From 01c52e98554179a57aa28fc24392250423c0a3b3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?oliver=20k=C3=B6nig?= Date: Wed, 7 Oct 2026 08:52:55 +0000 Subject: [PATCH 1/2] ci(code-freeze): use github app authentication MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: oliver könig (cherry picked from commit ad155ef86a7d85c6a7de6d0ec46ee55a425e48c9) Signed-off-by: svcnemo-autobot --- .github/workflows/release-freeze.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release-freeze.yml b/.github/workflows/release-freeze.yml index b6f06d2e..7363ab43 100644 --- a/.github/workflows/release-freeze.yml +++ b/.github/workflows/release-freeze.yml @@ -32,10 +32,15 @@ on: description: Dry-run of code-freeze required: false default: true +permissions: + contents: read + jobs: code-freeze: - uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@bfdb5e35067fd8cd91ce21fca4eb1072ffd7ab8c # v1.4.2 + uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@493e7ad25cbbd9467e606fde716f5d3353ebed17 # github app authentication with: + app-id: ${{ vars.BOT_ID }} + environment-name: public library-name: Emerging-Optimizers python-package: emerging_optimizers release-type: ${{ inputs.release-type }} @@ -44,5 +49,6 @@ jobs: next-pre-release: "" next-dev: "" secrets: + BOT_KEY: ${{ secrets.BOT_KEY }} SLACK_WEBHOOK: ${{ secrets.SLACK_RELEASE_ENDPOINT }} SLACK_WEBHOOK_ADMIN: ${{ secrets.SLACK_WEBHOOK_ADMIN }} From 206fd76b07d107ad8b469085c380d892ec5d5293 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?oliver=20k=C3=B6nig?= Date: Fri, 9 Oct 2026 09:34:15 +0000 Subject: [PATCH 2/2] ci(code-freeze): pin merged github app workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: oliver könig (cherry picked from commit 5f6a8b897d9b1deaaf2e37aa4b7408cd74b430a1) Signed-off-by: svcnemo-autobot --- .github/workflows/release-freeze.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-freeze.yml b/.github/workflows/release-freeze.yml index 7363ab43..8e20519b 100644 --- a/.github/workflows/release-freeze.yml +++ b/.github/workflows/release-freeze.yml @@ -37,7 +37,7 @@ permissions: jobs: code-freeze: - uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@493e7ad25cbbd9467e606fde716f5d3353ebed17 # github app authentication + uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_code_freeze.yml@61445a177938967f70c94094b98402e979452151 # github app authentication with: app-id: ${{ vars.BOT_ID }} environment-name: public