Skip to content

Commit 086ed53

Browse files
Security fixes 2025ww51 (#223)
* Bump actions/setup-python from 6.0.0 to 6.1.0 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.0.0 to 6.1.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@e797f83...83679a8) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Bump github/codeql-action from 4.31.4 to 4.31.6 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.4 to 4.31.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e12f017...fe4161a) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Bump openvinotoolkit/openvino from 2025.3.0 to 2025.4.0 Bumps [openvinotoolkit/openvino](https://github.com/openvinotoolkit/openvino) from 2025.3.0 to 2025.4.0. - [Release notes](https://github.com/openvinotoolkit/openvino/releases) - [Changelog](https://github.com/openvinotoolkit/openvino/blob/master/docs/RELEASE.MD) - [Commits](openvinotoolkit/openvino@4452628...7a97517) --- updated-dependencies: - dependency-name: openvinotoolkit/openvino dependency-version: 2025.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Update pip deps * Update PR template * Bump actions/checkout from 5.0.1 to 6.0.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@93cb6ef...1af3b93) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent f1e04ef commit 086ed53

File tree

12 files changed

+98
-93
lines changed

12 files changed

+98
-93
lines changed

.github/PULL_REQUEST_TEMPLATE.md

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,16 @@
11
## Summary
22
> Please add a short but exhaustive summary why you think your pull request is useful
33
4+
## JIRA ticket
5+
6+
* E#xxxxx
7+
48
## Target Platform For Release Notes
59
> Aids the generation of release notes
610
711
- [ ] NPU37XX
812
- [ ] NPU40XX
13+
- [ ] NPU50XX
914
- [ ] NONE (Not included in release notes)
1015

1116
## Classification of this Pull Request
@@ -14,10 +19,7 @@
1419
- [ ] BUG
1520
- [ ] Feature
1621

17-
## Code Review Survey (Copy and Complete in your code review)
22+
## Related PRs
23+
> Please add links to related PRs (if any) and a small note why you depend on it
1824
19-
- number_minutes_spent_on_review[0]
20-
- number_p1_defects_found[0]
21-
- number_p2_defects_found[0]
22-
- number_p3_defects_found[0]
23-
- number_p4_defects_found[0]
25+
* PR-xxx

.github/actions/compile-models/requirements.in

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
--extra-index-url https://download.pytorch.org/whl/cpu
22

33
# Core
4-
transformers>=4.57.1
4+
transformers>=4.57.3
55
torch==2.8.0+cpu
66
torchvision==0.23.0+cpu
7-
onnx>=1.19.1
7+
onnx>=1.20.0
88
onnxruntime>=1.23.1
99
onnxruntime-tools>=1.7.0
1010

@@ -16,4 +16,6 @@ hf-xet>=1.2.0
1616
pillow>=12.0.0
1717
requests>=2.32.5
1818
tqdm>=4.67.1
19-
accelerate>=1.11.0
19+
accelerate>=1.12.0
20+
urllib3>=2.6.0
21+
filelock>=3.20.1

.github/actions/compile-models/requirements.txt

Lines changed: 40 additions & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@
66
#
77
--extra-index-url https://download.pytorch.org/whl/cpu
88

9-
accelerate==1.11.0 \
10-
--hash=sha256:a628fa6beb069b8e549460fc449135d5bd8d73e7a11fd09f0bc9fc4ace7f06f1 \
11-
--hash=sha256:bb1caf2597b4cd632b917b5000c591d10730bb024a79746f1ee205bba80bd229
9+
accelerate==1.12.0 \
10+
--hash=sha256:3e2091cd341423207e2f084a6654b1efcd250dc326f2a37d6dde446e07cabb11 \
11+
--hash=sha256:70988c352feb481887077d2ab845125024b2a137a5090d6d7a32b57d03a45df6
1212
# via -r .github/actions/compile-models/requirements.in
1313
certifi==2025.4.26 \
1414
--hash=sha256:0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6 \
@@ -118,10 +118,11 @@ coloredlogs==15.0.1 \
118118
# via
119119
# onnxruntime
120120
# onnxruntime-tools
121-
filelock==3.18.0 \
122-
--hash=sha256:adbc88eabb99d2fec8c9c1b229b171f18afa655400173ddc653d5d01501fb9f2 \
123-
--hash=sha256:c401f4f8377c4464e6db25fff06205fd89bdd83b65eb0488ed1b160f780e21de
121+
filelock==3.20.1 \
122+
--hash=sha256:15d9e9a67306188a44baa72f569d2bfd803076269365fdea0934385da4dc361a \
123+
--hash=sha256:b8360948b351b80f420878d8516519a2204b07aefcdcfd24912a5d33127f188c
124124
# via
125+
# -r .github/actions/compile-models/requirements.in
125126
# huggingface-hub
126127
# torch
127128
# transformers
@@ -351,41 +352,30 @@ numpy==2.2.5 \
351352
# onnxruntime-tools
352353
# torchvision
353354
# transformers
354-
onnx==1.19.1 \
355-
--hash=sha256:01b292a4d0b197c45d8184545bbc8ae1df83466341b604187c1b05902cb9c920 \
356-
--hash=sha256:07dcd4d83584eb4bf8f21ac04c82643712e5e93ac2a0ed10121ec123cb127e1e \
357-
--hash=sha256:0bdbb676e3722bd32f9227c465d552689f49086f986a696419d865cb4e70b989 \
358-
--hash=sha256:1346853df5c1e3ebedb2e794cf2a51e0f33759affd655524864ccbcddad7035b \
359-
--hash=sha256:17aaf5832126de0a5197a5864e4f09a764dd7681d3035135547959b4b6b77a09 \
360-
--hash=sha256:17c215b1c0f20fe93b4cbe62668247c1d2294b9bc7f6be0ca9ced28e980c07b7 \
361-
--hash=sha256:1839af08ab4a909e4af936b8149c27f8c64b96138981024e251906e0539d8bf9 \
362-
--hash=sha256:1975860c3e720db25d37f1619976582828264bdcc64fa7511c321ac4fc01add3 \
363-
--hash=sha256:1c0498c00db05fcdb3426697d330dcecc3f60020015065e2c76fa795f2c9a605 \
364-
--hash=sha256:1fb8f79de7f3920bb82b537f3c6ac70c0ce59f600471d9c3eed2b5f8b079b748 \
365-
--hash=sha256:2980de39df1f5afd005a8aeb0b35703dbbab8e4012bcec1634febbdfb8654da8 \
366-
--hash=sha256:2d69c280c0e665b7f923f499243b9bb84fe97970b7a4668afa0032045de602c8 \
367-
--hash=sha256:3612193a89ddbce5c4e86150869b9258780a82fb8c4ca197723a4460178a6ce9 \
368-
--hash=sha256:4650d053c7c26e40a080b7378d61446958d6da4e217e1d0d422eb9264f8064ae \
369-
--hash=sha256:485d3674d50d789e0ee72fa6f6e174ab81cb14c772d594f992141bd744729d8a \
370-
--hash=sha256:4e5f938c68c4dffd3e19e4fd76eb98d298174eb5ebc09319cdd0ec5fe50050dc \
371-
--hash=sha256:5f6274abf0fd74e80e78ecbb44bd44509409634525c89a9b38276c8af47dc0a2 \
372-
--hash=sha256:638bc56ff1a5718f7441e887aeb4e450f37a81c6eac482040381b140bd9ba601 \
373-
--hash=sha256:65eee353a51b4e4ca3e797784661e5376e2b209f17557e04921eac9166a8752e \
374-
--hash=sha256:6c2fd2f744e7a3880ad0c262efa2edf6d965d0bd02b8f327ec516ad4cb0f2f15 \
375-
--hash=sha256:7343250cc5276cf439fe623b8f92e11cf0d1eebc733ae4a8b2e86903bb72ae68 \
376-
--hash=sha256:737524d6eb3907d3499ea459c6f01c5a96278bb3a0f2ff8ae04786fb5d7f1ed5 \
377-
--hash=sha256:86e20a5984b017feeef2dbf4ceff1c7c161ab9423254968dd77d3696c38691d0 \
378-
--hash=sha256:92b9d2dece41cc84213dbbfd1acbc2a28c27108c53bd28ddb6d1043fbfcbd2d5 \
379-
--hash=sha256:9807d0e181f6070ee3a6276166acdc571575d1bd522fc7e89dba16fd6e7ffed9 \
380-
--hash=sha256:a2e51118c3db00b169cac8170d94d832c2ffe80935563ced596182d4baa6fcb4 \
381-
--hash=sha256:b6ee83e6929d75005482d9f304c502ac7c9b8d6db153aa6b484dae74d0f28570 \
382-
--hash=sha256:bc7e2e4e163e679721e547958b5a7db875bf822cad371b7c1304aa4401a7c7a4 \
383-
--hash=sha256:bf35f7abc7096df2bb0171102fa7d89ba4a5f5407e3b352ee27bb5e1867e0f19 \
384-
--hash=sha256:c0b1a2b6bb19a0fc9f5de7661a547136d082c03c169a5215e18ff3ececd2a82f \
385-
--hash=sha256:c3bc87e38b53554b1fc9ef7b275c81c6f5c93c90a91935bb0aa8d4d498a6d48e \
386-
--hash=sha256:c8d9c467f0f29993c12f330736af87972f30adb8329b515f39d63a0db929cb2c \
387-
--hash=sha256:cc81f200ed98bd0ced53c3f0fdb8164a42e2b8582a1fa9cb8aeb01b64367c7f4 \
388-
--hash=sha256:e41496f400afb980ec643d80d5164753a88a85234fa5c06afdeebc8b7d1ec252
355+
onnx==1.20.0 \
356+
--hash=sha256:00dc8ae2c7b283f79623961f450b5515bd2c4b47a7027e7a1374ba49cef27768 \
357+
--hash=sha256:02e0d72ab09a983fce46686b155a5049898558d9f3bc6e8515120d6c40666318 \
358+
--hash=sha256:1a93ec69996b4556062d552ed1aa0671978cfd3c17a40bf4c89a1ae169c6a4ad \
359+
--hash=sha256:1d3d0308e2c194f4b782f51e78461b567fac8ce6871c0cf5452ede261683cc8f \
360+
--hash=sha256:1ecca1f963d69e002c03000f15844f8cac3b6d7b6639a934e73571ee02d59c35 \
361+
--hash=sha256:2241c85fdaa25a66565fcd1d327c7bcd8f55165420ebaee1e9563c3b9bf961c9 \
362+
--hash=sha256:259b05758d41645f5545c09f887187662b350d40db8d707c33c94a4f398e1733 \
363+
--hash=sha256:2d25a9e1fde44bc69988e50e2211f62d6afcd01b0fd6dfd23429fd978a35d32f \
364+
--hash=sha256:31efe37d7d1d659091f34ddd6a31780334acf7c624176832db9a0a8ececa8fb5 \
365+
--hash=sha256:392ca68b34b97e172d33b507e1e7bfdf2eea96603e6e7ff109895b82ff009dc7 \
366+
--hash=sha256:3a6de7dda77926c323b0e5a830dc9c2866ce350c1901229e193be1003a076c25 \
367+
--hash=sha256:3e941d0f3edd57e1d63e2562c74aec2803ead5b965e76ccc3d2b2bd4ae0ea054 \
368+
--hash=sha256:6930ed7795912c4298ec8642b33c99c51c026a57edf17788b8451fe22d11e674 \
369+
--hash=sha256:71177f8fd5c0dd90697bc281f5035f73707bdac83257a5c54d74403a1100ace9 \
370+
--hash=sha256:7646e700c0a53770a86d5a9a582999a625a3173c4323635960aec3cba8441c6a \
371+
--hash=sha256:7e706470f8b731af6d0347c4f01b8e0e1810855d0c71c467066a5bd7fa21704b \
372+
--hash=sha256:9d1a4e02148b2a7a4b82796d0ecdb6e49ba7abd34bb5a9de22af86aad556fb76 \
373+
--hash=sha256:afc4cf83ce5d547ebfbb276dae8eb0ec836254a8698d462b4ba5f51e717fd1ae \
374+
--hash=sha256:d0bdfd22fe92b87bf98424335ec1191ed79b08cd0f57fe396fab558b83b2c868 \
375+
--hash=sha256:d75da05e743eb9a11ff155a775cae5745e71f1cd0ca26402881b8f20e8d6e449 \
376+
--hash=sha256:ee46cdc5abd851a007a4be81ee53e0e303cf9a0e46d74231d5d361333a1c9411 \
377+
--hash=sha256:f62978ecfb8f320faba6704abd20253a5a79aacc4e5d39a9c061dd63d3b7574f \
378+
--hash=sha256:f8424c95491de38ecc280f7d467b298cb0b7cdeb1cd892eb9b4b9541c00a600e
389379
# via
390380
# -r .github/actions/compile-models/requirements.in
391381
# onnxruntime-tools
@@ -815,9 +805,9 @@ tqdm==4.67.1 \
815805
# -r .github/actions/compile-models/requirements.in
816806
# huggingface-hub
817807
# transformers
818-
transformers==4.57.1 \
819-
--hash=sha256:b10d05da8fa67dc41644dbbf9bc45a44cb86ae33da6f9295f5fbf5b7890bd267 \
820-
--hash=sha256:f06c837959196c75039809636cd964b959f6604b75b8eeec6fdfc0440b89cc55
808+
transformers==4.57.3 \
809+
--hash=sha256:c77d353a4851b1880191603d36acb313411d3577f6e2897814f333841f7003f4 \
810+
--hash=sha256:df4945029aaddd7c09eec5cad851f30662f8bd1746721b34cc031d70c65afebc
821811
# via -r .github/actions/compile-models/requirements.in
822812
typing-extensions==4.13.2 \
823813
--hash=sha256:a439e7c04b49fec3e5d3e2beaa21755cadbbdc391694e28ccdd36ca4a1408f8c \
@@ -826,10 +816,12 @@ typing-extensions==4.13.2 \
826816
# huggingface-hub
827817
# onnx
828818
# torch
829-
urllib3==2.5.0 \
830-
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
831-
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc
832-
# via requests
819+
urllib3==2.6.2 \
820+
--hash=sha256:016f9c98bb7e98085cb2b4b17b87d2c702975664e4f060c6532e64d1c1a5e797 \
821+
--hash=sha256:ec21cddfe7724fc7cb4ba4bea7aa8e2ef36f607a4bab81aa6ce42a13dc3f03dd
822+
# via
823+
# -r .github/actions/compile-models/requirements.in
824+
# requests
833825
xmltodict==0.14.2 \
834826
--hash=sha256:201e7c28bb210e374999d1dde6382923ab0ed1a8a5faeece48ab525b7810a553 \
835827
--hash=sha256:20cc7d723ed729276e808f26fb6b3599f786cbc37e06c65e192ba77c40f20aac
Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,8 @@
1-
huggingface_hub>=1.1.4
1+
# Hugging Face Hub
2+
huggingface_hub>=1.1.7
23
hf-xet>=1.2.0
4+
5+
# Utils
36
requests>=2.32.5
7+
urllib3>=2.6.0
8+
filelock>=3.20.1

.github/actions/download-models/requirements.txt

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -119,10 +119,12 @@ colorama==0.4.6 \
119119
# via
120120
# click
121121
# tqdm
122-
filelock==3.18.0 \
123-
--hash=sha256:adbc88eabb99d2fec8c9c1b229b171f18afa655400173ddc653d5d01501fb9f2 \
124-
--hash=sha256:c401f4f8377c4464e6db25fff06205fd89bdd83b65eb0488ed1b160f780e21de
125-
# via huggingface-hub
122+
filelock==3.20.1 \
123+
--hash=sha256:15d9e9a67306188a44baa72f569d2bfd803076269365fdea0934385da4dc361a \
124+
--hash=sha256:b8360948b351b80f420878d8516519a2204b07aefcdcfd24912a5d33127f188c
125+
# via
126+
# -r .github/actions/download-models/requirements.in
127+
# huggingface-hub
126128
fsspec==2025.3.2 \
127129
--hash=sha256:2daf8dc3d1dfa65b6aa37748d112773a7a08416f6c70d96b264c96476ecaf711 \
128130
--hash=sha256:e52c77ef398680bbd6a98c0e628fbc469491282981209907bbc8aea76a04fdc6
@@ -165,9 +167,9 @@ httpx==0.28.1 \
165167
--hash=sha256:75e98c5f16b0f35b567856f597f06ff2270a374470a5c2392242528e3e3e42fc \
166168
--hash=sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad
167169
# via huggingface-hub
168-
huggingface-hub==1.1.4 \
169-
--hash=sha256:867799fbd2ef338b7f8b03d038d9c0e09415dfe45bb2893b48a510d1d746daa5 \
170-
--hash=sha256:a7424a766fffa1a11e4c1ac2040a1557e2101f86050fdf06627e7b74cc9d2ad6
170+
huggingface-hub==1.2.3 \
171+
--hash=sha256:4ba57f17004fd27bb176a6b7107df579865d4cde015112db59184c51f5602ba7 \
172+
--hash=sha256:c9b7a91a9eedaa2149cdc12bdd8f5a11780e10de1f1024718becf9e41e5a4642
171173
# via -r .github/actions/download-models/requirements.in
172174
idna==3.10 \
173175
--hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
@@ -261,7 +263,9 @@ typing-extensions==4.13.2 \
261263
# via
262264
# huggingface-hub
263265
# typer-slim
264-
urllib3==2.5.0 \
265-
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
266-
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc
267-
# via requests
266+
urllib3==2.6.2 \
267+
--hash=sha256:016f9c98bb7e98085cb2b4b17b87d2c702975664e4f060c6532e64d1c1a5e797 \
268+
--hash=sha256:ec21cddfe7724fc7cb4ba4bea7aa8e2ef36f607a4bab81aa6ce42a13dc3f03dd
269+
# via
270+
# -r .github/actions/download-models/requirements.in
271+
# requests

.github/workflows/clang-format.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,13 +21,13 @@ jobs:
2121
runs-on: ubuntu-latest-8-cores
2222
steps:
2323
- name: Checkout NPU Compiler
24-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
24+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
2525
with:
2626
fetch-depth: 0
2727
lfs: true
2828

2929
- name: Setup python version
30-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
30+
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
3131
with:
3232
python-version: '3.13'
3333

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,16 +30,16 @@ jobs:
3030
build-mode: none
3131
steps:
3232
- name: Checkout repository
33-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
33+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
3434

3535
- name: Initialize CodeQL
36-
uses: github/codeql-action/init@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
36+
uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
3737
with:
3838
languages: ${{ matrix.language }}
3939
build-mode: ${{ matrix.build-mode }}
4040

4141
- name: Perform CodeQL Analysis
42-
uses: github/codeql-action/analyze@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
42+
uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
4343
with:
4444
category: "/language:${{matrix.language}}"
4545

.github/workflows/job_build_cid.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ jobs:
118118
cmake -E make_directory "${CID_PACKAGE_ARTIFACTS_DIR}"
119119
120120
- name: Checkout actions
121-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
121+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
122122
with:
123123
path: ${{ env.NPU_ACTIONS_DIR }}
124124
sparse-checkout: |
@@ -184,7 +184,7 @@ jobs:
184184

185185
- name: Clone OpenVINO
186186
if: ${{ !steps.cache-restore.outputs.cache-hit }}
187-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
187+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
188188
timeout-minutes: 15
189189
with:
190190
repository: ${{ steps.versions.outputs.openvino-repository }}
@@ -194,19 +194,19 @@ jobs:
194194

195195
- name: Checkout NPU Compiler
196196
if: ${{ !steps.cache-restore.outputs.cache-hit }}
197-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
197+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
198198
with:
199199
path: ${{ env.NPU_COMPILER_REPO }}
200200
submodules: true
201201
lfs: true
202202

203203
- name: System info
204204
if: ${{ !steps.cache-restore.outputs.cache-hit }}
205-
uses: openvinotoolkit/openvino/.github/actions/system_info@44526285f241251e9543276572676365fbe542a4 # 2025.3.0
205+
uses: openvinotoolkit/openvino/.github/actions/system_info@7a975177ff432c687e5619e8fb22e4bf265e48b7 # 2025.4.0
206206

207207
- name: Setup python version
208208
if: ${{ !steps.cache-restore.outputs.cache-hit }}
209-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
209+
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
210210
with:
211211
python-version: '3.13'
212212

.github/workflows/job_build_drv_linux.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ jobs:
7171

7272
- name: Checkout versions action
7373
if: ${{ !steps.cache-restore.outputs.cache-hit }}
74-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
74+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
7575
with:
7676
path: ${{ env.NPU_ACTIONS_DIR }}
7777
sparse-checkout: |
@@ -85,7 +85,7 @@ jobs:
8585

8686
- name: Clone Linux NPU Driver
8787
if: ${{ !steps.cache-restore.outputs.cache-hit }}
88-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
88+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
8989
timeout-minutes: 15
9090
with:
9191
repository: ${{ steps.versions.outputs.npu-linux-driver-repository }}
@@ -95,7 +95,7 @@ jobs:
9595

9696
- name: System info
9797
if: ${{ !steps.cache-restore.outputs.cache-hit }}
98-
uses: openvinotoolkit/openvino/.github/actions/system_info@44526285f241251e9543276572676365fbe542a4 # 2025.3.0
98+
uses: openvinotoolkit/openvino/.github/actions/system_info@7a975177ff432c687e5619e8fb22e4bf265e48b7 # 2025.4.0
9999

100100
- name: Install system packages
101101
if: ${{ !steps.cache-restore.outputs.cache-hit }}

0 commit comments

Comments
 (0)