheels-test.yaml
@@ -121,7 +121,7 @@ on:
         default: ""
         description: |
           Newline-separated literal NAME=VALUE pairs exported before the caller script runs. Use
-          the github.workspace context, not $GITHUB_WORKSPACE, for workspace paths.
+          workspace-relative paths for directories managed by cache-paths.
     secrets:
       script-env-secret-1-key:
         description: |