From 90a056f2f4f575b9bca6391f0e72f47b08e5623e Mon Sep 17 00:00:00 2001 From: Bernard Ladenthin Date: Sun, 25 Oct 2026 22:57:36 +0100 Subject: [PATCH] Pin bernardladenthin/actions at v1.0.3 v1.0.3 (23543c85) makes the snapshot publication survive GitHub: the Central snapshot transfer lists the jobs of older runs 50 per page and repeats GitHub reads on a server error, and a refused move of the snapshot tag deletes and re-creates it. Both failed in java-llama.cpp's first snapshot dispatch on v1.0.1 (run 40227501358). Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01VszvDmRRPP1UcwozsUMY1L --- .github/workflows/codeql.yml | 2 +- .github/workflows/dependency-submission.yml | 2 +- .github/workflows/java-tests.yml | 4 +- .github/workflows/osv-scanner.yml | 2 +- .github/workflows/publish.yml | 102 ++++++++++---------- .github/workflows/reuse.yml | 2 +- CHANGELOG.md | 6 +- TODO.md | 13 ++- 8 files changed, 70 insertions(+), 63 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 146ba415..f58243f0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -18,7 +18,7 @@ permissions: jobs: analyze: - uses: bernardladenthin/actions/.github/workflows/java-codeql.yml@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/.github/workflows/java-codeql.yml@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 permissions: actions: read contents: read diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index 33da9efb..f031c531 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -16,6 +16,6 @@ permissions: jobs: submit: - uses: bernardladenthin/actions/.github/workflows/java-maven-dependency-submission.yml@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/.github/workflows/java-maven-dependency-submission.yml@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 permissions: contents: write diff --git a/.github/workflows/java-tests.yml b/.github/workflows/java-tests.yml index b3570250..cf8af3af 100644 --- a/.github/workflows/java-tests.yml +++ b/.github/workflows/java-tests.yml @@ -43,7 +43,7 @@ jobs: with: persist-credentials: false - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: ${{ inputs.natives-artifact }} @@ -116,7 +116,7 @@ jobs: # Echo the crash logs into the job log (workspace/policies/ci-test-diagnostics.md 3.1). - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/print-crash-logs@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: modules: llama - if: failure() diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index f7695594..474ad01d 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -19,7 +19,7 @@ permissions: jobs: scan: - uses: bernardladenthin/actions/.github/workflows/osv-scanner.yml@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/.github/workflows/osv-scanner.yml@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 permissions: actions: read contents: read diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 7ff6613e..915789fc 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -120,19 +120,19 @@ jobs: with: persist-credentials: false - name: Files equal their templates in bernardladenthin/actions - uses: bernardladenthin/actions/common/check-templates@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/check-templates@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 # This repository's own build checks build on actionlib (the setup step puts it on PYTHONPATH). - - uses: bernardladenthin/actions/common/setup@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/common/setup@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build-check tests of this repository run: python3 -m unittest discover -s .github/buildcheck/tests -t .github - name: Release gate (every job gates both publish jobs, or release-gate-exemptions.txt says why) - uses: bernardladenthin/actions/common/check-release-gate@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/check-release-gate@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Run scripts parse (bash -n over every bash run script of the workflows and actions) - uses: bernardladenthin/actions/common/check-run-scripts@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/check-run-scripts@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Maven versions (warns where a dependency or plugin differs from a sibling repository) - uses: bernardladenthin/actions/java/check-maven-versions@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/check-maven-versions@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Publication wiring and release asset contract (dry run) - uses: bernardladenthin/actions/java/check-publication@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/check-publication@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 # --------------------------------------------------------------------------- # GPG signing-key preflight (standalone, no `needs:` -- runs in parallel at the @@ -148,7 +148,7 @@ jobs: runs-on: ubuntu-latest environment: maven-central steps: - - uses: bernardladenthin/actions/common/verify-gpg-key@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/common/verify-gpg-key@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: private-key: ${{ secrets.GPG_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_PASSPHRASE }} @@ -168,7 +168,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: bernardladenthin/actions/java/verify-signing-key-gradle@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/java/verify-signing-key-gradle@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: private-key: ${{ secrets.GPG_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_PASSPHRASE }} @@ -272,7 +272,7 @@ jobs: print(f'{len(files)} workflow files, {bad} that do not parse') sys.exit(1 if bad else 0) PY - - uses: bernardladenthin/actions/common/setup@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/common/setup@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Natives list check (everything that names a natives jar agrees with natives.csv) run: python3 .github/check-natives.py - name: Patch hunk check (every hunk of llama/patches/*.patch declares exactly the lines it carries) @@ -353,7 +353,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Download Linux x86_64 native library (reused, not rebuilt) uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: @@ -378,7 +378,7 @@ jobs: # Echo the crash logs into the job log (workspace/policies/ci-test-diagnostics.md 3.1). - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/print-crash-logs@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: modules: llama-langchain4j - if: failure() @@ -410,7 +410,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Download Linux x86_64 native library (reused, not rebuilt) uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: @@ -441,7 +441,7 @@ jobs: done - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/print-crash-logs@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: modules: llama-ffm - if: failure() @@ -534,7 +534,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Download Linux x86_64 native library (reused, not rebuilt) uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: @@ -561,7 +561,7 @@ jobs: # Echo the crash logs into the job log (workspace/policies/ci-test-diagnostics.md 3.1). - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/print-crash-logs@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: modules: llama-atmosphere-agent - if: failure() @@ -712,7 +712,7 @@ jobs: name: webui-generated path: ${{ github.workspace }}/llama/webui-generated/ - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: bash run: | @@ -749,7 +749,7 @@ jobs: name: webui-generated path: ${{ github.workspace }}/llama/webui-generated/ - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: bash run: | @@ -838,7 +838,7 @@ jobs: # source directory, so the stamp the archive carries is what proves the patches are in. bash .github/verify-patches-applied.sh "$RUNNER_TEMP/llama-src" - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries from the archive shell: bash run: | @@ -873,7 +873,7 @@ jobs: name: webui-generated path: ${{ github.workspace }}/llama/webui-generated/ - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: bash run: | @@ -904,7 +904,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Download shared WebUI assets uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: @@ -1040,7 +1040,7 @@ jobs: name: webui-generated path: ${{ github.workspace }}/llama/webui-generated/ - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: bash run: | @@ -1298,7 +1298,7 @@ jobs: swap-storage: false - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6 with: java-version-file: .java-version @@ -1638,7 +1638,7 @@ jobs: distribution: 'temurin' java-version-file: .java-version - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Install sccache (shared compiler cache) if: env.USE_CACHE == 'true' && env.SCCACHE_WEBDAV_TOKEN != '' continue-on-error: true @@ -1675,7 +1675,7 @@ jobs: distribution: 'temurin' java-version-file: .java-version - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Install sccache (shared compiler cache) if: env.USE_CACHE == 'true' && env.SCCACHE_WEBDAV_TOKEN != '' continue-on-error: true @@ -1711,7 +1711,7 @@ jobs: name: webui-generated path: ${{ github.workspace }}/llama/webui-generated/ - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: cmd run: | @@ -1770,7 +1770,7 @@ jobs: with: arch: x64 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Install sccache (shared compiler cache) if: env.USE_CACHE == 'true' && env.SCCACHE_WEBDAV_TOKEN != '' continue-on-error: true @@ -1820,7 +1820,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Download shared WebUI assets uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: @@ -2632,7 +2632,7 @@ jobs: distribution: 'temurin' java-version-file: .java-version - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries run: | mvn -q --no-transfer-progress -f llama/pom.xml compile @@ -2668,7 +2668,7 @@ jobs: echo "CC=gcc-14" >> "$GITHUB_ENV" echo "CXX=g++-14" >> "$GITHUB_ENV" - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries run: | mvn -q --no-transfer-progress -f llama/pom.xml compile @@ -2697,7 +2697,7 @@ jobs: with: arch: x64 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: cmd run: | @@ -2724,7 +2724,7 @@ jobs: with: arch: arm64 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Build libraries shell: cmd run: | @@ -2754,7 +2754,7 @@ jobs: distribution: 'temurin' java-version-file: .java-version - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - name: Install sccache (shared compiler cache) if: env.USE_CACHE == 'true' && env.SCCACHE_WEBDAV_TOKEN != '' continue-on-error: true @@ -2783,7 +2783,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: natives-cpu-linux-x86-64 @@ -2837,7 +2837,7 @@ jobs: # Echo the crash logs into the job log (workspace/policies/ci-test-diagnostics.md 3.1). - name: Print crash logs (on failure) if: failure() - uses: bernardladenthin/actions/java/print-crash-logs@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/print-crash-logs@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: modules: llama - if: failure() @@ -3144,7 +3144,7 @@ jobs: # dylib shipped; the test-only macOS builds (macos-26-metal, macos-15-no-metal) are named # outside the glob for that reason. - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: "natives-*" @@ -3186,7 +3186,7 @@ jobs: # module-info.class and META-INF/versions/** are skipped unconditionally because a # classpath JVM never loads them. Kept byte-identical across all four sibling repos. - name: Verify Java 8 bytecode (no class newer than major 52) - uses: bernardladenthin/actions/java/verify-bytecode@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/verify-bytecode@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: max-major: "52" paths: | @@ -3302,7 +3302,7 @@ jobs: with: persist-credentials: false - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: llama-smoke-${{ matrix.target }} @@ -3317,7 +3317,7 @@ jobs: # script is bash-only, so the Linux rows check; the Windows sets hold the same jars. - name: Verify Java 8 bytecode (no class newer than major 52) if: runner.os == 'Linux' - uses: bernardladenthin/actions/java/verify-bytecode@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/verify-bytecode@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: max-major: "52" paths: | @@ -3378,7 +3378,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: llama-atmosphere-agent-jar @@ -3406,7 +3406,7 @@ jobs: # dumb terminal instead of failing (verified on 21.0.10). Only that package is waived, so # any other class above 65 still fails the gate. - name: Verify Java 21 bytecode (no class newer than major 65) - uses: bernardladenthin/actions/java/verify-bytecode@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/verify-bytecode@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: max-major: "65" allow: | @@ -3449,7 +3449,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Display CPU Info - uses: bernardladenthin/actions/common/print-host-info@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/common/print-host-info@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: llama-smoke-macos-aarch64 @@ -3515,7 +3515,7 @@ jobs: # a release is tagged on. - name: Require a SNAPSHOT version if: inputs.publish_to_central - uses: bernardladenthin/actions/java/check-release-ref@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/check-release-ref@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: snapshot @@ -3530,7 +3530,7 @@ jobs: persist-credentials: false # The tag names exactly the project version (v1.2.3 for 1.2.3), which is no SNAPSHOT. - name: Require the release version the tag names - uses: bernardladenthin/actions/java/check-release-ref@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/check-release-ref@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: release @@ -3636,7 +3636,7 @@ jobs: MAVEN_GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }} - name: Finalize and secure the signed publication id: finalize - uses: bernardladenthin/actions/java/finalize-publication@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/finalize-publication@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: snapshot @@ -3652,7 +3652,7 @@ jobs: permissions: contents: write steps: - - uses: bernardladenthin/actions/java/publish-github@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/java/publish-github@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -3756,7 +3756,7 @@ jobs: MAVEN_GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }} - name: Finalize and secure the signed publication id: finalize - uses: bernardladenthin/actions/java/finalize-publication@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/finalize-publication@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: release @@ -3769,7 +3769,7 @@ jobs: permissions: contents: write steps: - - uses: bernardladenthin/actions/java/publish-github@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/java/publish-github@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} @@ -3794,7 +3794,7 @@ jobs: with: persist-credentials: false - name: Transfer frozen artifacts (no rebuild, signing or validation polling) - uses: bernardladenthin/actions/java/publish-central@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/publish-central@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -3815,7 +3815,7 @@ jobs: with: persist-credentials: false - name: Transfer frozen artifacts (no rebuild, signing or validation polling) - uses: bernardladenthin/actions/java/publish-central@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/java/publish-central@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} @@ -3833,7 +3833,7 @@ jobs: id-token: write attestations: write steps: - - uses: bernardladenthin/actions/java/attest-publication@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/java/attest-publication@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: snapshot assets-complete: ${{ needs.publish-snapshot.outputs.assets_complete }} @@ -3849,7 +3849,7 @@ jobs: id-token: write attestations: write steps: - - uses: bernardladenthin/actions/java/attest-publication@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + - uses: bernardladenthin/actions/java/attest-publication@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 with: channel: release assets-complete: ${{ needs.publish-release.outputs.assets_complete }} diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml index 9b719a20..ac8738a6 100644 --- a/.github/workflows/reuse.yml +++ b/.github/workflows/reuse.yml @@ -14,4 +14,4 @@ permissions: jobs: test: - uses: bernardladenthin/actions/.github/workflows/reuse.yml@40191d24afef2c99260bfacb27f269b95563e4bc # v1.0.2 + uses: bernardladenthin/actions/.github/workflows/reuse.yml@23543c8554ca9de6792a1b8d8aae0bcd001d8508 # v1.0.3 diff --git a/CHANGELOG.md b/CHANGELOG.md index 542f9287..d5cac8b6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -435,7 +435,11 @@ the first two items break every existing consumer at upgrade. translation. ### Changed -- **`bernardladenthin/actions` pinned at v1.0.2.** The release carries a documentation change only: +- **`bernardladenthin/actions` pinned at v1.0.3.** v1.0.3 makes the snapshot publication survive + GitHub: the Central snapshot transfer lists the jobs of older runs 50 per page and repeats GitHub + reads on a server error, and a refused move of the `snapshot` tag deletes and re-creates it (both + failed in java-llama.cpp's first snapshot dispatch on v1.0.1). v1.0.2 before it carried a + documentation change only: the license collector's `python3 -c` guard must use single-quoted Python string literals, because `exec-maven-plugin` drops a double quote out of an argument on Windows. This repository does not use that construct, so nothing changes here; the pin moves so all four repositories stay on the same tag. diff --git a/TODO.md b/TODO.md index fb9a7f85..c7cf12c1 100644 --- a/TODO.md +++ b/TODO.md @@ -41,11 +41,13 @@ and footer, `SECURITY.md` on `6.x`) is the pull request `release/6.0.0`. token was refused (`Resource not accessible by integration`, 403), so the `snapshot` tag and notes still name `53f307ac` (May) and nothing was pruned. Presumably the workflow token may not move a ref across commits that change `.github/workflows/` (12 files between the two); - not verified. Fix in actions v1.0.3: delete and re-create the tag, then point the release at - it. `github-release` does not move a tag (the owner's `v6.0.0` exists already). + not verified. actions v1.0.3 (pinned) deletes and re-creates the tag on that 403 and points + the release at it; whether GitHub accepts that shows only the next snapshot dispatch. + `github-release` does not move a tag (the owner's `v6.0.0` exists already). - `central-snapshot`: `superseded()` died on a GitHub API `502` listing the jobs of an older - run; a transient error, re-run the job. Fix in actions v1.0.3: retry GitHub API calls on 5xx. - `central-release` does not call it. + run, in the re-run too: with 100 per page GitHub fails that listing for large runs, with 50 + it answered every try. actions v1.0.3 (pinned) lists 50 per page and repeats GitHub reads on + 5xx. `central-release` does not call it. - [ ] **Owner: settings of bernardladenthin/actions** like the four repositories: a ruleset on `main` (pull request required, no force push, no deletion), Dependabot alerts and security updates, secret scanning; tags `v*` protected. Its releases are what every repository's Dependabot @@ -69,7 +71,8 @@ and footer, `SECURITY.md` on `6.x`) is the pull request `release/6.0.0`. build stops at its license collector against a llama snapshot older than the natives license texts. Re-run its checks once the release is on Central. - [ ] After publication: the first snapshot dispatches of BitcoinAddressFinder and streambuffer on - actions v1.0.2 (none has run on `main` since the pin bump). + actions v1.0.3 (none has run on `main` since the pin bumps), and the next one of this + repository, which shows whether the re-created `snapshot` tag is accepted. ## Delivery roadmap — remaining work