Skip to content

Commit 19ad000

Browse files
Chore(deps): bump the github-actions group across 1 directory with 29 updates
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node), [actions/cache](https://github.com/actions/cache), [tetherto/qvac/.github/actions/setup-llvm](https://github.com/tetherto/qvac), [actions/cache/restore](https://github.com/actions/cache), [actions/cache/save](https://github.com/actions/cache), [tetherto/qvac/.github/actions/setup-aws-prebuild](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/setup-vcpkg](https://github.com/tetherto/qvac), [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action), [tetherto/qvac/.github/actions/setup-build-host](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/setup-bare-tooling](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/overlay-local-fabric](https://github.com/tetherto/qvac), [softprops/action-gh-release](https://github.com/softprops/action-gh-release), [actions/github-script](https://github.com/actions/github-script), [tetherto/qvac/.github/actions/detect-fabric-stack](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/wait-and-download-fabric-prebuilds](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/run-lint-and-unit-tests](https://github.com/tetherto/qvac), [dorny/paths-filter](https://github.com/dorny/paths-filter), [tetherto/qvac/.github/actions/setup-rust-prebuild](https://github.com/tetherto/qvac), [tetherto/qvac/.github/actions/verify-prebuild-symbols](https://github.com/tetherto/qvac), [tetherto/qvac-actions/.github/workflows/public-reusable-security.yml](https://github.com/tetherto/qvac-actions), [actions/stale](https://github.com/actions/stale), [actions/setup-java](https://github.com/actions/setup-java), [android-actions/setup-android](https://github.com/android-actions/setup-android), [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) to permit the latest version. Updates `actions/checkout` from 4.2.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4.2.2...v7.0.1) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...5fda3b9) Updates `aws-actions/configure-aws-credentials` from 6.0.0 to 6.2.3 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@8df5847...e6de054) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v7) Updates `actions/cache` from 4 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Commits](actions/cache@v4...v6) Updates `tetherto/qvac/.github/actions/setup-llvm` to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](https://github.com/tetherto/qvac/commits/7e6e4c1c5894abf7475122e0ac2b47b16121dccd) Updates `actions/cache/restore` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@6682284...55cc834) Updates `actions/cache/save` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@6682284...55cc834) Updates `tetherto/qvac/.github/actions/setup-aws-prebuild` from 2e2c94d to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](2e2c94d...7e6e4c1) Updates `tetherto/qvac/.github/actions/setup-vcpkg` from 98990f3 to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](98990f3...7e6e4c1) Updates `EnricoMi/publish-unit-test-result-action` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases) - [Commits](EnricoMi/publish-unit-test-result-action@c950f6f...d0a4676) Updates `tetherto/qvac/.github/actions/setup-build-host` to 6e8d3c3 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](https://github.com/tetherto/qvac/commits/6e8d3c306a462a58589396cda428d65e015f0d8b) Updates `tetherto/qvac/.github/actions/setup-bare-tooling` from 8668ac4 to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](8668ac4...7e6e4c1) Updates `tetherto/qvac/.github/actions/overlay-local-fabric` from 0.10.0 to 10.0.0 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](6620d69...f74adc0) Updates `softprops/action-gh-release` from 2.6.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@153bb8e...3d0d988) Updates `actions/github-script` from 7.0.1 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7.0.1...3a2844b) Updates `tetherto/qvac/.github/actions/detect-fabric-stack` from 0.10.0 to 10.0.0 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](6620d69...f74adc0) Updates `tetherto/qvac/.github/actions/wait-and-download-fabric-prebuilds` from 0.10.0 to 10.0.0 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](6620d69...f74adc0) Updates `tetherto/qvac/.github/actions/run-lint-and-unit-tests` from 2e2c94d to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](2e2c94d...7e6e4c1) Updates `dorny/paths-filter` from 4.0.1 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@fbd0ab8...ceb8a2b) Updates `tetherto/qvac/.github/actions/setup-rust-prebuild` from 1225268 to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](1225268...7e6e4c1) Updates `tetherto/qvac/.github/actions/verify-prebuild-symbols` from 9809122 to 7e6e4c1 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](9809122...7e6e4c1) Updates `tetherto/qvac-actions/.github/workflows/public-reusable-security.yml` from 0.3.0 to 0.4.0 - [Commits](tetherto/qvac-actions@bbb0740...096b1cf) Updates `actions/stale` from 10.2.0 to 11.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@b5d41d4...4391f3d) Updates `actions/setup-java` from 5.2.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...b6effb0) Updates `android-actions/setup-android` from 3.2.2 to 4.0.1 - [Release notes](https://github.com/android-actions/setup-android/releases) - [Commits](android-actions/setup-android@9fc6c4e...40fd30f) Updates `dawidd6/action-download-artifact` from 8 to 24 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](dawidd6/action-download-artifact@20319c5...d63b86a) Updates `anthropics/claude-code-action` from 1.0.181 to 1.0.200 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@44423bd...24dcd50) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache/restore dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache/save dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: android-actions/setup-android dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.195 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '23' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: EnricoMi/publish-unit-test-result-action dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: tetherto/qvac-actions/.github/workflows/public-reusable-security.yml dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/detect-fabric-stack dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/overlay-local-fabric dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/run-lint-and-unit-tests dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-aws-prebuild dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-bare-tooling dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-build-host dependency-version: 6e8d3c3 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-llvm dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-rust-prebuild dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-vcpkg dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/verify-prebuild-symbols dependency-version: 181c730 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/wait-and-download-fabric-prebuilds dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 7e6e4c1 commit 19ad000

146 files changed

Lines changed: 812 additions & 812 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/workflows/benchmark-asr-ggml.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -386,7 +386,7 @@ jobs:
386386
df -h
387387
388388
- name: Checkout repository
389-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
389+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
390390
with:
391391
repository: ${{ github.event.inputs.repository || github.repository }}
392392
ref: ${{ github.event.inputs.ref || github.ref }}
@@ -399,7 +399,7 @@ jobs:
399399
sudo apt-get install -y ffmpeg build-essential cmake unzip curl
400400
401401
- name: Set up Python
402-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
402+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
403403
with:
404404
python-version: '3.12'
405405

@@ -477,7 +477,7 @@ jobs:
477477
478478
- name: Configure AWS credentials via OIDC (Arabic dataset)
479479
if: matrix.engine == 'whisper' && startsWith(github.event.inputs.dataset, 'arabic_')
480-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
480+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
481481
with:
482482
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
483483
aws-region: eu-central-1
@@ -543,7 +543,7 @@ jobs:
543543
# ---------------- parakeet-only model staging ----------------
544544
- name: Configure AWS credentials via OIDC (Parakeet GGUF)
545545
if: matrix.engine == 'parakeet'
546-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
546+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
547547
with:
548548
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
549549
aws-region: eu-central-1
@@ -1039,7 +1039,7 @@ jobs:
10391039
10401040
- name: Upload benchmark results
10411041
if: always()
1042-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
1042+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
10431043
with:
10441044
name: asr-accuracy-results-${{ matrix.model_variant }}
10451045
path: ${{ env.WORKDIR }}/benchmarks/results
@@ -1054,7 +1054,7 @@ jobs:
10541054
contents: read
10551055
steps:
10561056
- name: Checkout repository
1057-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
1057+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
10581058
with:
10591059
repository: ${{ github.event.inputs.repository || github.repository }}
10601060
ref: ${{ github.event.inputs.ref || github.ref }}
@@ -1068,7 +1068,7 @@ jobs:
10681068
merge-multiple: true
10691069

10701070
- name: Set up Python
1071-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
1071+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
10721072
with:
10731073
python-version: '3.12'
10741074

@@ -1094,7 +1094,7 @@ jobs:
10941094
cat ../results/results_summary.md >> "$GITHUB_STEP_SUMMARY"
10951095
10961096
- name: Upload consolidated summary
1097-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
1097+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
10981098
with:
10991099
name: asr-accuracy-summary
11001100
path: ${{ env.WORKDIR }}/benchmarks/results/results_summary.md

.github/workflows/benchmark-cli-serve-openai-providers.yml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -57,12 +57,12 @@ jobs:
5757
timeout-minutes: 15
5858
steps:
5959
- name: Checkout
60-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
60+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
6161
with:
6262
ref: ${{ github.sha }}
6363

6464
- name: Setup Node
65-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
65+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
6666
with:
6767
node-version: "22"
6868
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -101,7 +101,7 @@ jobs:
101101
printf 'target_sha=%s\n' "$normalized_target_sha" >> "$GITHUB_OUTPUT"
102102
103103
- name: Checkout target SHA
104-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
104+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
105105
with:
106106
ref: ${{ steps.resolve.outputs.target_sha }}
107107
persist-credentials: false
@@ -118,7 +118,7 @@ jobs:
118118
fi
119119
120120
- name: Setup Node
121-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
121+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
122122
with:
123123
node-version: "22"
124124
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -143,13 +143,13 @@ jobs:
143143
timeout-minutes: 15
144144
steps:
145145
- name: Checkout validated SHA
146-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
146+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
147147
with:
148148
ref: ${{ needs.validate-target.outputs.target_sha }}
149149
persist-credentials: false
150150

151151
- name: Setup Node
152-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
152+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
153153
with:
154154
node-version: "22"
155155
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -166,7 +166,7 @@ jobs:
166166
167167
- name: Upload coverage report
168168
if: always()
169-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
169+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
170170
with:
171171
name: openai-coverage-report-${{ github.run_id }}
172172
path: ${{ env.BENCH_DIR }}/results/coverage-preview/
@@ -190,13 +190,13 @@ jobs:
190190
working-directory: .
191191

192192
- name: Checkout validated SHA
193-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
193+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
194194
with:
195195
ref: ${{ needs.validate-target.outputs.target_sha }}
196196
persist-credentials: false
197197

198198
- name: Setup Node
199-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
199+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
200200
with:
201201
node-version: "22"
202202
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -281,7 +281,7 @@ jobs:
281281
282282
- name: Upload results
283283
if: always() && inputs.mode == 'full'
284-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
284+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
285285
with:
286286
name: serve-openai-providers-${{ github.run_id }}
287287
path: ${{ env.BENCH_DIR }}/results/

.github/workflows/benchmark-embed-llamacpp.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -206,15 +206,15 @@ jobs:
206206
free -h
207207
208208
- name: Checkout repository
209-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
209+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
210210

211211
- name: Setup Node.js
212-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
212+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
213213
with:
214214
node-version: lts/*
215215

216216
- name: Setup Python
217-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
217+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
218218
with:
219219
python-version: '3.14'
220220
cache: pip
@@ -226,15 +226,15 @@ jobs:
226226
- name: Get vcpkg cache (monorepo)
227227
if: inputs.addon_version == ''
228228
id: cache-vcpkg
229-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
229+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
230230
with:
231231
key: linux-x64-${{ hashFiles(format('{0}/vcpkg.json', env.WORKDIR), format('{0}/vcpkg-configuration.json', env.WORKDIR), format('{0}/vcpkg/ports/**', env.WORKDIR), 'vcpkg.json', 'vcpkg-configuration.json', 'vcpkg/ports/**') }}
232232
path: ${{ env.WORKDIR }}/vcpkg/cache
233233
restore-keys: linux-x64-
234234

235235
- name: Setup LLVM
236236
if: inputs.addon_version == ''
237-
uses: tetherto/qvac/.github/actions/setup-llvm@98a6a6b6e8f3866dfdd75052a4071269ce85dc41
237+
uses: tetherto/qvac/.github/actions/setup-llvm@7e6e4c1c5894abf7475122e0ac2b47b16121dccd
238238

239239
- name: Build addon from source (monorepo workdir)
240240
if: inputs.addon_version == ''
@@ -397,7 +397,7 @@ jobs:
397397
fi
398398
399399
- name: Upload benchmark results
400-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
400+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
401401
if: always()
402402
with:
403403
name: benchmark-results-${{ github.run_number }}
@@ -407,7 +407,7 @@ jobs:
407407
retention-days: 90
408408

409409
- name: Upload server logs
410-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
410+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
411411
if: failure()
412412
with:
413413
name: server-logs-${{ github.run_number }}

.github/workflows/benchmark-llm-llamacpp.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -256,15 +256,15 @@ jobs:
256256
free -h
257257
258258
- name: Checkout repository
259-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
259+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
260260

261261
- name: Setup Node.js
262-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
262+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
263263
with:
264264
node-version: lts/*
265265

266266
- name: Setup Python
267-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
267+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
268268
with:
269269
python-version: '3.14'
270270
cache: pip
@@ -277,15 +277,15 @@ jobs:
277277
- name: Get vcpkg cache
278278
if: inputs.addon_version == ''
279279
id: cache-vcpkg
280-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
280+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
281281
with:
282282
key: linux-x64-${{ hashFiles( format('{0}/vcpkg.json', inputs.workdir), format('{0}/vcpkg-configuration.json', inputs.workdir), format('{0}/vcpkg/ports/**', inputs.workdir) ) }}
283283
path: ${{ inputs.workdir }}/vcpkg/cache
284284
restore-keys: linux-x64-
285285

286286
- name: Setup LLVM
287287
if: inputs.addon_version == ''
288-
uses: tetherto/qvac/.github/actions/setup-llvm@98a6a6b6e8f3866dfdd75052a4071269ce85dc41
288+
uses: tetherto/qvac/.github/actions/setup-llvm@7e6e4c1c5894abf7475122e0ac2b47b16121dccd
289289

290290
- name: Build addon from source
291291
if: inputs.addon_version == ''
@@ -441,7 +441,7 @@ jobs:
441441
fi
442442
443443
- name: Upload benchmark results
444-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
444+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
445445
if: always()
446446
with:
447447
name: benchmark-results-${{ github.run_number }}
@@ -451,7 +451,7 @@ jobs:
451451
retention-days: 90
452452

453453
- name: Upload server logs
454-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
454+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
455455
if: failure()
456456
with:
457457
name: server-logs-${{ github.run_number }}

.github/workflows/benchmark-ocr-ggml.yml

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -109,12 +109,12 @@ jobs:
109109

110110
steps:
111111
- name: Checkout repository
112-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
112+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
113113
with:
114114
submodules: recursive
115115

116116
- name: Set up Node.js
117-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
117+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
118118
with:
119119
node-version: lts/*
120120

@@ -125,7 +125,7 @@ jobs:
125125
run: echo "VCPKG_ROOT=$VCPKG_INSTALLATION_ROOT" >> $GITHUB_ENV
126126

127127
- name: Cache vcpkg packages
128-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
128+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
129129
with:
130130
key: vcpkg-linux-x64-ocr-ggml-${{ hashFiles('packages/ocr-ggml/**/vcpkg.json', 'packages/ocr-ggml/**/CMakeLists.txt') }}
131131
path: |
@@ -135,7 +135,7 @@ jobs:
135135
restore-keys: vcpkg-linux-x64-ocr-ggml-
136136

137137
- name: Cache ccache
138-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
138+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
139139
with:
140140
key: ccache-linux-x64-ocr-ggml-${{ github.sha }}
141141
path: ~/.ccache
@@ -147,7 +147,7 @@ jobs:
147147
sudo apt-get install -y cmake wget build-essential ccache
148148
149149
- name: Setup LLVM
150-
uses: tetherto/qvac/.github/actions/setup-llvm@0c819dd1110e4902223b1f7646cc0f1be2c9bc5c
150+
uses: tetherto/qvac/.github/actions/setup-llvm@7e6e4c1c5894abf7475122e0ac2b47b16121dccd
151151

152152
- name: Setup Vulkan SDK
153153
uses: tetherto/qvac/.github/actions/setup-vulkan-sdk@0bbdca93da303a0b1634ba14a89cec085621078d
@@ -162,7 +162,7 @@ jobs:
162162
ccache -z
163163
164164
- name: Cache npm dependencies
165-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
165+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
166166
with:
167167
key: npm-ocr-ggml-${{ hashFiles('packages/ocr-ggml/package-lock.json') }}
168168
path: ~/.npm
@@ -186,7 +186,7 @@ jobs:
186186
run: ccache -s
187187

188188
- name: Upload build artifact
189-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
189+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
190190
with:
191191
name: qvac-ocr-ggml-build
192192
path: |
@@ -241,12 +241,12 @@ jobs:
241241
run: git config --global core.longpaths true
242242

243243
- name: Checkout repository
244-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
244+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
245245
with:
246246
submodules: recursive
247247

248248
- name: Set up Node.js
249-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
249+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
250250
with:
251251
node-version: 20
252252

@@ -255,7 +255,7 @@ jobs:
255255

256256
- name: Set up Python
257257
if: runner.environment == 'github-hosted'
258-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
258+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
259259
with:
260260
python-version: '3.14'
261261
cache: pip
@@ -326,7 +326,7 @@ jobs:
326326
"$HOME/.local/aws-cli/aws" --version
327327
328328
- name: Configure AWS credentials via OIDC
329-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
329+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
330330
with:
331331
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
332332
aws-region: eu-central-1
@@ -498,15 +498,15 @@ jobs:
498498
PYTHONUNBUFFERED: 1
499499

500500
- name: Upload evaluation results
501-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
501+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
502502
if: always()
503503
with:
504504
name: ocr-ggml-benchmark-results-${{ matrix.id }}
505505
path: ${{ env.PKG_DIR }}/benchmarks/quality_eval/results/*
506506
retention-days: 30
507507

508508
- name: Upload evaluation logs
509-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
509+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
510510
if: failure()
511511
with:
512512
name: ocr-ggml-benchmark-logs-${{ matrix.id }}
@@ -522,7 +522,7 @@ jobs:
522522

523523
steps:
524524
- name: Checkout summary renderer
525-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
525+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
526526
with:
527527
sparse-checkout: |
528528
packages/ocr-ggml/benchmarks/quality_eval/render_summary.py
@@ -554,7 +554,7 @@ jobs:
554554
--limit "$LIMIT" >> "$GITHUB_STEP_SUMMARY"
555555
556556
- name: Upload consolidated results
557-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
557+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
558558
with:
559559
name: ocr-ggml-benchmark-consolidated
560560
path: results

0 commit comments

Comments
 (0)