Ryan Kuester
27b78c9fd1
ci(pypi): file an issue on wheel build failure ( #3669 )
...
* ci(pypi): pin checkout action to a commit hash
Pin the checkout action in the PyPI build workflow to a commit hash
rather than a version tag. CI runs the zizmor scanner on any
workflow file a PR changes, and zizmor requires actions to be
pinned to hashes.
* ci(pypi): file an issue on wheel build failure
File an issue when the nightly PyPI build fails, using the reusable
reporting workflow the platform test workflows already call. The
nightly build broke in February and failed daily for six months
before anyone noticed, because nothing reported the failures.
2026-08-19 20:42:47 +00:00
Esun Kim
ca0b8b1308
Added allow-unsafe-pr-checkout: true ( #3615 )
2026-07-01 13:59:22 -07:00
Arpit Jain
5fa112687b
ci: declare workflow-level contents: read on 3 workflows ( #3558 )
...
Pins the default GITHUB_TOKEN to contents: read on the workflows in
.github/workflows/ that don't call a GitHub API beyond the initial
checkout. The other workflows in this directory are left implicit
because they need write scopes that a maintainer is better placed
to declare.
Motivation: CVE-2025-30066 (March 2025 tj-actions/changed-files
compromise) exfiltrated GITHUB_TOKEN from workflow logs. Per-workflow
caps bound runtime authority irrespective of repo or org default,
give drift protection if the default ever widens, and are credited
per-file by the OpenSSF Scorecard Token-Permissions check.
YAML validated locally with yaml.safe_load.
Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
2026-06-30 16:47:20 -07:00
dependabot[bot]
5f54b5be28
Bump actions/checkout from 6 to 7 ( #3609 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 22:26:08 +00:00
Esun Kim
ac2c346736
Fix ( #3567 )
2026-05-21 14:53:37 -07:00
Esun Kim
a9952453ab
Improve Check TfLite Files ( #3566 )
2026-05-21 14:40:16 -07:00
Esun Kim
257ca0f8d0
Removed //pythons from windows/bazel ( #3476 )
2026-02-12 13:36:39 -08:00
Esun Kim
5b1f1007d0
Simplfied ( #3475 )
2026-02-12 13:25:47 -08:00
Esun Kim
13cabf14a0
One more fix for Windows Bazel ( #3474 )
2026-02-12 13:06:24 -08:00
Esun Kim
49126dfa28
Another windows fix ( #3473 )
2026-02-12 11:36:06 -08:00
Esun Kim
0349d05e45
Hmm ( #3472 )
2026-02-12 11:19:58 -08:00
Esun Kim
626c337c8e
Fixed again ( #3471 )
2026-02-12 11:04:57 -08:00
Esun Kim
9759b03620
Fix the test ( #3469 )
2026-02-12 10:56:21 -08:00
Esun Kim
3c27730240
Ignore non-zero exit code for bazel query in windows tests ( #3468 )
2026-02-12 10:39:34 -08:00
Esun Kim
c981fbabc4
Exempt TFLM-bot and dependabot from BUG= check ( #3467 )
2026-02-12 10:30:30 -08:00
Esun Kim
088df4ca7f
Let's be picky on Windows Bazel ( #3465 )
2026-02-12 10:20:47 -08:00
Esun Kim
1e8997af71
[CI] Cache for Bazel on Linux ( #3464 )
...
* +build:windows_ci --build_python_zip=false
* Used cache for bazel CI
2026-02-12 10:06:52 -08:00
Esun Kim
e16b58697d
More windows ( #3459 )
2026-02-12 08:44:10 -08:00
Esun Kim
df1992c680
Windows tmp ( #3457 )
2026-02-11 21:41:11 -08:00
Esun Kim
ca24d40fc7
[CI] Windows .bazelrc ( #3456 )
...
* bazelrc startup
* Windows Bazel
2026-02-11 20:52:38 -08:00
Esun Kim
3210fee460
symlinks ( #3454 )
2026-02-11 20:06:01 -08:00
Esun Kim
8ae46c56fb
[CI] Windows CI ( #3453 )
...
* Test bazel cache with hosted
* Windows...
2026-02-11 18:01:27 -08:00
Esun Kim
eb51847198
Test bazel cache with hosted ( #3452 )
2026-02-11 16:26:11 -08:00
Esun Kim
aa40ee75fb
CI has 1 hour timeout ( #3451 )
2026-02-11 16:07:28 -08:00
dependabot[bot]
d87fa35a95
Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ( #3416 )
...
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 23:24:44 +00:00
dependabot[bot]
58181a4261
Bump actions/github-script from 7 to 8 ( #3431 )
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 23:22:55 +00:00
Esun Kim
0e6f7b32a0
More ( #3445 )
2026-02-10 15:19:03 -08:00
Esun Kim
a553df6a50
test_makefile on linux-x86-n2-16 ( #3444 )
2026-02-10 15:14:25 -08:00
Esun Kim
7573db0852
Let's use linux-x86-n2-16 ( #3443 )
2026-02-10 13:55:58 -08:00
Esun Kim
c0564e46c5
[CI] More fixes ( #3442 )
...
* Fixed micro_allocator.cc
* Removed needs-mmap-rnd usage
* Disable python tests under bazel
* Removed -Werror
2026-02-10 13:54:49 -08:00
Esun Kim
9bf8b1885b
[CI] Docker 0.6.7 ( #3441 )
...
* git config --system --add safe.directory
* 0.6.7
2026-02-10 13:22:40 -08:00
Esun Kim
b1f3d29a0b
Fix docker versions ( #3438 )
2026-02-10 10:58:48 -08:00
Esun Kim
b4bb8128b6
[CI] Docker test fixes ( #3436 )
...
* Fix Python module shadowing in Docker CI
Applies legacy_create_init = False to Python rules in BUILD files to prevent Bazel from automatically generating __init__.py files. This prevents the root 'signal/' directory (which contains C++ kernels but no Python source) from being treated as a Python package, which was shadowing the standard library 'signal' module and causing psutil failures in the tflm-ci Docker container.
* Fix directory path in Docker workflows
2026-02-10 10:51:10 -08:00
Esun Kim
a45021ad30
[CI] Docker 66 ( #3437 )
...
* Docker 0.6.6.
* Updated docker images to 0.6.6
2026-02-10 10:50:54 -08:00
Esun Kim
10b962718f
More dockers to come ( #3434 )
2026-02-10 10:36:45 -08:00
Esun Kim
4fd5d1fbae
Bazel tests in Docker ( #3433 )
2026-02-10 10:04:45 -08:00
Esun Kim
3b638dd751
pr_test fix ( #3432 )
2026-02-09 23:28:45 -08:00
Esun Kim
9ff3781bea
Removed pip from dependabot ( #3430 )
2026-02-09 23:17:26 -08:00
Esun Kim
483cdebc61
[CI] Added missing permission ( #3429 )
...
* Added permission
* Missing permission
2026-02-09 23:13:18 -08:00
Esun Kim
1fc8543594
Added permission ( #3428 )
2026-02-09 23:10:07 -08:00
Esun Kim
4b55bf790e
[CI] Updated the doc & labler. ( #3427 )
...
* Updated CI 2
* Updated
* Updated 2
2026-02-09 23:07:36 -08:00
Esun Kim
1678ff9a9e
Gated ( #3426 )
2026-02-09 22:51:55 -08:00
Esun Kim
71229c4dd3
[CI] No token in check_tflite_files.sh ( #3425 )
...
* Simply tflite
* Fix
2026-02-09 17:55:54 -08:00
Esun Kim
43b026a818
Removing labels for untrsuted PRs ( #3424 )
2026-02-09 14:42:24 -08:00
Esun Kim
a69ad532ae
Updated issue_on_error ( #3422 )
2026-02-09 13:27:34 -08:00
Esun Kim
6941b2bfa8
Updated stale handler ( #3414 )
2026-02-09 13:14:35 -08:00
Esun Kim
1f249d1310
First dependabot ( #3415 )
2026-02-09 11:26:53 -08:00
Esun Kim
6ce10eed9a
Windows... ( #3411 )
2026-02-06 09:54:42 -08:00
Esun Kim
4c4b83b454
SImplified ( #3410 )
2026-02-06 09:49:08 -08:00
Esun Kim
0d2a6041df
Real work ( #3409 )
2026-02-06 09:28:54 -08:00
