From 2f7e75e3e40c339ba03df76e0ad46b49daf07514 Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Mon, 17 Aug 2026 02:33:22 +0000 Subject: [PATCH 1/2] chore(deps, ci): update github-actions --- .github/workflows/benchmarks.yml | 4 ++-- .github/workflows/build-and-push-images.yml | 18 +++++++++--------- .github/workflows/build.yml | 12 ++++++------ .github/workflows/dependency-graph.yml | 2 +- 4 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index b07c146f897..b7988de9bfd 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -214,7 +214,7 @@ jobs: - name: Setup Python uses: actions/setup-python@v7 with: - python-version: "3.12" + python-version: "3.14" - name: Install Python dependencies # Mirrors amber-integration's installer in build.yml so the bench # subprocess imports resolve identically (pytorch CPU index + @@ -241,7 +241,7 @@ jobs: - name: Generate Python proto bindings run: bash bin/python-proto-gen.sh - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' diff --git a/.github/workflows/build-and-push-images.yml b/.github/workflows/build-and-push-images.yml index fb5885492a2..0dfaed4d215 100644 --- a/.github/workflows/build-and-push-images.yml +++ b/.github/workflows/build-and-push-images.yml @@ -126,7 +126,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: @@ -328,7 +328,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: @@ -353,7 +353,7 @@ jobs: - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -361,7 +361,7 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} @@ -408,7 +408,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: @@ -439,7 +439,7 @@ jobs: - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -447,7 +447,7 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} @@ -481,7 +481,7 @@ jobs: steps: - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -489,7 +489,7 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 120dd1f2aa5..bb007275b1f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -124,7 +124,7 @@ jobs: - name: Setup Python uses: actions/setup-python@v7 with: - python-version: "3.12" + python-version: "3.14" - name: Install dependency timeout-minutes: 20 run: yarn --cwd frontend install --immutable --inline-builds --network-timeout=100000 @@ -228,7 +228,7 @@ jobs: env: PGPASSWORD: postgres - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -398,7 +398,7 @@ jobs: - name: Setup Python for Scala-Python integration tests uses: actions/setup-python@v7 with: - python-version: "3.11" + python-version: "3.14" - name: Show Python run: python --version || python3 --version - name: Install Python dependencies @@ -482,7 +482,7 @@ jobs: env: PGPASSWORD: postgres - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -792,7 +792,7 @@ jobs: distribution: "temurin" java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -947,7 +947,7 @@ jobs: distribution: "temurin" java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml index f4b7be10f4c..4034b15715f 100644 --- a/.github/workflows/dependency-graph.yml +++ b/.github/workflows/dependency-graph.yml @@ -48,7 +48,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 + uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 From 77562ffc4c5d12f7be6f31b0cf7d730419ad5540 Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Sun, 16 Aug 2026 21:27:36 -0700 Subject: [PATCH 2/2] fix(deps, ci): keep setup-python inside the pyamber-tested range Renovate bumped the pinned `python-version` on actions/setup-python from 3.11/3.12 to 3.14 in build.yml and benchmarks.yml, and amber-integration went red on both ubuntu and macOS. Python 3.14 has no numpy 2.1.0 wheel, so uv falls back to building it from source, and numpy's C sources do not compile against the 3.14 C API (11 errors out of string_fastsearch.h and string_buffer.h). The interpreter is not a free-floating dependency. It has to stay inside the range the pyamber matrix tests -- 3.11-3.13 -- which is itself bounded by the numpy/pandas/pyarrow pins renovate.json5 already freezes for the Arrow IPC data path. The matrix was left at 3.11-3.13 while the scalars moved to 3.14, and that split is what broke the job. Restore the three pins and stop Renovate re-proposing them, so the interpreter moves only when the matrix and the Arrow trio move with it. --- .github/renovate.json5 | 16 ++++++++++++++++ .github/workflows/benchmarks.yml | 2 +- .github/workflows/build.yml | 4 ++-- 3 files changed, 19 insertions(+), 3 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index c6fe7f387a8..6887df5ad38 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -165,6 +165,22 @@ enabled: false, }, + // `python-version:` on actions/setup-python. The interpreter CI runs + // is not a free-floating dependency: it has to stay inside the range + // the pyamber matrix in build.yml tests (3.11-3.13), which in turn is + // bounded by the numpy/pandas pins frozen just above -- numpy 2.1.0 + // ships no wheel past cp313 and its C sources do not compile against + // the 3.14 C API, so bumping the interpreter alone red-lines + // amber-integration on both ubuntu and macOS. Widening the range is a + // deliberate change: add the version to the matrix and move the Arrow + // trio with it, in that order. + { + matchManagers: ['github-actions'], + matchDepTypes: ['uses-with'], + matchDepNames: ['python'], + enabled: false, + }, + // Angular majors need a guided `ng update` migration and the // framework/CLI lines must move together (see #6155). The regex // also covers @angular-devkit/@angular-builders/@angular-eslint; diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index b7988de9bfd..a427a18646b 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -214,7 +214,7 @@ jobs: - name: Setup Python uses: actions/setup-python@v7 with: - python-version: "3.14" + python-version: "3.12" - name: Install Python dependencies # Mirrors amber-integration's installer in build.yml so the bench # subprocess imports resolve identically (pytorch CPU index + diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index bb007275b1f..a79f427823a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -124,7 +124,7 @@ jobs: - name: Setup Python uses: actions/setup-python@v7 with: - python-version: "3.14" + python-version: "3.12" - name: Install dependency timeout-minutes: 20 run: yarn --cwd frontend install --immutable --inline-builds --network-timeout=100000 @@ -398,7 +398,7 @@ jobs: - name: Setup Python for Scala-Python integration tests uses: actions/setup-python@v7 with: - python-version: "3.14" + python-version: "3.11" - name: Show Python run: python --version || python3 --version - name: Install Python dependencies