Commit graph

265 commits

Author SHA1 Message Date
dependabot[bot]
d5d27c829c
Bump actions/setup-python from 6 to 7
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-23 01:13:22 +00:00
Esun Kim
ca0b8b1308
Added allow-unsafe-pr-checkout: true (#3615) 2026-07-01 13:59:22 -07:00
Arpit Jain
5fa112687b
ci: declare workflow-level contents: read on 3 workflows (#3558)
Pins the default GITHUB_TOKEN to contents: read on the workflows in
.github/workflows/ that don't call a GitHub API beyond the initial
checkout. The other workflows in this directory are left implicit
because they need write scopes that a maintainer is better placed
to declare.

Motivation: CVE-2025-30066 (March 2025 tj-actions/changed-files
compromise) exfiltrated GITHUB_TOKEN from workflow logs. Per-workflow
caps bound runtime authority irrespective of repo or org default,
give drift protection if the default ever widens, and are credited
per-file by the OpenSSF Scorecard Token-Permissions check.

YAML validated locally with yaml.safe_load.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
2026-06-30 16:47:20 -07:00
dependabot[bot]
5f54b5be28
Bump actions/checkout from 6 to 7 (#3609)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 22:26:08 +00:00
Esun Kim
ac2c346736
Fix (#3567) 2026-05-21 14:53:37 -07:00
Esun Kim
a9952453ab
Improve Check TfLite Files (#3566) 2026-05-21 14:40:16 -07:00
Esun Kim
257ca0f8d0
Removed //pythons from windows/bazel (#3476) 2026-02-12 13:36:39 -08:00
Esun Kim
5b1f1007d0
Simplfied (#3475) 2026-02-12 13:25:47 -08:00
Esun Kim
13cabf14a0
One more fix for Windows Bazel (#3474) 2026-02-12 13:06:24 -08:00
Esun Kim
49126dfa28
Another windows fix (#3473) 2026-02-12 11:36:06 -08:00
Esun Kim
0349d05e45
Hmm (#3472) 2026-02-12 11:19:58 -08:00
Esun Kim
626c337c8e
Fixed again (#3471) 2026-02-12 11:04:57 -08:00
Esun Kim
9759b03620
Fix the test (#3469) 2026-02-12 10:56:21 -08:00
Esun Kim
3c27730240
Ignore non-zero exit code for bazel query in windows tests (#3468) 2026-02-12 10:39:34 -08:00
Esun Kim
c981fbabc4 Exempt TFLM-bot and dependabot from BUG= check (#3467) 2026-02-12 10:30:30 -08:00
Esun Kim
088df4ca7f
Let's be picky on Windows Bazel (#3465) 2026-02-12 10:20:47 -08:00
Esun Kim
1e8997af71
[CI] Cache for Bazel on Linux (#3464)
* +build:windows_ci --build_python_zip=false

* Used cache for bazel CI
2026-02-12 10:06:52 -08:00
Esun Kim
e16b58697d
More windows (#3459) 2026-02-12 08:44:10 -08:00
Esun Kim
df1992c680
Windows tmp (#3457) 2026-02-11 21:41:11 -08:00
Esun Kim
ca24d40fc7
[CI] Windows .bazelrc (#3456)
* bazelrc startup

* Windows Bazel
2026-02-11 20:52:38 -08:00
Esun Kim
3210fee460
symlinks (#3454) 2026-02-11 20:06:01 -08:00
Esun Kim
8ae46c56fb
[CI] Windows CI (#3453)
* Test bazel cache with hosted

* Windows...
2026-02-11 18:01:27 -08:00
Esun Kim
eb51847198
Test bazel cache with hosted (#3452) 2026-02-11 16:26:11 -08:00
Esun Kim
aa40ee75fb
CI has 1 hour timeout (#3451) 2026-02-11 16:07:28 -08:00
dependabot[bot]
d87fa35a95
Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#3416)
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 23:24:44 +00:00
dependabot[bot]
58181a4261
Bump actions/github-script from 7 to 8 (#3431)
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 23:22:55 +00:00
Esun Kim
0e6f7b32a0
More (#3445) 2026-02-10 15:19:03 -08:00
Esun Kim
a553df6a50
test_makefile on linux-x86-n2-16 (#3444) 2026-02-10 15:14:25 -08:00
Esun Kim
7573db0852
Let's use linux-x86-n2-16 (#3443) 2026-02-10 13:55:58 -08:00
Esun Kim
c0564e46c5
[CI] More fixes (#3442)
* Fixed micro_allocator.cc

* Removed needs-mmap-rnd usage

* Disable python tests under bazel

* Removed -Werror
2026-02-10 13:54:49 -08:00
Esun Kim
9bf8b1885b
[CI] Docker 0.6.7 (#3441)
* git config --system --add safe.directory

* 0.6.7
2026-02-10 13:22:40 -08:00
Esun Kim
b1f3d29a0b
Fix docker versions (#3438) 2026-02-10 10:58:48 -08:00
Esun Kim
b4bb8128b6
[CI] Docker test fixes (#3436)
* Fix Python module shadowing in Docker CI

Applies legacy_create_init = False to Python rules in BUILD files to prevent Bazel from automatically generating __init__.py files. This prevents the root 'signal/' directory (which contains C++ kernels but no Python source) from being treated as a Python package, which was shadowing the standard library 'signal' module and causing psutil failures in the tflm-ci Docker container.

* Fix directory path in Docker workflows
2026-02-10 10:51:10 -08:00
Esun Kim
a45021ad30
[CI] Docker 66 (#3437)
* Docker 0.6.6.

* Updated docker images to 0.6.6
2026-02-10 10:50:54 -08:00
Esun Kim
10b962718f
More dockers to come (#3434) 2026-02-10 10:36:45 -08:00
Esun Kim
4fd5d1fbae
Bazel tests in Docker (#3433) 2026-02-10 10:04:45 -08:00
Esun Kim
3b638dd751
pr_test fix (#3432) 2026-02-09 23:28:45 -08:00
Esun Kim
9ff3781bea
Removed pip from dependabot (#3430) 2026-02-09 23:17:26 -08:00
Esun Kim
483cdebc61
[CI] Added missing permission (#3429)
* Added permission

* Missing permission
2026-02-09 23:13:18 -08:00
Esun Kim
1fc8543594
Added permission (#3428) 2026-02-09 23:10:07 -08:00
Esun Kim
4b55bf790e
[CI] Updated the doc & labler. (#3427)
* Updated CI 2

* Updated

* Updated 2
2026-02-09 23:07:36 -08:00
Esun Kim
1678ff9a9e
Gated (#3426) 2026-02-09 22:51:55 -08:00
Esun Kim
71229c4dd3
[CI] No token in check_tflite_files.sh (#3425)
* Simply tflite

* Fix
2026-02-09 17:55:54 -08:00
Esun Kim
43b026a818
Removing labels for untrsuted PRs (#3424) 2026-02-09 14:42:24 -08:00
Esun Kim
a69ad532ae
Updated issue_on_error (#3422) 2026-02-09 13:27:34 -08:00
Esun Kim
6941b2bfa8
Updated stale handler (#3414) 2026-02-09 13:14:35 -08:00
Esun Kim
1f249d1310
First dependabot (#3415) 2026-02-09 11:26:53 -08:00
Esun Kim
6ce10eed9a
Windows... (#3411) 2026-02-06 09:54:42 -08:00
Esun Kim
4c4b83b454
SImplified (#3410) 2026-02-06 09:49:08 -08:00
Esun Kim
0d2a6041df
Real work (#3409) 2026-02-06 09:28:54 -08:00