diff --git a/.github/workflows/build-ami.yml b/.github/workflows/build-ami.yml index 08405e953..3ea98efa8 100644 --- a/.github/workflows/build-ami.yml +++ b/.github/workflows/build-ami.yml @@ -40,7 +40,7 @@ jobs: version: "1.10.1" - name: configure aws credentials - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4 + uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_BUILD_AMI }} aws-secret-access-key: ${{ secrets.AWS_ACCESS_KEY_SECRET_BUILD_AMI }} @@ -71,7 +71,7 @@ jobs: - name: Slack Notification on Failure id: slack - uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 if: ${{ failure() && github.event_name == 'schedule' }} with: channel-id: 'C06GAEQJLNN' #copied from slack channel diff --git a/.github/workflows/build-vllm-image.yml b/.github/workflows/build-vllm-image.yml index 02d44b2ed..fc8abd9dd 100644 --- a/.github/workflows/build-vllm-image.yml +++ b/.github/workflows/build-vllm-image.yml @@ -25,22 +25,22 @@ jobs: echo "ON_VERSION=${ON_VERSION}">> $GITHUB_ENV - name: Set up Docker Buildx - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 - name: Login to ghcr.io - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Login to DockerHub - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Build and push - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 with: context: . file: docker/vllm/Dockerfile diff --git a/.github/workflows/cache_diffusion.yml b/.github/workflows/cache_diffusion.yml index 0a1ebc3a8..d7e0f384e 100644 --- a/.github/workflows/cache_diffusion.yml +++ b/.github/workflows/cache_diffusion.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -55,7 +55,7 @@ jobs: ] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/cache_llm.yml b/.github/workflows/cache_llm.yml index bdff5f9d6..956099003 100644 --- a/.github/workflows/cache_llm.yml +++ b/.github/workflows/cache_llm.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -57,7 +57,7 @@ jobs: ] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml index 8e7ced23d..8f257d533 100644 --- a/.github/workflows/doc-build.yml +++ b/.github/workflows/doc-build.yml @@ -25,8 +25,8 @@ jobs: PR_CLONE_URL: ${{ github.event.pull_request.head.repo.clone_url }} steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v3 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: node-version: '20' cache-dependency-path: "kit/package-lock.json" diff --git a/.github/workflows/doc-pr-build.yml b/.github/workflows/doc-pr-build.yml index ec8e28794..ee38e43ae 100644 --- a/.github/workflows/doc-pr-build.yml +++ b/.github/workflows/doc-pr-build.yml @@ -24,8 +24,8 @@ jobs: PR_CLONE_URL: ${{ github.event.pull_request.head.repo.clone_url }} steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: node-version: '20' cache-dependency-path: "kit/package-lock.json" @@ -77,7 +77,7 @@ jobs: echo ${{ env.COMMIT_SHA }} > ./commit_sha echo ${{ env.PR_NUMBER }} > ./pr_number - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: doc-build-artifact path: neuron-doc-build/ diff --git a/.github/workflows/doc-pr-upload.yml b/.github/workflows/doc-pr-upload.yml index cb8a5e925..f123f5493 100644 --- a/.github/workflows/doc-pr-upload.yml +++ b/.github/workflows/doc-pr-upload.yml @@ -8,7 +8,7 @@ on: jobs: build: - uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@9ad2de8582b56c017cb530c1165116d40433f1c6 # main + uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@b0f9a6e3b6aa912656cbda9f74896eb721d29421 # main with: package_name: optimum-neuron secrets: diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7899b0794..c0ad737d5 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -15,6 +15,6 @@ jobs: with: fetch-depth: 0 - name: Secret Scanning - uses: trufflesecurity/trufflehog@6bd2d14f7a4bc1e569fa3550efa7ec632a4fa67b # main + uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # main with: extra_args: --results=verified,unknown diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index 6ba85ee3d..ccfdde91d 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -12,7 +12,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@v10.2.0 with: stale-issue-message: 'This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.' stale-pr-message: 'This PR is stale because it has been open 15 days with no activity. Remove stale label or comment or this will be closed in 5 days.' diff --git a/.github/workflows/test_cpu_only.yml b/.github/workflows/test_cpu_only.yml index ec75bd231..88e494426 100644 --- a/.github/workflows/test_cpu_only.yml +++ b/.github/workflows/test_cpu_only.yml @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -70,7 +70,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_diffusers.yml b/.github/workflows/test_inf2_diffusers.yml index 59748ccc3..5936be104 100644 --- a/.github/workflows/test_inf2_diffusers.yml +++ b/.github/workflows/test_inf2_diffusers.yml @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -55,7 +55,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Install cv2 dependencies @@ -88,7 +88,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Install cv2 dependencies diff --git a/.github/workflows/test_inf2_export.yml b/.github/workflows/test_inf2_export.yml index f07c9022e..540d700bb 100644 --- a/.github/workflows/test_inf2_export.yml +++ b/.github/workflows/test_inf2_export.yml @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -63,7 +63,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_llm.yml b/.github/workflows/test_inf2_llm.yml index 124f00954..91f5e37af 100644 --- a/.github/workflows/test_inf2_llm.yml +++ b/.github/workflows/test_inf2_llm.yml @@ -70,7 +70,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -83,7 +83,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Export test models uses: ./.github/actions/export_test_models with: @@ -96,7 +96,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment @@ -116,7 +116,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment @@ -151,7 +151,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_seq2seq.yml b/.github/workflows/test_inf2_seq2seq.yml index c75e9fae0..1e4a288be 100644 --- a/.github/workflows/test_inf2_seq2seq.yml +++ b/.github/workflows/test_inf2_seq2seq.yml @@ -38,7 +38,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -51,7 +51,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_slow.yml b/.github/workflows/test_inf2_slow.yml index 0edf03bbc..7afb06903 100644 --- a/.github/workflows/test_inf2_slow.yml +++ b/.github/workflows/test_inf2_slow.yml @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -63,7 +63,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_transformers.yml b/.github/workflows/test_inf2_transformers.yml index 6a09319dd..d283c068a 100644 --- a/.github/workflows/test_inf2_transformers.yml +++ b/.github/workflows/test_inf2_transformers.yml @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -61,7 +61,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment @@ -94,7 +94,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_inf2_vllm.yml b/.github/workflows/test_inf2_vllm.yml index 506702087..fbf99727b 100644 --- a/.github/workflows/test_inf2_vllm.yml +++ b/.github/workflows/test_inf2_vllm.yml @@ -72,7 +72,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run sanity check uses: ./.github/actions/sanity-check with: @@ -85,7 +85,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Export test models uses: ./.github/actions/export_test_models with: @@ -99,7 +99,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment @@ -127,7 +127,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment @@ -149,7 +149,7 @@ jobs: group: aws-inf2-8xlarge steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment diff --git a/.github/workflows/test_sagemaker.yml b/.github/workflows/test_sagemaker.yml index 01ae297bf..b60f3f1e3 100644 --- a/.github/workflows/test_sagemaker.yml +++ b/.github/workflows/test_sagemaker.yml @@ -24,13 +24,13 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install Neuronx runtime uses: ./.github/actions/install_neuronx_runtime - name: Setup virtual environment uses: ./.github/actions/setup_venv - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v6 with: role-to-assume: ${{ secrets.AWS_ASSUME_SANDBOX_GITHUB_CI_PUSH_ECR}} aws-region: us-east-1