diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile index 3f7d93114878..4cd1520e440d 100644 --- a/.devcontainer/Dockerfile +++ b/.devcontainer/Dockerfile @@ -1,4 +1,4 @@ -FROM lmsysorg/sglang:dev +FROM lmsysorg/sglang:v0.5.17@sha256:16aba8925507e631e1dc1e23d95d026533602591775f6a8db68b74ee99746155 # Create non-root user with specified UID and GID # NOTE: Replace with your own UID and GID. This is a workaround from https://github.com/microsoft/vscode-remote-release/issues/49#issuecomment-489060908. diff --git a/.github/actions/check-pr-test-health/action.yml b/.github/actions/check-pr-test-health/action.yml index 8cafb66e96d4..ec56a80868d8 100644 --- a/.github/actions/check-pr-test-health/action.yml +++ b/.github/actions/check-pr-test-health/action.yml @@ -11,7 +11,7 @@ runs: using: composite steps: - name: Check PR test health - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd env: SKIP_PR_TEST_HEALTH_CHECK: ${{ env.SKIP_PR_TEST_HEALTH_CHECK }} with: diff --git a/.github/actions/upload-cuda-coredumps/action.yml b/.github/actions/upload-cuda-coredumps/action.yml index 88c1d22d8250..884171b302a5 100644 --- a/.github/actions/upload-cuda-coredumps/action.yml +++ b/.github/actions/upload-cuda-coredumps/action.yml @@ -54,7 +54,7 @@ runs: - name: Upload CUDA coredumps if: steps.check.outputs.has_dumps == 'true' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: cuda-coredumps-${{ github.job }}${{ inputs.artifact-suffix && format('-{0}', inputs.artifact-suffix) }} path: ${{ steps.check.outputs.dump_dir }}/ diff --git a/.github/actions/wait-for-jobs/action.yml b/.github/actions/wait-for-jobs/action.yml index dab8fa364e1f..64c9a9cecdc3 100644 --- a/.github/actions/wait-for-jobs/action.yml +++ b/.github/actions/wait-for-jobs/action.yml @@ -34,7 +34,7 @@ runs: steps: - name: Wait for jobs to complete id: wait - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd env: INPUT_STAGE_NAME: ${{ inputs.stage-name }} INPUT_JOBS: ${{ inputs.jobs }} diff --git a/.github/workflows/_docker-build-and-publish.yml b/.github/workflows/_docker-build-and-publish.yml index ba55dc939f94..2b52b0f1b22f 100644 --- a/.github/workflows/_docker-build-and-publish.yml +++ b/.github/workflows/_docker-build-and-publish.yml @@ -60,7 +60,7 @@ jobs: run: sudo rm -rf "$GITHUB_WORKSPACE"/* || true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.checkout_ref || github.ref }} @@ -81,7 +81,7 @@ jobs: done - name: Free disk space - uses: jlumbroso/free-disk-space@main + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be with: tool-cache: true docker-images: true @@ -98,10 +98,10 @@ jobs: docker volume prune -af - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -183,7 +183,7 @@ jobs: run: sudo rm -rf "$GITHUB_WORKSPACE"/* || true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.checkout_ref || github.ref }} @@ -210,10 +210,10 @@ jobs: docker volume prune -af - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -283,10 +283,10 @@ jobs: environment: ${{ inputs.use_environment || null }} steps: - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/_pr-test-check-changes.yml b/.github/workflows/_pr-test-check-changes.yml index dad1acfa8526..0c08382cf48a 100644 --- a/.github/workflows/_pr-test-check-changes.yml +++ b/.github/workflows/_pr-test-check-changes.yml @@ -52,7 +52,7 @@ jobs: continue_on_error: ${{ steps.set-continue-on-error.outputs.continue_on_error }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -73,7 +73,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | diff --git a/.github/workflows/_pr-test-sgl-kernel-build.yml b/.github/workflows/_pr-test-sgl-kernel-build.yml index 75981dc1692d..e1ceee2e1491 100644 --- a/.github/workflows/_pr-test-sgl-kernel-build.yml +++ b/.github/workflows/_pr-test-sgl-kernel-build.yml @@ -63,7 +63,7 @@ jobs: echo "$GITHUB_WORKSPACE does not exist, nothing to clean" fi - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: submodules: "recursive" ref: ${{ inputs.git_ref || github.sha }} @@ -71,7 +71,7 @@ jobs: - uses: ./.github/actions/check-maintenance - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -111,7 +111,7 @@ jobs: ls -alh sgl-kernel/dist/*.whl - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-python${{ matrix.python-version }}-cuda${{ matrix.cuda-version }}${{ inputs.arch_suffix }} path: sgl-kernel/dist/* diff --git a/.github/workflows/_pr-test-stage.yml b/.github/workflows/_pr-test-stage.yml index bdf7f70f24ce..843c80831897 100644 --- a/.github/workflows/_pr-test-stage.yml +++ b/.github/workflows/_pr-test-stage.yml @@ -89,7 +89,7 @@ jobs: matrix: partition: ${{ fromJson(inputs.partitions)[inputs.self_name].arr }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ fromJson(inputs.caller_inputs).git_ref || github.sha }} @@ -106,7 +106,7 @@ jobs: - name: Download artifacts (v4) if: ${{ fromJson(inputs.check_changes).sgl_kernel == 'true' && steps.rc.outputs.artifact_version == 'v4' }} - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -114,7 +114,7 @@ jobs: - name: Download artifacts (v6) if: ${{ fromJson(inputs.check_changes).sgl_kernel == 'true' && steps.rc.outputs.artifact_version == 'v6' }} - uses: actions/download-artifact@v6 + uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 with: path: sgl-kernel/dist/ merge-multiple: true diff --git a/.github/workflows/amd-ci-job-monitor.yml b/.github/workflows/amd-ci-job-monitor.yml index b1af9c41ea23..1cba719de797 100644 --- a/.github/workflows/amd-ci-job-monitor.yml +++ b/.github/workflows/amd-ci-job-monitor.yml @@ -39,10 +39,10 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -70,7 +70,7 @@ jobs: --dump-data-file actions-job-snapshot.json - name: Upload Actions data snapshot - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: actions-job-snapshot path: actions-job-snapshot.json @@ -84,10 +84,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -95,7 +95,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data @@ -123,7 +123,7 @@ jobs: nightly_rocm720_jobs: ${{ steps.parse.outputs.nightly_rocm720_jobs }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Parse workflow files id: parse @@ -172,10 +172,10 @@ jobs: job_name: ${{ fromJson(needs.parse-workflows.outputs.pr_jobs) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -183,7 +183,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data @@ -211,10 +211,10 @@ jobs: job_name: ${{ fromJson(needs.parse-workflows.outputs.nightly_jobs) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -222,7 +222,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data @@ -250,10 +250,10 @@ jobs: job_name: ${{ fromJson(needs.parse-workflows.outputs.pr_rocm720_jobs) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -261,7 +261,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data @@ -289,10 +289,10 @@ jobs: job_name: ${{ fromJson(needs.parse-workflows.outputs.nightly_rocm720_jobs) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -300,7 +300,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data @@ -324,10 +324,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -335,7 +335,7 @@ jobs: run: pip install tabulate - name: Download Actions data snapshot - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: actions-job-snapshot path: ci-data diff --git a/.github/workflows/auto-tune.yml b/.github/workflows/auto-tune.yml index 16ad5d23b177..2608323ccb4d 100644 --- a/.github/workflows/auto-tune.yml +++ b/.github/workflows/auto-tune.yml @@ -7,4 +7,4 @@ jobs: auto-tune-lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 diff --git a/.github/workflows/bot-bump-flashinfer-version.yml b/.github/workflows/bot-bump-flashinfer-version.yml index cc1cba930ce2..ef6d8dcb7f63 100644 --- a/.github/workflows/bot-bump-flashinfer-version.yml +++ b/.github/workflows/bot-bump-flashinfer-version.yml @@ -17,12 +17,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/bot-bump-kernel-version-to-sglang.yml b/.github/workflows/bot-bump-kernel-version-to-sglang.yml index b26192aba1ac..8e00f21cd61f 100644 --- a/.github/workflows/bot-bump-kernel-version-to-sglang.yml +++ b/.github/workflows/bot-bump-kernel-version-to-sglang.yml @@ -15,12 +15,12 @@ jobs: needs_sync: ${{ steps.check_sync.outputs.needs_sync }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/bot-bump-kernel-version.yml b/.github/workflows/bot-bump-kernel-version.yml index 91a808c6ab61..d3f098597d8a 100644 --- a/.github/workflows/bot-bump-kernel-version.yml +++ b/.github/workflows/bot-bump-kernel-version.yml @@ -17,12 +17,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/bot-bump-sglang-version.yml b/.github/workflows/bot-bump-sglang-version.yml index e0a8041e7b5b..4f8c48d8df23 100644 --- a/.github/workflows/bot-bump-sglang-version.yml +++ b/.github/workflows/bot-bump-sglang-version.yml @@ -19,12 +19,12 @@ jobs: branch_name: ${{ steps.set_output.outputs.branch_name }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/bot-cherry-pick.yml b/.github/workflows/bot-cherry-pick.yml index 1c5e26671226..8ffd799bebc4 100644 --- a/.github/workflows/bot-cherry-pick.yml +++ b/.github/workflows/bot-cherry-pick.yml @@ -50,7 +50,7 @@ jobs: fi - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/ci-auto-bisect.yml b/.github/workflows/ci-auto-bisect.yml index 6de26745f1bd..ad241353eb42 100644 --- a/.github/workflows/ci-auto-bisect.yml +++ b/.github/workflows/ci-auto-bisect.yml @@ -28,12 +28,12 @@ jobs: timeout-minutes: 30 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 # Full history needed for git log between SHAs - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.14' @@ -59,7 +59,7 @@ jobs: - name: Upload Bisect Results if: always() && hashFiles('scripts/ci_monitor/bisect_results.json') != '' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ci-auto-bisect-${{ github.run_number }} path: scripts/ci_monitor/bisect_results.json diff --git a/.github/workflows/ci-coverage-overview.yml b/.github/workflows/ci-coverage-overview.yml index 121a68764f29..205c7eecbceb 100644 --- a/.github/workflows/ci-coverage-overview.yml +++ b/.github/workflows/ci-coverage-overview.yml @@ -20,10 +20,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -36,10 +36,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -52,10 +52,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -69,7 +69,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install Rust toolchain + protoc # Editable install of sglang triggers `build_rust` for the bundled @@ -146,10 +146,10 @@ jobs: if: inputs.output_format == 'json' steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -158,7 +158,7 @@ jobs: python scripts/ci/utils/ci_coverage_report.py --output-format json > ci_coverage.json - name: Upload JSON artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ci-coverage-report path: ci_coverage.json diff --git a/.github/workflows/ci-failure-monitor.yml b/.github/workflows/ci-failure-monitor.yml index 0b81fbfd36d6..bf53bb2b9749 100644 --- a/.github/workflows/ci-failure-monitor.yml +++ b/.github/workflows/ci-failure-monitor.yml @@ -19,10 +19,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.14' @@ -45,7 +45,7 @@ jobs: --output ci_failure_analysis_$(date +%Y%m%d_%H%M%S).json - name: Upload Analysis Results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ci-failure-analysis-${{ github.run_number }} path: | diff --git a/.github/workflows/close-inactive-issues.yml b/.github/workflows/close-inactive-issues.yml index a280ce4397cf..c9f4c4a40ad0 100644 --- a/.github/workflows/close-inactive-issues.yml +++ b/.github/workflows/close-inactive-issues.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check and close inactive issues - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd with: github-token: ${{secrets.GITHUB_TOKEN}} script: | diff --git a/.github/workflows/diffusion-ci-gt-gen-npu.yml b/.github/workflows/diffusion-ci-gt-gen-npu.yml index b4561b9ba3a4..627a597da013 100644 --- a/.github/workflows/diffusion-ci-gt-gen-npu.yml +++ b/.github/workflows/diffusion-ci-gt-gen-npu.yml @@ -52,12 +52,12 @@ jobs: plan-2npu: ${{ steps.compute.outputs.plan-2npu }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -87,7 +87,7 @@ jobs: image: swr.cn-southwest-2.myhuaweicloud.com/base_image/ascend-ci/cann:9.0.0-a3-ubuntu22.04-py3.11 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Mark repository safe run: | @@ -129,7 +129,7 @@ jobs: ${{ inputs.case_ids != '' && format('--case-ids {0}', inputs.case_ids) || '' }} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-1npu-part${{ matrix.part }} path: python/${{ env.OUTPUT_NAME }} @@ -157,7 +157,7 @@ jobs: image: swr.cn-southwest-2.myhuaweicloud.com/base_image/ascend-ci/cann:9.0.0-a3-ubuntu22.04-py3.11 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Mark repository safe run: | @@ -199,7 +199,7 @@ jobs: ${{ inputs.case_ids != '' && format('--case-ids {0}', inputs.case_ids) || '' }} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-2npu-part${{ matrix.part }} path: python/${{ env.OUTPUT_NAME }} diff --git a/.github/workflows/diffusion-ci-gt-gen.yml b/.github/workflows/diffusion-ci-gt-gen.yml index 2c935f0a1b67..682c65e94892 100644 --- a/.github/workflows/diffusion-ci-gt-gen.yml +++ b/.github/workflows/diffusion-ci-gt-gen.yml @@ -159,12 +159,12 @@ jobs: matrix: ${{ fromJson(needs.compute-official-gt-matrix.outputs.matrix) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} - name: Checkout ci-data repro scripts - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: sgl-project/ci-data ref: ${{ inputs.ci_data_ref || 'main' }} @@ -183,7 +183,7 @@ jobs: - name: Download prebuilt sgl-kernel wheel if: inputs.kernel_artifact_run_id != '' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -283,7 +283,7 @@ jobs: fi - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-${{ matrix.source_group }}-${{ matrix.case_id }} path: | @@ -326,12 +326,12 @@ jobs: plan-b200: ${{ steps.compute.outputs.plan-b200 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -357,7 +357,7 @@ jobs: timeout-minutes: 150 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -369,7 +369,7 @@ jobs: - name: Download prebuilt sgl-kernel wheel if: inputs.kernel_artifact_run_id != '' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -397,7 +397,7 @@ jobs: ${{ inputs.case_ids != '' && format('--case-ids {0}', inputs.case_ids) || '' }} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-1gpu-part${{ matrix.part }} path: python/${{ env.OUTPUT_NAME }} @@ -432,7 +432,7 @@ jobs: timeout-minutes: 150 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -444,7 +444,7 @@ jobs: - name: Download prebuilt sgl-kernel wheel if: inputs.kernel_artifact_run_id != '' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -472,7 +472,7 @@ jobs: ${{ inputs.case_ids != '' && format('--case-ids {0}', inputs.case_ids) || '' }} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-2gpu-part${{ matrix.part }} path: python/${{ env.OUTPUT_NAME }} @@ -507,7 +507,7 @@ jobs: timeout-minutes: 240 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -519,7 +519,7 @@ jobs: - name: Download prebuilt sgl-kernel wheel if: inputs.kernel_artifact_run_id != '' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -547,7 +547,7 @@ jobs: ${{ inputs.case_ids != '' && format('--case-ids {0}', inputs.case_ids) || '' }} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ env.OUTPUT_NAME }}-b200-part${{ matrix.part }} path: python/${{ env.OUTPUT_NAME }} diff --git a/.github/workflows/full-test-npu.yml b/.github/workflows/full-test-npu.yml index 42360ff67d58..01a45c77de9c 100644 --- a/.github/workflows/full-test-npu.yml +++ b/.github/workflows/full-test-npu.yml @@ -90,7 +90,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -153,7 +153,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -216,7 +216,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -279,7 +279,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 5509bd41170c..10db3f3361b1 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Auto-label by file changes - uses: actions/labeler@v5 + uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" configuration-path: .github/labeler.yml diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index b9a7d8ea973a..d3c26556c815 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -9,7 +9,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 @@ -37,7 +37,7 @@ jobs: | xargs -0 python3 scripts/ci/check_no_docs_changes.py - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c with: python-version: "3.12" @@ -55,7 +55,7 @@ jobs: args: --config .github/linters/lychee.toml README.md "docs/**/*.md" "docs/**/*.rst" "docs/**/*.ipynb" - name: Run sgl-kernel clang-format checks - uses: DoozyX/clang-format-lint-action@v0.20 + uses: DoozyX/clang-format-lint-action@bcb4eb2cb0d707ee4f3e5cc3b456eb075f12cf73 with: source: sgl-kernel extensions: h,c,cpp,hpp,cu,cuh,cc diff --git a/.github/workflows/nightly-72-gpu-gb200.yml b/.github/workflows/nightly-72-gpu-gb200.yml index 43b93d0261af..5a0f7f64ec1e 100644 --- a/.github/workflows/nightly-72-gpu-gb200.yml +++ b/.github/workflows/nightly-72-gpu-gb200.yml @@ -87,7 +87,7 @@ jobs: matrix: ${{ steps.generate.outputs.matrix }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Generate benchmark matrix id: generate @@ -141,7 +141,7 @@ jobs: sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: # PRs (including fork PRs) resolve via refs/pull//head on upstream. # Otherwise fall back to the branch name on sgl-project/sglang. @@ -166,10 +166,10 @@ jobs: echo "Commit URL: https://github.com/sgl-project/sglang/commit/${SHA}" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -300,7 +300,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Clean up prior Slurm jobs from this runner continue-on-error: true @@ -339,7 +339,7 @@ jobs: - name: Upload results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: gb200-${{ matrix.config.name }}-${{ github.run_id }} path: | @@ -407,10 +407,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: results/ pattern: gb200-* diff --git a/.github/workflows/nightly-experimental-sgl-router-docker.yml b/.github/workflows/nightly-experimental-sgl-router-docker.yml index 63141d18271d..e697e3afeb88 100644 --- a/.github/workflows/nightly-experimental-sgl-router-docker.yml +++ b/.github/workflows/nightly-experimental-sgl-router-docker.yml @@ -32,13 +32,13 @@ jobs: runs-on: ${{ matrix.runner }} steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -55,7 +55,7 @@ jobs: echo "${DIGEST}" > "/tmp/digests/${{ matrix.arch }}" - name: Upload digest - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: digest-${{ matrix.arch }} path: /tmp/digests/${{ matrix.arch }} @@ -67,17 +67,17 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Download digests - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: /tmp/digests pattern: digest-* merge-multiple: true - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/nightly-link-check.yml b/.github/workflows/nightly-link-check.yml index 63d905cdad8a..02c85206b95b 100644 --- a/.github/workflows/nightly-link-check.yml +++ b/.github/workflows/nightly-link-check.yml @@ -16,7 +16,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Run lychee online link checks uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2 diff --git a/.github/workflows/nightly-release-gateway.yml b/.github/workflows/nightly-release-gateway.yml index 19c952103c40..d06326d368b5 100644 --- a/.github/workflows/nightly-release-gateway.yml +++ b/.github/workflows/nightly-release-gateway.yml @@ -46,7 +46,7 @@ jobs: target: aarch64 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-repo @@ -58,7 +58,7 @@ jobs: shell: bash - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.13" architecture: ${{ matrix.python-architecture || 'x64' }} @@ -90,7 +90,7 @@ jobs: run: choco install protoc -y - name: Build wheels - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b with: working-directory: bindings/python target: ${{ matrix.target }} @@ -125,7 +125,7 @@ jobs: - name: Check packages run: twine check --strict bindings/python/dist/* - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: packages-${{ matrix.os }}-${{ matrix.target }}-${{ matrix.manylinux || 'auto' }} path: bindings/python/dist/ @@ -134,7 +134,7 @@ jobs: name: Build SDist runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-repo @@ -145,7 +145,7 @@ jobs: ls -alt - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.13" @@ -164,14 +164,14 @@ jobs: cat bindings/python/pyproject.toml | grep "^version" - name: Build SDist - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b with: working-directory: bindings/python command: sdist args: --out dist rust-toolchain: stable - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: sdist path: bindings/python/dist/*.tar.gz @@ -182,7 +182,7 @@ jobs: needs: [build, build-sdist] runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist merge-multiple: true diff --git a/.github/workflows/nightly-test-amd-rocm720.yml b/.github/workflows/nightly-test-amd-rocm720.yml index 98ce7a34226c..e752e1424990 100644 --- a/.github/workflows/nightly-test-amd-rocm720.yml +++ b/.github/workflows/nightly-test-amd-rocm720.yml @@ -144,7 +144,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -174,7 +174,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -204,7 +204,7 @@ jobs: runs-on: linux-mi35x-gpu-1 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -239,7 +239,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -269,7 +269,7 @@ jobs: runs-on: linux-mi35x-gpu-2 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -303,7 +303,7 @@ jobs: runs-on: linux-mi35x-gpu-2 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -337,7 +337,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -368,7 +368,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -400,7 +400,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -432,7 +432,7 @@ jobs: runs-on: linux-mi325-4gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -468,7 +468,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -509,7 +509,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -547,7 +547,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -592,7 +592,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -644,7 +644,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -689,7 +689,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -741,7 +741,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -786,7 +786,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -829,7 +829,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -872,7 +872,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -908,7 +908,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -943,7 +943,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -978,7 +978,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1013,7 +1013,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1052,7 +1052,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1098,7 +1098,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1132,7 +1132,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1178,7 +1178,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1224,7 +1224,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1262,7 +1262,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1310,7 +1310,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1358,7 +1358,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1410,7 +1410,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1442,7 +1442,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1481,7 +1481,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1513,7 +1513,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1552,7 +1552,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1598,7 +1598,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1649,7 +1649,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1694,7 +1694,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1743,7 +1743,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1794,7 +1794,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1832,7 +1832,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1881,7 +1881,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1910,7 +1910,7 @@ jobs: - name: Upload generated images if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: zimage-turbo-outputs-rocm720 path: diffusion-artifacts/ diff --git a/.github/workflows/nightly-test-amd.yml b/.github/workflows/nightly-test-amd.yml index 8b2a46c1d3cb..09a3b91f27bb 100644 --- a/.github/workflows/nightly-test-amd.yml +++ b/.github/workflows/nightly-test-amd.yml @@ -140,7 +140,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -171,7 +171,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -202,7 +202,7 @@ jobs: runs-on: linux-mi35x-gpu-1 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -240,7 +240,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -271,7 +271,7 @@ jobs: runs-on: linux-mi35x-gpu-2 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -305,7 +305,7 @@ jobs: runs-on: linux-mi35x-gpu-2 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -339,7 +339,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -371,7 +371,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -404,7 +404,7 @@ jobs: runs-on: linux-mi325-2gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -437,7 +437,7 @@ jobs: runs-on: linux-mi325-4gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -473,7 +473,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -514,7 +514,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -552,7 +552,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -597,7 +597,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -649,7 +649,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -694,7 +694,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -746,7 +746,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -791,7 +791,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -834,7 +834,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -877,7 +877,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -913,7 +913,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -948,7 +948,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -983,7 +983,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1018,7 +1018,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1057,7 +1057,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1103,7 +1103,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1137,7 +1137,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1183,7 +1183,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1229,7 +1229,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1267,7 +1267,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1299,7 +1299,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1338,7 +1338,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1370,7 +1370,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1409,7 +1409,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1455,7 +1455,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1506,7 +1506,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1551,7 +1551,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1600,7 +1600,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1651,7 +1651,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1689,7 +1689,7 @@ jobs: runs-on: linux-mi325-8gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1738,7 +1738,7 @@ jobs: runs-on: linux-mi325-1gpu-sglang steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -1767,7 +1767,7 @@ jobs: - name: Upload generated images if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: zimage-turbo-outputs path: diffusion-artifacts/ diff --git a/.github/workflows/nightly-test-musa.yml b/.github/workflows/nightly-test-musa.yml index a916c2bb323c..76f2f3cfc6c0 100644 --- a/.github/workflows/nightly-test-musa.yml +++ b/.github/workflows/nightly-test-musa.yml @@ -59,7 +59,7 @@ jobs: - name: Checkout code if: steps.gate.outputs.run_job == 'true' - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 timeout-minutes: 10 with: ref: ${{ inputs.ref || github.ref }} @@ -107,7 +107,7 @@ jobs: - name: Checkout code timeout-minutes: 10 if: steps.gate.outputs.run_job == 'true' - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -150,7 +150,7 @@ jobs: - name: Checkout code timeout-minutes: 10 if: steps.gate.outputs.run_job == 'true' - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -202,7 +202,7 @@ jobs: - name: Checkout code timeout-minutes: 10 if: steps.gate.outputs.run_job == 'true' - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -251,7 +251,7 @@ jobs: - name: Checkout code timeout-minutes: 10 if: steps.gate.outputs.run_job == 'true' - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/nightly-test-npu.yml b/.github/workflows/nightly-test-npu.yml index 3ade42b0b15d..cedbd2c06a4d 100644 --- a/.github/workflows/nightly-test-npu.yml +++ b/.github/workflows/nightly-test-npu.yml @@ -86,7 +86,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -153,7 +153,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -219,7 +219,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref|| github.ref }} @@ -286,7 +286,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} @@ -353,7 +353,7 @@ jobs: image: ${{ needs.set-image-config.outputs.image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ needs.set-image-config.outputs.ref || github.ref }} diff --git a/.github/workflows/nightly-test-nvidia.yml b/.github/workflows/nightly-test-nvidia.yml index 1ec8e85f70d4..69b8d51bb185 100644 --- a/.github/workflows/nightly-test-nvidia.yml +++ b/.github/workflows/nightly-test-nvidia.yml @@ -60,7 +60,7 @@ jobs: runs-on: 1-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -95,7 +95,7 @@ jobs: PR_TEST_BYPASS_MAINTENANCE_ON_MAIN: ${{ github.ref == 'refs/heads/main' && 'true' || 'false' }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -125,7 +125,7 @@ jobs: PR_TEST_BYPASS_MAINTENANCE_ON_MAIN: ${{ github.ref == 'refs/heads/main' && 'true' || 'false' }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -151,7 +151,7 @@ jobs: runs-on: 4-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -183,7 +183,7 @@ jobs: RUNNER_LABELS: 8-gpu-h200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -245,7 +245,7 @@ jobs: - name: Upload partition metrics if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: metrics-8gpu-h200-partition-${{ matrix.partition }} path: test/metrics-8gpu-h200-partition-${{ matrix.partition }}.json @@ -265,7 +265,7 @@ jobs: SGLANG_CI_RDMA_ALL_DEVICES: "mlx5_1,mlx5_2,mlx5_3,mlx5_4" steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -297,7 +297,7 @@ jobs: partition: [0, 1, 2, 3] steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -350,7 +350,7 @@ jobs: - name: Upload partition metrics if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: metrics-8gpu-b200-partition-${{ matrix.partition }} path: test/metrics-8gpu-b200-partition-${{ matrix.partition }}.json @@ -368,7 +368,7 @@ jobs: runs-on: 2-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -393,7 +393,7 @@ jobs: runs-on: 2-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -431,7 +431,7 @@ jobs: runs-on: 2-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -456,7 +456,7 @@ jobs: runs-on: 2-gpu-h100 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -494,7 +494,7 @@ jobs: runs-on: 4-gpu-b200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -542,7 +542,7 @@ jobs: runs-on: 4-gpu-gb300 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -592,7 +592,7 @@ jobs: RUNNER_LABELS: 8-gpu-b200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -620,7 +620,7 @@ jobs: timeout-minutes: 300 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -663,7 +663,7 @@ jobs: - name: Upload comparison artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-comparison-${{ github.run_id }} path: | @@ -683,7 +683,7 @@ jobs: runs-on: 8-gpu-h200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -719,12 +719,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} - name: Download all partition metrics - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: pattern: "*metrics-*" path: metrics/ @@ -745,7 +745,7 @@ jobs: --branch ${{ github.ref_name }} - name: Upload consolidated metrics - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: consolidated-metrics-${{ github.run_id }} path: consolidated-metrics-${{ github.run_id }}.json diff --git a/.github/workflows/open-pr-copy-from-oss.yml b/.github/workflows/open-pr-copy-from-oss.yml index 40592f5e0bf2..748468116ba7 100644 --- a/.github/workflows/open-pr-copy-from-oss.yml +++ b/.github/workflows/open-pr-copy-from-oss.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: 'main' diff --git a/.github/workflows/open-pr-copy-to-oss.yml b/.github/workflows/open-pr-copy-to-oss.yml index a29c6bc2aa2a..115fc4e6fe00 100644 --- a/.github/workflows/open-pr-copy-to-oss.yml +++ b/.github/workflows/open-pr-copy-to-oss.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 diff --git a/.github/workflows/patch-docker-dev.yml b/.github/workflows/patch-docker-dev.yml index d81e10b6cd71..0b06061d23cd 100644 --- a/.github/workflows/patch-docker-dev.yml +++ b/.github/workflows/patch-docker-dev.yml @@ -24,12 +24,12 @@ jobs: run: sudo rm -rf "$GITHUB_WORKSPACE"/* || true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/pr-benchmark-rust.yml b/.github/workflows/pr-benchmark-rust.yml index 49dd73895a9a..9b7bcc520960 100644 --- a/.github/workflows/pr-benchmark-rust.yml +++ b/.github/workflows/pr-benchmark-rust.yml @@ -30,20 +30,20 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install dependencies run: | bash scripts/ci/cuda/ci_install_gateway_dependencies.sh - name: Configure sccache - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: "v0.12.0" disable_annotations: true - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: sgl-model-gateway shared-key: "rust-cache" @@ -90,7 +90,7 @@ jobs: runs-on: ${{ matrix.runner }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 100 @@ -99,13 +99,13 @@ jobs: bash scripts/ci/cuda/ci_install_gateway_dependencies.sh - name: Configure sccache - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: ${{ matrix.sccache_version }} disable_annotations: true - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: sgl-model-gateway shared-key: "rust-cache" @@ -136,7 +136,7 @@ jobs: - name: Upload benchmark results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ matrix.artifact_name }}-${{ github.sha }} path: | @@ -155,7 +155,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download all benchmark results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: pattern: '*-results-${{ github.sha }}' path: benchmark-results @@ -191,7 +191,7 @@ jobs: cat summary.md >> $GITHUB_STEP_SUMMARY - name: Upload summary - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: benchmark-summary-${{ github.sha }} path: summary.md diff --git a/.github/workflows/pr-gate.yml b/.github/workflows/pr-gate.yml index 53241f6c337f..960936bbef42 100644 --- a/.github/workflows/pr-gate.yml +++ b/.github/workflows/pr-gate.yml @@ -23,7 +23,7 @@ jobs: - name: Fetch latest PR info if: github.event_name == 'pull_request' id: pr - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | @@ -79,7 +79,7 @@ jobs: - name: Enforce rate limit for low-permission actors (optional) if: github.event_name == 'pull_request' && inputs.cool-down-minutes > 0 - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/pr-states.yml b/.github/workflows/pr-states.yml index 288151b8d3e1..da01585d19e0 100644 --- a/.github/workflows/pr-states.yml +++ b/.github/workflows/pr-states.yml @@ -41,7 +41,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Update CI states block in PR body - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd with: script: | const RETRY_ATTEMPTS = 3; diff --git a/.github/workflows/pr-test-amd-extra.yml b/.github/workflows/pr-test-amd-extra.yml index 8c4044f24790..5d020444d13b 100644 --- a/.github/workflows/pr-test-amd-extra.yml +++ b/.github/workflows/pr-test-amd-extra.yml @@ -125,7 +125,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} @@ -157,7 +157,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.sha }} diff --git a/.github/workflows/pr-test-amd-rocm720.yml b/.github/workflows/pr-test-amd-rocm720.yml index 44274d740f47..bf91598c3623 100644 --- a/.github/workflows/pr-test-amd-rocm720.yml +++ b/.github/workflows/pr-test-amd-rocm720.yml @@ -144,7 +144,7 @@ jobs: continue_on_error: ${{ steps.set-continue-on-error.outputs.continue_on_error }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -182,7 +182,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad # On pull_request only the dsv4 jobs run; skip change detection on PRs so the # per-stage outputs stay 'false' and the existing test jobs are gated off. if: steps.run-mode.outputs.run_all_tests != 'true' && github.event_name != 'pull_request' @@ -252,7 +252,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -298,7 +298,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -339,7 +339,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -377,7 +377,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -417,7 +417,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -455,7 +455,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -493,7 +493,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -532,7 +532,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -571,7 +571,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -610,7 +610,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -619,7 +619,7 @@ jobs: - name: Download artifacts if: needs.check-changes.outputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -723,7 +723,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-amd-rocm720-1gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -750,7 +750,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -759,7 +759,7 @@ jobs: - name: Download artifacts if: needs.check-changes.outputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -861,7 +861,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-amd-rocm720-2gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -889,7 +889,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -947,7 +947,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -992,7 +992,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -1033,7 +1033,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -1147,7 +1147,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -1197,7 +1197,7 @@ jobs: runs-on: linux-mi35x-gpu-8 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} diff --git a/.github/workflows/pr-test-amd.yml b/.github/workflows/pr-test-amd.yml index a08d00967e77..6a769ef75743 100644 --- a/.github/workflows/pr-test-amd.yml +++ b/.github/workflows/pr-test-amd.yml @@ -133,7 +133,7 @@ jobs: continue_on_error: ${{ steps.set-continue-on-error.outputs.continue_on_error }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -168,7 +168,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -233,7 +233,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -291,7 +291,7 @@ jobs: runs-on: ${{ format('linux-{0}-2gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -332,7 +332,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -369,7 +369,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -408,7 +408,7 @@ jobs: outputs: stage_a_result: ${{ steps.wait.outputs.result }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - uses: ./.github/actions/wait-for-jobs id: wait with: @@ -436,7 +436,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -472,7 +472,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -511,7 +511,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -551,7 +551,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -591,7 +591,7 @@ jobs: runs-on: ${{ format('linux-{0}-2gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -631,7 +631,7 @@ jobs: runs-on: ${{ format('linux-{0}-1gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -640,7 +640,7 @@ jobs: - name: Download artifacts if: needs.check-changes.outputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -744,7 +744,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-amd-1gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -771,7 +771,7 @@ jobs: runs-on: ${{ format('linux-{0}-2gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -780,7 +780,7 @@ jobs: - name: Download artifacts if: needs.check-changes.outputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -882,7 +882,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-amd-2gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -904,7 +904,7 @@ jobs: outputs: stage_b_result: ${{ steps.wait.outputs.result }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - uses: ./.github/actions/wait-for-jobs id: wait with: @@ -936,7 +936,7 @@ jobs: runs-on: ${{ format('linux-{0}-4gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -994,7 +994,7 @@ jobs: runs-on: ${{ format('linux-{0}-8gpu-sglang', inputs.runner_arch || 'mi325') }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -1040,7 +1040,7 @@ jobs: runs-on: ${{matrix.runner}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} @@ -1082,7 +1082,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || inputs.ref || github.sha }} diff --git a/.github/workflows/pr-test-arm64.yml b/.github/workflows/pr-test-arm64.yml index d49b45c2a9af..061a28fe2bd2 100644 --- a/.github/workflows/pr-test-arm64.yml +++ b/.github/workflows/pr-test-arm64.yml @@ -30,7 +30,7 @@ jobs: main_package: ${{ steps.filter.outputs.main_package || steps.run-mode.outputs.run_all_tests}} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -47,7 +47,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -71,7 +71,7 @@ jobs: runs-on: ubuntu-24.04-arm steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/pr-test-jit-kernel.yml b/.github/workflows/pr-test-jit-kernel.yml index d14c4fc3ba9c..984bbe6e122a 100644 --- a/.github/workflows/pr-test-jit-kernel.yml +++ b/.github/workflows/pr-test-jit-kernel.yml @@ -45,7 +45,7 @@ jobs: runs-on: 1-gpu-h100 timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -61,7 +61,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -85,7 +85,7 @@ jobs: runs-on: 8-gpu-h200 timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -99,7 +99,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -123,7 +123,7 @@ jobs: runs-on: 1-gpu-h100 timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -139,7 +139,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -163,7 +163,7 @@ jobs: runs-on: ${{ fromJson(inputs.runs_on_map)[inputs.runner_config] }} timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -179,7 +179,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true diff --git a/.github/workflows/pr-test-multimodal-gen.yml b/.github/workflows/pr-test-multimodal-gen.yml index b5cf56347a22..d4cb7df93e23 100644 --- a/.github/workflows/pr-test-multimodal-gen.yml +++ b/.github/workflows/pr-test-multimodal-gen.yml @@ -57,12 +57,12 @@ jobs: plan-2gpu: ${{ steps.compute.outputs.plan-2gpu }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' @@ -86,7 +86,7 @@ jobs: matrix: ${{ fromJson(needs.compute-diffusion-partitions.outputs.matrix-1gpu) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -96,7 +96,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -124,7 +124,7 @@ jobs: - name: Upload execution report if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-report-1gpu-${{ matrix.part }} path: python/sglang/multimodal_gen/test/execution_report_*.json @@ -132,7 +132,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-1gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -159,7 +159,7 @@ jobs: matrix: ${{ fromJson(needs.compute-diffusion-partitions.outputs.matrix-2gpu) }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -169,7 +169,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -198,7 +198,7 @@ jobs: - name: Upload execution report if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-report-2gpu-${{ matrix.part }} path: python/sglang/multimodal_gen/test/execution_report_*.json @@ -206,7 +206,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-2gpu-${{ matrix.part }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -226,7 +226,7 @@ jobs: timeout-minutes: 240 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -236,7 +236,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -271,7 +271,7 @@ jobs: timeout-minutes: 240 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -281,7 +281,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -306,7 +306,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-${{ github.job }}-${{ github.run_attempt }} path: diffusion-failures/ @@ -323,7 +323,7 @@ jobs: timeout-minutes: 120 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -333,7 +333,7 @@ jobs: - name: Download artifacts if: inputs.sgl_kernel == 'true' - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -364,17 +364,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' - name: Download all execution reports - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: reports/ pattern: diffusion-report-* diff --git a/.github/workflows/pr-test-musa.yml b/.github/workflows/pr-test-musa.yml index 4f26b57666e2..479527574d94 100644 --- a/.github/workflows/pr-test-musa.yml +++ b/.github/workflows/pr-test-musa.yml @@ -44,7 +44,7 @@ jobs: sgl_kernel: ${{ steps.filter.outputs.sgl_kernel == 'true' || steps.run-mode.outputs.run_all_tests == 'true' }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -63,7 +63,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -112,7 +112,7 @@ jobs: steps: - name: Checkout code timeout-minutes: 10 - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -147,7 +147,7 @@ jobs: steps: - name: Checkout code timeout-minutes: 10 - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -180,7 +180,7 @@ jobs: steps: - name: Checkout code timeout-minutes: 10 - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install dependencies timeout-minutes: 15 @@ -205,7 +205,7 @@ jobs: steps: - name: Checkout code timeout-minutes: 10 - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/pr-test-npu.yml b/.github/workflows/pr-test-npu.yml index f2822495a7e3..6d87f38013be 100644 --- a/.github/workflows/pr-test-npu.yml +++ b/.github/workflows/pr-test-npu.yml @@ -32,7 +32,7 @@ jobs: multimodal_gen: ${{ steps.filter.outputs.multimodal_gen == 'true' || steps.run-mode.outputs.run_all_tests == 'true' }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -51,7 +51,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -101,7 +101,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_910b }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -154,7 +154,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_910b }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -203,7 +203,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -253,7 +253,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -302,7 +302,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Mark repository safe run: | @@ -344,7 +344,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-npu-1-${{ github.run_attempt }} path: diffusion-failures/ @@ -359,7 +359,7 @@ jobs: image: ${{ needs.set-image-config.outputs.CANN_image_a3 }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Mark repository safe run: | @@ -401,7 +401,7 @@ jobs: - name: Upload diffusion failure artifacts if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: diffusion-failures-npu-2-${{ github.run_attempt }} path: diffusion-failures/ diff --git a/.github/workflows/pr-test-rust.yml b/.github/workflows/pr-test-rust.yml index e544d4f1fb03..bf7dbdd16d66 100644 --- a/.github/workflows/pr-test-rust.yml +++ b/.github/workflows/pr-test-rust.yml @@ -45,20 +45,20 @@ jobs: SCCACHE_GHA_ENABLED: "true" steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install rust dependencies run: | bash scripts/ci/cuda/ci_install_gateway_dependencies.sh - name: Configure sccache - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: "v0.12.0" disable_annotations: true - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: sgl-model-gateway shared-key: "rust-cache" @@ -78,7 +78,7 @@ jobs: run: ls -lh sgl-model-gateway/bindings/python/dist/ - name: Upload wheel artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: smg-wheel path: sgl-model-gateway/bindings/python/dist/*.whl @@ -95,7 +95,7 @@ jobs: needs: build-wheel runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-repo @@ -105,12 +105,12 @@ jobs: rm -rf sglang-repo - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.13" - name: Download wheel artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: smg-wheel path: dist/ @@ -135,20 +135,20 @@ jobs: SCCACHE_GHA_ENABLED: "true" steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install dependencies run: | bash scripts/ci/cuda/ci_install_gateway_dependencies.sh - name: Configure sccache - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: "v0.12.0" disable_annotations: true - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: sgl-model-gateway shared-key: "rust-cache" @@ -280,14 +280,14 @@ jobs: cancel-in-progress: false steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install SGLang dependencies run: | bash scripts/ci/cuda/ci_install_dependency.sh - name: Download wheel artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: smg-wheel path: wheel/ @@ -325,7 +325,7 @@ jobs: - name: Upload benchmark results if: matrix.upload_benchmarks && success() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: genai-bench-results-all-policies path: sgl-model-gateway/benchmark_**/ @@ -338,13 +338,13 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Build Docker image (no push) - uses: docker/build-push-action@v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 with: context: . file: docker/gateway.Dockerfile @@ -366,10 +366,10 @@ jobs: timeout-minutes: 30 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.12" @@ -384,10 +384,10 @@ jobs: kubectl version --client - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Build smg-gateway:test image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 with: context: sgl-model-gateway file: sgl-model-gateway/e2e_test/k8s_integration/Dockerfile.gateway @@ -445,10 +445,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download benchmark results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: genai-bench-results-all-policies diff --git a/.github/workflows/pr-test-sgl-kernel.yml b/.github/workflows/pr-test-sgl-kernel.yml index 272b0951f8a4..f005f3896d94 100644 --- a/.github/workflows/pr-test-sgl-kernel.yml +++ b/.github/workflows/pr-test-sgl-kernel.yml @@ -34,7 +34,7 @@ jobs: runs-on: 1-gpu-h100 timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -48,7 +48,7 @@ jobs: rm -rf sgl-kernel/dist/* || true - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -69,7 +69,7 @@ jobs: runs-on: 1-gpu-h100 timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -83,7 +83,7 @@ jobs: rm -rf sgl-kernel/dist/* || true - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -116,7 +116,7 @@ jobs: runs-on: ${{ fromJson(inputs.runs_on_map)[inputs.runner_config] }} timeout-minutes: 240 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -130,7 +130,7 @@ jobs: rm -rf sgl-kernel/dist/* || true - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -153,7 +153,7 @@ jobs: # if: inputs.sgl_kernel == 'true' # runs-on: x64-cu13-kernel-tests # steps: - # - uses: actions/checkout@v4 + # - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # - name: Cleanup # run: | @@ -161,7 +161,7 @@ jobs: # rm -rf sgl-kernel/dist/* || true # - name: Download CUDA 13.0 artifacts - # uses: actions/download-artifact@v4 + # uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # with: # path: sgl-kernel/dist/ # merge-multiple: true diff --git a/.github/workflows/pr-test-sgl-router.yml b/.github/workflows/pr-test-sgl-router.yml index 585ff2749782..fe8670778ab1 100644 --- a/.github/workflows/pr-test-sgl-router.yml +++ b/.github/workflows/pr-test-sgl-router.yml @@ -45,7 +45,7 @@ jobs: paths_changed: ${{ steps.paths.outputs.sgl_router }} has_run_ci_label: ${{ steps.label.outputs.has_run_ci }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # `dorny/paths-filter` computes the diff against the PR base # (for pull_request) or the push's `before` SHA (for push) and # exposes `sgl_router=true|false` on whether any tracked path @@ -53,7 +53,7 @@ jobs: # the gate is observable. - name: Detect sgl-router path changes id: paths - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad with: filters: | sgl_router: @@ -106,7 +106,7 @@ jobs: # cannot pin a SHA. Bumps to this constant must be a deliberate PR. DYNAMO_TOKENIZERS_EXPECTED_REV: "1efdd4dcb901caeae636131321094090d252c8d6" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Verify dynamo-* SHA pin run: | @@ -138,7 +138,7 @@ jobs: - name: Configure sccache id: sccache continue-on-error: true - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: "v0.12.0" disable_annotations: true @@ -150,7 +150,7 @@ jobs: echo "RUSTC_WRAPPER=" >> "$GITHUB_ENV" - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: experimental/sgl-router shared-key: "sgl-router-cache" @@ -194,7 +194,7 @@ jobs: SCCACHE_GHA_ENABLED: "true" timeout-minutes: 30 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install OS deps (libssl, pkg-config) run: | @@ -208,7 +208,7 @@ jobs: - name: Configure sccache id: sccache continue-on-error: true - uses: mozilla-actions/sccache-action@v0.0.9 + uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba with: version: "v0.12.0" disable_annotations: true @@ -220,7 +220,7 @@ jobs: echo "RUSTC_WRAPPER=" >> "$GITHUB_ENV" - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: experimental/sgl-router shared-key: "sgl-router-cache" @@ -307,9 +307,9 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 30 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Install kind run: | curl -Lo /tmp/kind https://kind.sigs.k8s.io/dl/v0.24.0/kind-linux-amd64 @@ -354,11 +354,11 @@ jobs: runs-on: 2-gpu-h100 timeout-minutes: 45 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install Rust toolchain run: bash scripts/ci/utils/install_rust_protoc.sh - name: Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: experimental/sgl-router shared-key: "sgl-router-cache" diff --git a/.github/workflows/pr-test-xeon.yml b/.github/workflows/pr-test-xeon.yml index b593a1dcc4ec..f7ba1186cd05 100644 --- a/.github/workflows/pr-test-xeon.yml +++ b/.github/workflows/pr-test-xeon.yml @@ -38,7 +38,7 @@ jobs: sudo mkdir -p ${{ github.workspace }} sudo chown -R $(id -u):$(id -g) ${{ github.workspace }} - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: clean: false ref: ${{ inputs.ref || github.ref }} @@ -58,7 +58,7 @@ jobs: - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -95,7 +95,7 @@ jobs: sudo mkdir -p ${{ github.workspace }} sudo chown $(id -u):$(id -g) ${{ github.workspace }} - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: clean: false ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/pr-test-xpu.yml b/.github/workflows/pr-test-xpu.yml index 1099469560d7..e3d5ebf58ae5 100644 --- a/.github/workflows/pr-test-xpu.yml +++ b/.github/workflows/pr-test-xpu.yml @@ -31,7 +31,7 @@ jobs: main_package: ${{ steps.filter.outputs.main_package || steps.run-mode.outputs.run_all_tests }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.ref || github.ref }} @@ -49,7 +49,7 @@ jobs: fi - name: Detect file changes id: filter - uses: dorny/paths-filter@v3 + uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad if: steps.run-mode.outputs.run_all_tests != 'true' with: filters: | @@ -87,7 +87,7 @@ jobs: chown -R "$(id -u):$(id -g)" /w || true - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 ref: ${{ inputs.ref || github.ref }} @@ -163,7 +163,7 @@ jobs: chown -R "$(id -u):$(id -g)" /w || true - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml index 0f183b20c727..1d5623c8a5c6 100644 --- a/.github/workflows/pr-test.yml +++ b/.github/workflows/pr-test.yml @@ -107,7 +107,7 @@ jobs: outputs: base_a_result: ${{ steps.wait.outputs.result }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - uses: ./.github/actions/check-maintenance @@ -136,7 +136,7 @@ jobs: outputs: base_b_result: ${{ steps.wait.outputs.result }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - uses: ./.github/actions/check-maintenance @@ -280,7 +280,7 @@ jobs: df -h - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.git_ref || github.sha }} @@ -289,12 +289,12 @@ jobs: - uses: ./.github/actions/check-maintenance - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # Needed by setuptools-rust to build the bundled native gRPC extension # (rust/sglang-grpc) when installing the main `sglang` wheel from source. @@ -303,7 +303,7 @@ jobs: run: bash scripts/ci/utils/install_rust_protoc.sh - name: Rust cache (sglang-grpc) - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 with: workspaces: rust/sglang-grpc shared-key: "sglang-grpc-cpu" @@ -321,7 +321,7 @@ jobs: # Hub occasionally returns 429s. Persist the HF cache in GitHub's cache # storage (rolling key + restore-keys) so warm runs never hit the network. - name: Cache HF hub - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 with: path: ${{ github.workspace }}/.hf-cache key: hf-cpu-${{ matrix.partition }}-${{ github.run_id }} diff --git a/.github/workflows/release-branch-cut.yml b/.github/workflows/release-branch-cut.yml index 7adde9baef36..d9c70cab427e 100644 --- a/.github/workflows/release-branch-cut.yml +++ b/.github/workflows/release-branch-cut.yml @@ -29,7 +29,7 @@ jobs: branch_exists: ${{ steps.check_exists.outputs.branch_exists }} steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/release-docker-amd-miles-rocm700-nightly.yml b/.github/workflows/release-docker-amd-miles-rocm700-nightly.yml index 73d6f88e1ba0..503e86703eb5 100644 --- a/.github/workflows/release-docker-amd-miles-rocm700-nightly.yml +++ b/.github/workflows/release-docker-amd-miles-rocm700-nightly.yml @@ -23,7 +23,7 @@ jobs: sglang_image_tag: v0.5.10-rocm700-mi30x steps: - name: Checkout miles repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: radixark/miles ref: main @@ -37,7 +37,7 @@ jobs: run: echo "sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} @@ -63,7 +63,7 @@ jobs: echo "${{ env.IMAGE_TAG }}" > "image-tag/${{ matrix.gpu_arch }}.txt" - name: Upload image tag artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: image-tag-${{ matrix.gpu_arch }} path: image-tag/${{ matrix.gpu_arch }}.txt @@ -80,7 +80,7 @@ jobs: gpu_arch: ["gfx942"] steps: - name: Download image tag artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: image-tag-${{ matrix.gpu_arch }} @@ -94,7 +94,7 @@ jobs: echo "IMAGE_TAG=${image_tag}" >> $GITHUB_ENV - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} diff --git a/.github/workflows/release-docker-amd-miles-rocm720-nightly.yml b/.github/workflows/release-docker-amd-miles-rocm720-nightly.yml index 42de726e50ed..3dddc4e9ec10 100644 --- a/.github/workflows/release-docker-amd-miles-rocm720-nightly.yml +++ b/.github/workflows/release-docker-amd-miles-rocm720-nightly.yml @@ -23,7 +23,7 @@ jobs: sglang_image_tag: v0.5.10-rocm720-mi35x steps: - name: Checkout miles repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: radixark/miles ref: main @@ -37,7 +37,7 @@ jobs: run: echo "sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} @@ -63,7 +63,7 @@ jobs: echo "${{ env.IMAGE_TAG }}" > "image-tag/${{ matrix.gpu_arch }}.txt" - name: Upload image tag artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: image-tag-${{ matrix.gpu_arch }} path: image-tag/${{ matrix.gpu_arch }}.txt @@ -80,7 +80,7 @@ jobs: gpu_arch: ["gfx950"] steps: - name: Download image tag artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: image-tag-${{ matrix.gpu_arch }} @@ -94,7 +94,7 @@ jobs: echo "IMAGE_TAG=${image_tag}" >> $GITHUB_ENV - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} diff --git a/.github/workflows/release-docker-amd-nightly.yml b/.github/workflows/release-docker-amd-nightly.yml index 5cd04909e4ec..0dfac6cb73a2 100644 --- a/.github/workflows/release-docker-amd-nightly.yml +++ b/.github/workflows/release-docker-amd-nightly.yml @@ -24,12 +24,12 @@ jobs: build_type: ['all'] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 # Required for git describe to find tags - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" @@ -60,7 +60,7 @@ jobs: echo "Pretend version for pip: ${PRETEND_VERSION}" - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} @@ -100,14 +100,14 @@ jobs: echo "${{ env.IMAGE_TAG }}" > "image-tag/${{ matrix.gpu_arch }}.txt" - name: Upload image tag artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: image-tag-${{ matrix.gpu_arch }} path: image-tag/${{ matrix.gpu_arch }}.txt retention-days: 1 - name: Login to Docker Hub (lmsys) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -135,7 +135,7 @@ jobs: gpu_arch: ['gfx942', 'gfx950'] steps: - name: Download image tag artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: image-tag-${{ matrix.gpu_arch }} @@ -150,7 +150,7 @@ jobs: echo "Resolved IMAGE_TAG=${image_tag}" - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} @@ -177,7 +177,7 @@ jobs: # build_type: ['all'] # steps: # - name: Checkout repository - # uses: actions/checkout@v4 + # uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # with: # fetch-depth: 0 # Required for git describe to find tags @@ -200,7 +200,7 @@ jobs: # echo "Detected version: ${VERSION}" # - name: Login to Docker Hub - # uses: docker/login-action@v2 + # uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # with: # username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} # password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} diff --git a/.github/workflows/release-docker-amd-rocm720-nightly.yml b/.github/workflows/release-docker-amd-rocm720-nightly.yml index cbad676b94a3..f2a22488fbac 100644 --- a/.github/workflows/release-docker-amd-rocm720-nightly.yml +++ b/.github/workflows/release-docker-amd-rocm720-nightly.yml @@ -33,12 +33,12 @@ jobs: build_type: ['all'] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 # Required for git describe to find tags - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" @@ -69,7 +69,7 @@ jobs: echo "Pretend version for pip: ${PRETEND_VERSION}" - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} @@ -109,14 +109,14 @@ jobs: echo "${{ env.IMAGE_TAG }}" > "image-tag/${{ matrix.gpu_arch }}.txt" - name: Upload image tag artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: image-tag-${{ matrix.gpu_arch }} path: image-tag/${{ matrix.gpu_arch }}.txt retention-days: 1 - name: Login to Docker Hub (lmsys) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -144,7 +144,7 @@ jobs: gpu_arch: ['gfx942-rocm720', 'gfx950-rocm720'] steps: - name: Download image tag artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: image-tag-${{ matrix.gpu_arch }} @@ -159,7 +159,7 @@ jobs: echo "Resolved IMAGE_TAG=${image_tag}" - name: Login to Docker Hub (AMD) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_AMD_USERNAME }} password: ${{ secrets.DOCKERHUB_AMD_TOKEN }} diff --git a/.github/workflows/release-docker-amd.yml b/.github/workflows/release-docker-amd.yml index 6920338014f6..d7e340b8a0e5 100644 --- a/.github/workflows/release-docker-amd.yml +++ b/.github/workflows/release-docker-amd.yml @@ -21,10 +21,10 @@ jobs: build_type: ['all'] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/release-docker-dev.yml b/.github/workflows/release-docker-dev.yml index b48126e8c169..0b5b7543f7d4 100644 --- a/.github/workflows/release-docker-dev.yml +++ b/.github/workflows/release-docker-dev.yml @@ -163,11 +163,11 @@ jobs: cuda: ${{ fromJson(needs.prepare.outputs.overlay_cudas_json) }} steps: - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/release-docker-gateway.yml b/.github/workflows/release-docker-gateway.yml index 3b5e5a68f17b..5cf1e3137b80 100644 --- a/.github/workflows/release-docker-gateway.yml +++ b/.github/workflows/release-docker-gateway.yml @@ -13,16 +13,16 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/release-docker-intel-xpu-nightly.yml b/.github/workflows/release-docker-intel-xpu-nightly.yml index 1daef946cb8b..0fa13830a92e 100644 --- a/.github/workflows/release-docker-intel-xpu-nightly.yml +++ b/.github/workflows/release-docker-intel-xpu-nightly.yml @@ -15,7 +15,7 @@ jobs: environment: 'prod' steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-nightly-build fetch-depth: 0 @@ -37,7 +37,7 @@ jobs: echo "Image tag: ${image_tag}" - name: Login to Docker Hub (Intel) - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_INTEL_USERNAME }} password: ${{ secrets.DOCKERHUB_INTEL_TOKEN }} diff --git a/.github/workflows/release-docker-npu-nightly.yml b/.github/workflows/release-docker-npu-nightly.yml index 39ade16a329d..208c51d36949 100644 --- a/.github/workflows/release-docker-npu-nightly.yml +++ b/.github/workflows/release-docker-npu-nightly.yml @@ -23,7 +23,7 @@ jobs: device_type: ["910b", "a3"] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Free up disk space uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 @@ -32,11 +32,11 @@ jobs: docker-images: false - name: Setup Docker buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Docker meta id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 with: images: | lmsysorg/sglang @@ -52,7 +52,7 @@ jobs: # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Log into docker hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 if: ${{ github.repository == 'sgl-project/sglang' && github.event_name != 'pull_request' }} with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -61,16 +61,16 @@ jobs: # Enable Docker multi-architecture build environment # Emulate non-native architectures - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # Required for building and pushing multi-arch Docker images - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # Build and push Docker image with Buildx (don't push on PR) # https://github.com/docker/build-push-action - name: Build and push Docker image id: build-and-push - uses: docker/build-push-action@v6 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 with: context: docker file: docker/npu.Dockerfile diff --git a/.github/workflows/release-docker-npu.yml b/.github/workflows/release-docker-npu.yml index 30c3a06b3ce5..fb172ca24d10 100644 --- a/.github/workflows/release-docker-npu.yml +++ b/.github/workflows/release-docker-npu.yml @@ -18,7 +18,7 @@ jobs: device_type: ["910b", "a3"] steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Free up disk space uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 @@ -29,7 +29,7 @@ jobs: # push with tag - name: Docker meta id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 with: images: | lmsysorg/sglang @@ -41,7 +41,7 @@ jobs: # Login against a Docker registry except on PR # https://github.com/docker/login-action - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc if: ${{ github.repository == 'sgl-project/sglang' && github.event_name != 'pull_request' }} with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -70,14 +70,14 @@ jobs: # Enable Docker multi-architecture build environment # Emulate non-native architectures - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # Required for building and pushing multi-arch Docker images - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f - name: Build and push Docker image id: build-and-push - uses: docker/build-push-action@v6 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 with: context: docker file: docker/npu.Dockerfile diff --git a/.github/workflows/release-docker-xeon.yml b/.github/workflows/release-docker-xeon.yml index cde5ad15ed3b..6a7c9ba67cac 100644 --- a/.github/workflows/release-docker-xeon.yml +++ b/.github/workflows/release-docker-xeon.yml @@ -20,10 +20,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/release-pypi-gateway.yml b/.github/workflows/release-pypi-gateway.yml index 7faac68c674c..38570364efa8 100644 --- a/.github/workflows/release-pypi-gateway.yml +++ b/.github/workflows/release-pypi-gateway.yml @@ -46,7 +46,7 @@ jobs: target: aarch64 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-repo @@ -58,7 +58,7 @@ jobs: shell: bash - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.13" architecture: ${{ matrix.python-architecture || 'x64' }} @@ -75,7 +75,7 @@ jobs: run: choco install protoc -y - name: Build wheels - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b with: working-directory: bindings/python target: ${{ matrix.target }} @@ -110,7 +110,7 @@ jobs: - name: Check packages run: twine check --strict bindings/python/dist/* - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: packages-${{ matrix.os }}-${{ matrix.target }}-${{ matrix.manylinux || 'auto' }} path: bindings/python/dist/ @@ -119,7 +119,7 @@ jobs: name: Build SDist runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: path: sglang-repo @@ -130,19 +130,19 @@ jobs: ls -alt - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.13" - name: Build SDist - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b with: working-directory: bindings/python command: sdist args: --out dist rust-toolchain: stable - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: sdist path: bindings/python/dist/*.tar.gz @@ -153,7 +153,7 @@ jobs: needs: [build, build-sdist] runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist merge-multiple: true diff --git a/.github/workflows/release-pypi-nightly.yml b/.github/workflows/release-pypi-nightly.yml index f94a316bfc58..9f144fce35fd 100644 --- a/.github/workflows/release-pypi-nightly.yml +++ b/.github/workflows/release-pypi-nightly.yml @@ -28,14 +28,14 @@ jobs: commit_hash: ${{ steps.build.outputs.commit_hash }} build_date: ${{ steps.build.outputs.build_date }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: # Use commit from: 1) Docker workflow, 2) manual input, 3) latest main ref: ${{ github.event.client_payload.commit_sha || inputs.commit_sha || github.sha }} fetch-depth: 0 # Need full history for setuptools-scm - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" @@ -97,7 +97,7 @@ jobs: echo "build_date=${BUILD_DATE}" >> $GITHUB_OUTPUT - name: Upload wheel artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: nightly-wheel path: python/dist/*.whl @@ -117,10 +117,10 @@ jobs: matrix: cuda_version: ['129', '130'] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download wheel artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: nightly-wheel path: dist/ @@ -131,7 +131,7 @@ jobs: ls -lh dist/ - name: Create GitHub Release for nightly wheel - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: nightly-${{ needs.build-nightly-wheel.outputs.build_date }}-${{ needs.build-nightly-wheel.outputs.commit_hash }} name: Nightly Build ${{ needs.build-nightly-wheel.outputs.build_date }} (${{ needs.build-nightly-wheel.outputs.commit_hash }}) @@ -155,7 +155,7 @@ jobs: WHL_TOKEN: ${{ secrets.GH_PAT_FOR_WHL_RELEASE }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" diff --git a/.github/workflows/release-pypi-pr.yml b/.github/workflows/release-pypi-pr.yml index 46632b8f3719..3bcd6fca3629 100644 --- a/.github/workflows/release-pypi-pr.yml +++ b/.github/workflows/release-pypi-pr.yml @@ -21,13 +21,13 @@ jobs: commit_hash: ${{ steps.gen_version.outputs.commit_hash }} build_date: ${{ steps.gen_version.outputs.build_date }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: refs/pull/${{ inputs.pr_number }}/head fetch-depth: 0 # Need full history for version generation - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" @@ -93,7 +93,7 @@ jobs: ls -lh dist/ - name: Upload wheel artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: pr-wheel-${{ inputs.pr_number }} path: python/dist/*.whl @@ -104,10 +104,10 @@ jobs: runs-on: ubuntu-latest environment: 'prod' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download wheel artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: name: pr-wheel-${{ inputs.pr_number }} path: dist/ @@ -118,7 +118,7 @@ jobs: ls -lh dist/ - name: Create GitHub Release for PR wheel - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: pr-${{ inputs.pr_number }}-${{ needs.build-pr-wheel.outputs.build_date }}-${{ needs.build-pr-wheel.outputs.commit_hash }} name: "PR #${{ inputs.pr_number }} Build (${{ needs.build-pr-wheel.outputs.commit_hash }})" @@ -158,7 +158,7 @@ jobs: WHL_TOKEN: ${{ secrets.GH_PAT_FOR_WHL_RELEASE }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml index 050f1c0445c0..23b266f1187e 100644 --- a/.github/workflows/release-pypi.yml +++ b/.github/workflows/release-pypi.yml @@ -34,13 +34,13 @@ jobs: sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: fetch-depth: 0 # Required for setuptools-scm to determine version from tags submodules: "recursive" - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -50,7 +50,7 @@ jobs: run: sudo bash scripts/ci/utils/install_protoc.sh - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 - name: Build wheel env: @@ -82,7 +82,7 @@ jobs: mv dist-repaired/*.whl dist/ - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-py${{ matrix.python-version }}-${{ matrix.arch }} path: python/dist/*.whl @@ -94,7 +94,7 @@ jobs: environment: "prod" steps: - name: Download all wheels - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist/ merge-multiple: true @@ -104,7 +104,7 @@ jobs: run: ls -lh dist/ - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.10" diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 89b8bcac145d..39ab2527d6ae 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -37,7 +37,7 @@ jobs: echo "Version validated: v$VERSION" - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ github.event.inputs.ref }} fetch-depth: 0 diff --git a/.github/workflows/release-whl-deepgemm.yml b/.github/workflows/release-whl-deepgemm.yml index c0bddc9307ba..4089cea46caf 100644 --- a/.github/workflows/release-whl-deepgemm.yml +++ b/.github/workflows/release-whl-deepgemm.yml @@ -53,10 +53,10 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Checkout DeepGEMM - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: sgl-project/DeepGEMM ref: ${{ inputs.branch || 'dev' }} @@ -74,7 +74,7 @@ jobs: ./scripts/build_sgl_deep_gemm.sh "${{ matrix.python-version }}" "${{ matrix.cuda-version }}" "${{ github.workspace }}/DeepGEMM" "${{ matrix.arch }}" - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: deepgemm-wheel-cuda${{ matrix.cuda-version }}-${{ matrix.arch }} path: DeepGEMM/dist/*.whl @@ -94,10 +94,10 @@ jobs: runs-on: ${{ matrix.runner }} timeout-minutes: 120 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Checkout DeepGEMM - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: sgl-project/DeepGEMM ref: ${{ inputs.branch || 'dev' }} @@ -105,7 +105,7 @@ jobs: submodules: recursive - name: Download wheel - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist/ merge-multiple: true @@ -132,17 +132,17 @@ jobs: needs: [build-cu129-matrix, test-cu129] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist/ merge-multiple: true pattern: deepgemm-wheel-cuda12.9-* - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: v${{ inputs.version }} repository: sgl-project/whl @@ -188,10 +188,10 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Checkout DeepGEMM - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: sgl-project/DeepGEMM ref: ${{ inputs.branch || 'dev' }} @@ -199,7 +199,7 @@ jobs: submodules: recursive - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -215,13 +215,13 @@ jobs: # PyPI upload moved to release-cu130 so it is gated on test-cu130. - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: deepgemm-wheel-cuda${{ matrix.cuda-version }}-${{ matrix.arch }} path: DeepGEMM/dist/*.whl - name: Upload PyPI artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: deepgemm-pypi-cuda${{ matrix.cuda-version }}-${{ matrix.arch }} path: DeepGEMM/dist-pypi/*.whl @@ -244,10 +244,10 @@ jobs: runs-on: ${{ matrix.runner }} timeout-minutes: 120 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Checkout DeepGEMM - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: repository: sgl-project/DeepGEMM ref: ${{ inputs.branch || 'dev' }} @@ -255,7 +255,7 @@ jobs: submodules: recursive - name: Download wheel - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist/ merge-multiple: true @@ -282,17 +282,17 @@ jobs: needs: [build-cu130-matrix, test-cu130] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist/ merge-multiple: true pattern: deepgemm-wheel-cuda13.0-* - name: Download PyPI artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: dist-pypi/ merge-multiple: true @@ -304,7 +304,7 @@ jobs: python3 -m twine upload --skip-existing dist-pypi/* -u __token__ -p ${{ secrets.SGL_DEEP_GEMM_PYPI_TOKEN }} - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: v${{ inputs.version }} repository: sgl-project/whl diff --git a/.github/workflows/release-whl-kernel.yml b/.github/workflows/release-whl-kernel.yml index 98a89df321d1..118b5e2ad923 100644 --- a/.github/workflows/release-whl-kernel.yml +++ b/.github/workflows/release-whl-kernel.yml @@ -62,13 +62,13 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: submodules: "recursive" ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -82,7 +82,7 @@ jobs: NVCC_THREADS: 8 - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-python${{ matrix.python-version }}-cuda${{ matrix.cuda-version }}${{ matrix.arch == 'aarch64' && '-aarch64' || '' }} path: sgl-kernel/dist/* @@ -91,12 +91,12 @@ jobs: needs: build-cu129-matrix runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -113,7 +113,7 @@ jobs: fi - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: ${{ steps.set_tag_name.outputs.tag_name }} repository: sgl-project/whl @@ -163,13 +163,13 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: submodules: "recursive" ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -214,7 +214,7 @@ jobs: python3 -m twine upload --skip-existing dist-pypi/* -u __token__ -p ${{ secrets.PYPI_TOKEN_SGLANG_KERNEL }} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-python${{ matrix.python-version }}-cuda${{ matrix.cuda-version }}${{ matrix.arch == 'aarch64' && '-aarch64' || '' }} path: sgl-kernel/dist/* @@ -223,12 +223,12 @@ jobs: needs: build-cu130-matrix runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -245,7 +245,7 @@ jobs: fi - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: ${{ steps.set_tag_name.outputs.tag_name }} repository: sgl-project/whl @@ -289,13 +289,13 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: submodules: "recursive" ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: ${{ matrix.python-version }} @@ -307,7 +307,7 @@ jobs: ./build_rocm.sh "${{ matrix.rocm-version }}" - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-python${{ matrix.python-version }}-rocm${{ matrix.rocm-version }} path: sgl-kernel/dist/* @@ -316,12 +316,12 @@ jobs: needs: build-rocm-matrix runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -338,7 +338,7 @@ jobs: fi - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: ${{ steps.set_tag_name.outputs.tag_name }} repository: sgl-project/whl @@ -367,12 +367,12 @@ jobs: needs: build-rocm-matrix runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_number && format('refs/pull/{0}/head', inputs.pr_number) || '' }} - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -389,7 +389,7 @@ jobs: fi - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: ${{ steps.set_tag_name.outputs.tag_name }} repository: sgl-project/whl @@ -433,7 +433,7 @@ jobs: docker run --rm -v "${{ github.workspace }}:/workspace" alpine:3 \ sh -c 'rm -rf /workspace/..?* /workspace/.[!.]* /workspace/*' || true - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: submodules: "recursive" @@ -460,7 +460,7 @@ jobs: bash scripts/ci/musa/rename_wheels_musa.sh ${{ matrix.musa-version }} sgl-kernel/dist - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: wheel-python${{ matrix.python-version }}-musa${{ matrix.musa-version }} path: sgl-kernel/dist/* @@ -469,10 +469,10 @@ jobs: needs: build-musa43 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 with: path: sgl-kernel/dist/ merge-multiple: true @@ -489,7 +489,7 @@ jobs: fi - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 with: tag_name: ${{ steps.set_tag_name.outputs.tag_name }} repository: sgl-project/whl diff --git a/.github/workflows/rerun-test.yml b/.github/workflows/rerun-test.yml index 3441d2807c57..37a5bd314268 100644 --- a/.github/workflows/rerun-test.yml +++ b/.github/workflows/rerun-test.yml @@ -83,7 +83,7 @@ jobs: SGLANG_CI_RDMA_ALL_DEVICES: ${{ inputs.rdma_devices }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || github.sha }} @@ -169,7 +169,7 @@ jobs: RUNNER_LABELS: ${{ inputs.runs_on }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || github.sha }} @@ -236,7 +236,7 @@ jobs: df -h - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: ref: ${{ inputs.pr_head_sha || github.sha }} @@ -255,12 +255,12 @@ jobs: - uses: ./.github/actions/check-maintenance - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # Needed by setuptools-rust to build the bundled native gRPC extension # (rust/sglang-grpc) when installing the main `sglang` wheel from source. @@ -316,10 +316,10 @@ jobs: cancel-in-progress: false steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/retag-docker.yml b/.github/workflows/retag-docker.yml index 633a275ed033..f2a5348f06bd 100644 --- a/.github/workflows/retag-docker.yml +++ b/.github/workflows/retag-docker.yml @@ -17,7 +17,7 @@ jobs: environment: "prod" steps: - name: Login to Docker Hub - uses: docker/login-action@v2 + uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/runner-utilization.yml b/.github/workflows/runner-utilization.yml index 3cf2856f61e4..4ced9c2cc3e6 100644 --- a/.github/workflows/runner-utilization.yml +++ b/.github/workflows/runner-utilization.yml @@ -40,10 +40,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/slash-command-handler.yml b/.github/workflows/slash-command-handler.yml index 5e0a8c11531c..c972819c904d 100644 --- a/.github/workflows/slash-command-handler.yml +++ b/.github/workflows/slash-command-handler.yml @@ -72,7 +72,7 @@ jobs: echo "Commenter ${{ github.event.comment.user.login }} permission: $PERM" - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: # For non-fork PRs: checkout PR branch by name # For fork PRs with trusted commenter: checkout via refs/pull/N/head @@ -80,7 +80,7 @@ jobs: ref: ${{ steps.pr.outputs.is_fork == 'false' && steps.pr.outputs.ref || (steps.perm.outputs.safe_to_checkout_pr == 'true' && steps.pr.outputs.pr_ref || '') }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.github/workflows/stress-test.yml b/.github/workflows/stress-test.yml index 241c097e8f8d..69bcbfd2a02f 100644 --- a/.github/workflows/stress-test.yml +++ b/.github/workflows/stress-test.yml @@ -20,7 +20,7 @@ jobs: runs-on: 8-gpu-h200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install dependencies run: | @@ -37,7 +37,7 @@ jobs: - name: Upload results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: stress-test-results path: | diff --git a/.github/workflows/sync-lmsys-sglang-blogs.yml b/.github/workflows/sync-lmsys-sglang-blogs.yml index 7c82d81ee90c..c5ecc2f4e0da 100644 --- a/.github/workflows/sync-lmsys-sglang-blogs.yml +++ b/.github/workflows/sync-lmsys-sglang-blogs.yml @@ -15,10 +15,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: "3.11" diff --git a/.github/workflows/trivy-scan-dev.yml b/.github/workflows/trivy-scan-dev.yml index f354765978f1..35f8719b5d9d 100644 --- a/.github/workflows/trivy-scan-dev.yml +++ b/.github/workflows/trivy-scan-dev.yml @@ -28,10 +28,10 @@ jobs: run: sudo rm -rf "$GITHUB_WORKSPACE"/* || true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 with: image-ref: 'docker.io/lmsysorg/sglang:${{ matrix.tag }}' scanners: 'vuln' @@ -42,7 +42,7 @@ jobs: skip-dirs: 'usr/local/go,opt/nvidia' - name: Upload Trivy scan results to GitHub Security - uses: github/codeql-action/upload-sarif@v4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd if: always() && hashFiles(format('trivy-results-{0}.sarif', matrix.tag)) != '' with: sarif_file: 'trivy-results-${{ matrix.tag }}.sarif' @@ -50,7 +50,7 @@ jobs: - name: Run Trivy (table output for logs) if: success() - uses: aquasecurity/trivy-action@v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 with: image-ref: 'docker.io/lmsysorg/sglang:${{ matrix.tag }}' scanners: 'vuln' diff --git a/.github/workflows/weekly-test-nvidia.yml b/.github/workflows/weekly-test-nvidia.yml index e897050610c8..59751ca8ed0e 100644 --- a/.github/workflows/weekly-test-nvidia.yml +++ b/.github/workflows/weekly-test-nvidia.yml @@ -34,7 +34,7 @@ jobs: RUNNER_LABELS: 8-gpu-h200 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 - name: Install dependencies run: | diff --git a/.github/workflows/weekly-update-est-time.yml b/.github/workflows/weekly-update-est-time.yml index b61a66921106..2ccd450e6641 100644 --- a/.github/workflows/weekly-update-est-time.yml +++ b/.github/workflows/weekly-update-est-time.yml @@ -14,12 +14,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 with: token: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.10' diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 9b29ba409725..d8f710b16b18 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -3,7 +3,7 @@ exclude: ^(python/sglang/multimodal_gen/csrc|python/sglang/jit_kernel/flash_atte repos: - repo: https://github.com/pre-commit/pre-commit-hooks - rev: v6.0.0 + rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c hooks: - id: check-symlinks - id: destroyed-symlinks @@ -26,12 +26,12 @@ repos: - id: debug-statements - id: no-commit-to-branch - repo: https://github.com/PyCQA/isort - rev: 7.0.0 + rev: 0a09c783808cfe77bb3269250f663ff733d23302 hooks: - id: isort exclude: '^python/sglang/srt/grpc/.*_pb2\.py$|^python/sglang/srt/grpc/.*_pb2_grpc\.py$|^python/sglang/srt/grpc/.*_pb2\.pyi$|^python/sglang/srt/grpc/.*_pb2_grpc\.pyi$' - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.1 + rev: 65dbdb59d2f2d9c3bdc343c566821ad3319ddaa3 hooks: - id: ruff args: @@ -48,23 +48,23 @@ repos: python/sglang/srt/grpc/.*_pb2_grpc\.pyi$| )$ - repo: https://github.com/psf/black - rev: 26.1.0 + rev: 87928e6d6761a4a6d22250e1fee5601b3998086e hooks: - id: black-jupyter exclude: '^python/sglang/srt/grpc/.*_pb2\.py$|^python/sglang/srt/grpc/.*_pb2_grpc\.py$|^python/sglang/srt/grpc/.*_pb2\.pyi$|^python/sglang/srt/grpc/.*_pb2_grpc\.pyi$' - repo: https://github.com/codespell-project/codespell - rev: v2.4.1 + rev: 57b21406f092110c18776e39b0bda50d37c945c8 hooks: - id: codespell args: ['--config', '.codespellrc'] - repo: https://github.com/pre-commit/mirrors-clang-format - rev: v20.1.7 + rev: 182152eb8c5ce1cf5299b956b04392c86bd8a126 hooks: - id: clang-format types_or: [c++, cuda] args: [--style=file, --verbose] - repo: https://github.com/kynan/nbstripout - rev: 0.9.0 + rev: 34071b78c181af3bf5af955c1426466e096fc3db hooks: - id: nbstripout args: @@ -125,7 +125,7 @@ repos: files: ^experimental/sgl-router/.*\.rs$ pass_filenames: false - repo: https://github.com/lycheeverse/lychee.git - rev: lychee-v0.22.0 + rev: 0a54079d01ba9a4ff9850d8e46d3ba64743d2c8d hooks: - id: lychee name: check doc links (offline) diff --git a/3rdparty/amd/wheel/sglang/pyproject.toml b/3rdparty/amd/wheel/sglang/pyproject.toml index 4d375f567be7..253a2c041f3a 100644 --- a/3rdparty/amd/wheel/sglang/pyproject.toml +++ b/3rdparty/amd/wheel/sglang/pyproject.toml @@ -19,7 +19,7 @@ dependencies = ["aiohttp", "requests", "tqdm", "numpy", "IPython", "setproctitle runtime_common = [ "IPython", "aiohttp", - "anthropic>=0.20.0", + "anthropic==0.124.0", "blobfile==3.0.0", "build", "compressed-tensors", @@ -31,7 +31,7 @@ runtime_common = [ "hf_transfer", "huggingface_hub", "interegular", - "llguidance>=0.7.11,<0.8.0", + "llguidance==0.7.30", "modelscope", "msgspec", "ninja", @@ -43,13 +43,13 @@ runtime_common = [ "packaging", "partial_json_parser", "pillow", - "prometheus-client>=0.20.0", + "prometheus-client==0.26.0", "psutil", "py-spy", "pybase64", "pydantic", "python-multipart", - "pyzmq>=25.1.2", + "pyzmq==25.1.2", "requests", "scipy", "sentencepiece", @@ -63,7 +63,7 @@ runtime_common = [ "uvicorn", "uvloop", "xgrammar==0.2.1", - "smg-grpc-servicer>=0.5.0", + "smg-grpc-servicer==0.8.0", ] # ROCm specific packages (https://repo.radeon.com/rocm/manylinux/) @@ -71,21 +71,21 @@ runtime_common = [ # versions of software that are not public available. Here we pin some # from rocm702 as the closest set as daily rocm700 images. rocm700 = [ - "torch @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.0.2/torch-2.9.1.dev20251204%2Brocm7.0.2.lw.git351ff442-cp310-cp310-linux_x86_64.whl", - "triton @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.0.2/triton-3.5.1%2Brocm7.0.2.gita272dfa8-cp310-cp310-linux_x86_64.whl", - "torchaudio @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.0.2/torchaudio-2.9.0%2Brocm7.0.2.gite3c6ee2b-cp310-cp310-linux_x86_64.whl", - "torchvision @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.0.2/torchvision-0.24.0%2Brocm7.0.2.gitb919bd0c-cp310-cp310-linux_x86_64.whl", + "torch ==2.13.0", + "triton ==3.7.1", + "torchaudio ==2.11.0", + "torchvision ==0.28.0", "mooncake-transfer-engine-non-cuda==0.3.8.post1", - "sglang-kernel @ https://github.com/sgl-project/whl/releases/download/v0.4.0/sglang_kernel-0.4.0+rocm700-cp310-abi3-manylinux2014_x86_64.whl", + "sglang-kernel ==0.4.6.post1", ] rocm720 = [ - "torch @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.2/torch-2.9.1%2Brocm7.2.0.lw.git7e1940d4-cp310-cp310-linux_x86_64.whl", - "triton @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.2/triton-3.5.1%2Brocm7.2.0.gita272dfa8-cp310-cp310-linux_x86_64.whl", - "torchaudio @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.2/torchaudio-2.9.0%2Brocm7.2.0.gite3c6ee2b-cp310-cp310-linux_x86_64.whl", - "torchvision @ https://repo.radeon.com/rocm/manylinux/rocm-rel-7.2/torchvision-0.24.0%2Brocm7.2.0.gitb919bd0c-cp310-cp310-linux_x86_64.whl", + "torch ==2.13.0", + "triton ==3.7.1", + "torchaudio ==2.11.0", + "torchvision ==0.28.0", "mooncake-transfer-engine-non-cuda==0.3.8.post1", - "sglang-kernel @ https://github.com/sgl-project/whl/releases/download/v0.4.0/sglang_kernel-0.4.0+rocm720-cp310-abi3-manylinux2014_x86_64.whl", + "sglang-kernel ==0.4.6.post1", ] # HIP (Heterogeneous-computing Interface for Portability) for AMD @@ -104,12 +104,12 @@ diffusion_hip = [ "diffusers==0.37.0", "imageio==2.36.0", "imageio-ffmpeg==0.5.1", - "moviepy>=2.0.0", + "moviepy==2.2.1", "opencv-python-headless==4.10.0.84", "remote-pdb", "st_attn==0.0.7", "vsa==0.0.4", - "runai_model_streamer>=0.15.5", + "runai_model_streamer==0.16.1", "cache-dit==1.3.0", "addict", ] @@ -123,10 +123,10 @@ srt_musa = [ "sglang[runtime_common]", "torch", "torch_musa", - "torchada>=0.1.59", + "torchada==0.1.82", "mthreads-ml-py", - "mate>=0.2.0", - "deep-gemm>=0.1.3", + "mate==0.2.0", + "deep-gemm==1.0.0", "flash_attn_3>=0.1.4", "numpy<2.0", ] @@ -137,12 +137,12 @@ diffusion_musa = [ "diffusers==0.37.0", "imageio==2.36.0", "imageio-ffmpeg==0.5.1", - "moviepy>=2.0.0", + "moviepy==2.2.1", "opencv-python-headless==4.10.0.84", "remote-pdb", "st_attn==0.0.7", "vsa==0.0.4", - "runai_model_streamer>=0.15.5", + "runai_model_streamer==0.16.1", "cache-dit==1.1.8", "addict", ] diff --git a/docker/compose.yaml b/docker/compose.yaml index 186b322cbb7b..ba6739b6bc43 100644 --- a/docker/compose.yaml +++ b/docker/compose.yaml @@ -1,6 +1,6 @@ services: sglang: - image: lmsysorg/sglang:latest + image: lmsysorg/sglang:v0.5.17@sha256:16aba8925507e631e1dc1e23d95d026533602591775f6a8db68b74ee99746155 container_name: sglang volumes: - ${HOME}/.cache/huggingface:/root/.cache/huggingface diff --git a/docker/k8s-sglang-distributed-sts.yaml b/docker/k8s-sglang-distributed-sts.yaml index 4252363c7de7..1618721aaec8 100644 --- a/docker/k8s-sglang-distributed-sts.yaml +++ b/docker/k8s-sglang-distributed-sts.yaml @@ -17,7 +17,7 @@ spec: spec: containers: - name: sglang-container - image: docker.io/lmsysorg/sglang:latest + image: docker.io/lmsysorg/sglang:v0.5.17@sha256:16aba8925507e631e1dc1e23d95d026533602591775f6a8db68b74ee99746155 imagePullPolicy: Always # image may be replaced by official CI versioned image command: - /bin/bash diff --git a/docker/k8s-sglang-service.yaml b/docker/k8s-sglang-service.yaml index 866d50be9eef..c41a2fdc21f3 100644 --- a/docker/k8s-sglang-service.yaml +++ b/docker/k8s-sglang-service.yaml @@ -39,7 +39,7 @@ spec: runtimeClassName: nvidia containers: - name: meta-llama-31-8b-instruct-sglang - image: docker.io/lmsysorg/sglang:latest + image: docker.io/lmsysorg/sglang:v0.5.17@sha256:16aba8925507e631e1dc1e23d95d026533602591775f6a8db68b74ee99746155 imagePullPolicy: Always # IfNotPresent or Never ports: - containerPort: 30000 diff --git a/docs/references/multi_node_deployment/lws_pd/lws-examples/lb.yaml b/docs/references/multi_node_deployment/lws_pd/lws-examples/lb.yaml index 4ca690969ab8..a1f78fbf64d3 100644 --- a/docs/references/multi_node_deployment/lws_pd/lws-examples/lb.yaml +++ b/docs/references/multi_node_deployment/lws_pd/lws-examples/lb.yaml @@ -23,7 +23,7 @@ spec: operator: Exists containers: - name: sgl-minilb - image: lmsysorg/sglang:latest + image: lmsysorg/sglang:v0.5.17@sha256:16aba8925507e631e1dc1e23d95d026533602591775f6a8db68b74ee99746155 command: - python - -m diff --git a/docs/requirements.txt b/docs/requirements.txt index 5d7309675e3e..d2db3be93dfd 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -1,7 +1,7 @@ ipykernel ipywidgets jupyter_client -markdown>=3.4.0 +markdown==3.10.3 matplotlib myst-parser nbconvert @@ -16,5 +16,5 @@ sphinx-tabs nbstripout sphinxcontrib-mermaid urllib3<2.0.0 -gguf>=0.17.1 +gguf==0.19.0 sphinx-autobuild diff --git a/examples/monitoring/docker-compose.yaml b/examples/monitoring/docker-compose.yaml index ce6457fa300b..9dcf2e8f1036 100644 --- a/examples/monitoring/docker-compose.yaml +++ b/examples/monitoring/docker-compose.yaml @@ -1,7 +1,7 @@ version: '3' services: prometheus: - image: prom/prometheus:latest + image: prom/prometheus:v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0 container_name: prometheus network_mode: host volumes: @@ -11,7 +11,7 @@ services: - '--storage.tsdb.path=/prometheus' grafana: - image: grafana/grafana:latest + image: grafana/grafana:13.2.0-ubuntu@sha256:2f6f8ae789c142f0ee00d355cbd9a00bf3149ae255876c3caa8b08ee74fc8791 container_name: grafana network_mode: host volumes: diff --git a/experimental/sgl-router/Cargo.toml b/experimental/sgl-router/Cargo.toml index 80416b29db7d..192d61661a14 100644 --- a/experimental/sgl-router/Cargo.toml +++ b/experimental/sgl-router/Cargo.toml @@ -28,15 +28,15 @@ dynamo-tokenizers = { git = "https://github.com/ai-dynamo/dynamo", rev = "1efdd4 dynamo-parsers = { git = "https://github.com/ai-dynamo/dynamo", rev = "1efdd4dcb901caeae636131321094090d252c8d6" } # Async runtime + http -tokio = { version = "1.42", features = ["full"] } -axum = { version = "0.8", features = ["macros", "tracing"] } -tower = { version = "0.5", features = ["full"] } +tokio = { version = "=1.53.1", features = ["full"] } +axum = { version = "=0.8.9", features = ["macros", "tracing"] } +tower = { version = "=0.5.3", features = ["full"] } tower-http = { version = "0.6", features = ["trace", "compression-gzip", "cors", "timeout", "request-id"] } reqwest = { version = "0.12", features = ["stream", "json", "rustls-tls"], default-features = false } # Serialization -serde = { version = "1", features = ["derive"] } -serde_json = { version = "1", features = ["preserve_order"] } +serde = { version = "=1.0.229", features = ["derive"] } +serde_json = { version = "=1.0.151", features = ["preserve_order"] } # Tokenizer auto-download from HuggingFace when --tokenizer-path is omitted. # Sync (`ureq`) API only — it runs once at startup; `ureq` is on rustls, so @@ -48,47 +48,47 @@ hf-hub = { version = "0.4", default-features = false, features = ["ureq"] } # template (from tokenizer_config.json) before hashing — otherwise its query # token_ids diverge from the engine's stored blocks. `pycompat` supplies the # Python str/dict methods HF chat templates rely on (.startswith, .items, ...). -minijinja = { version = "2", features = ["loop_controls", "json"] } -minijinja-contrib = { version = "2", features = ["pycompat"] } +minijinja = { version = "=2.24.0", features = ["loop_controls", "json"] } +minijinja-contrib = { version = "=2.24.0", features = ["pycompat"] } # `strftime_now` chat-template helper (some templates inject the current date). -chrono = { version = "0.4", default-features = false, features = ["clock"] } +chrono = { version = "=0.4.45", default-features = false, features = ["clock"] } # Utilities -anyhow = "1" -thiserror = "2" -clap = { version = "4", features = ["derive", "env"] } -tracing = "0.1" -tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] } -futures = "0.3" -bytes = "1" +anyhow = "=1.0.104" +thiserror = "=2.0.20" +clap = { version = "=4.6.6", features = ["derive", "env"] } +tracing = "=0.1.44" +tracing-subscriber = { version = "=0.3.23", features = ["env-filter", "json"] } +futures = "=0.3.34" +bytes = "=1.12.1" rand = "0.8" -tokio-stream = "0.1" -dashmap = "6" +tokio-stream = "=0.1.19" +dashmap = "=6.2.1" kube = { version = "0.96", features = ["runtime", "derive"] } k8s-openapi = { version = "0.23", features = ["v1_31"] } -tokio-util = "0.7" -uuid = { version = "1", features = ["v4"] } +tokio-util = "=0.7.19" +uuid = { version = "=1.24.1", features = ["v4"] } # KV-event subsystem — msgpack-encoded events over ZMQ and sha256-based # block hashing matching SGLang's `radix_cache`. Wire format authority is # `python/sglang/srt/disaggregation/kv_events.py`. -parking_lot = "0.12" -rmp-serde = "1" +parking_lot = "=0.12.5" +rmp-serde = "=1.3.1" sha2 = "0.10" -url = "2" -zeromq = { version = "0.6", default-features = false, features = ["tokio-runtime", "tcp-transport"] } +url = "=2.5.8" +zeromq = { version = "=0.6.0-pre.2", default-features = false, features = ["tokio-runtime", "tcp-transport"] } [dev-dependencies] -dirs = "5" -http-body-util = "0.1" -serde = { version = "1", features = ["derive"] } -serde_json = "1" -tempfile = "3" -tower = { version = "0.5", features = ["util"] } -tokio = { version = "1.42", features = ["test-util"] } +dirs = "=5.0.1" +http-body-util = "=0.1.5" +serde = { version = "=1.0.229", features = ["derive"] } +serde_json = "=1.0.151" +tempfile = "=3.27.0" +tower = { version = "=0.5.3", features = ["util"] } +tokio = { version = "=1.53.1", features = ["test-util"] } # Low-level msgpack encoder used to hand-construct wire bytes in # kv_events golden-bytes tests (decode-only path uses rmp-serde). -rmp = "0.8" +rmp = "=0.8.15" # Criterion benches that mirror the SMG `radix_tree_benchmark` + # `manual_policy_benchmark` so routing-decision latency can be compared # apples-to-apples against the gateway being deprecated. diff --git a/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.fake_worker b/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.fake_worker index 8cff23e91f21..c26d0957c2da 100644 --- a/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.fake_worker +++ b/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.fake_worker @@ -1,4 +1,4 @@ -FROM python:3.12-slim +FROM python:3.12.14-slim-trixie@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a WORKDIR /app RUN pip install --no-cache-dir fastapi uvicorn COPY fake_worker.py . diff --git a/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.router b/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.router index fe8a870f8d07..3475af9f48be 100644 --- a/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.router +++ b/experimental/sgl-router/tests/e2e/k8s_integration/Dockerfile.router @@ -3,7 +3,7 @@ # Context root: repo root (one level above experimental/sgl-router/). # Matches rust-toolchain.toml's pinned channel, avoiding an in-build rustup channel-sync. -FROM rust:1.90-bookworm AS builder +FROM rust:1.90.0-bookworm@sha256:3914072ca0c3b8aad871db9169a651ccfce30cf58303e5d6f2db16d1d8a7e58f AS builder # Pin to the exact toolchain pre-installed in the base image so rustup # doesn't try to sync the channel manifest when it sees rust-toolchain.toml's @@ -24,7 +24,7 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \ && cargo build --release --bin sgl-router \ && cp target/release/sgl-router /usr/local/bin/sgl-router -FROM debian:bookworm-slim +FROM debian:13.6-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 RUN apt-get update && apt-get install -y ca-certificates \ && rm -rf /var/lib/apt/lists/* diff --git a/python/pyproject.toml b/python/pyproject.toml index dbe31e43f0a1..b64aa03db50c 100755 --- a/python/pyproject.toml +++ b/python/pyproject.toml @@ -17,28 +17,28 @@ classifiers = [ # Please keep dependency lists in this file sorted alphabetically by package name. dependencies = [ "aiohttp", - "anthropic>=0.20.0", + "anthropic==0.124.0", "apache-tvm-ffi==0.1.9", - "av ; sys_platform == 'linux' and (platform_machine == 'aarch64' or platform_machine == 'arm64' or platform_machine == 'armv7l')", + "av ==18.1.0", "blobfile==3.0.0", "build", "compressed-tensors", - "cuda-python>=13.0", + "cuda-python==13.3.1", "datasets", - "decord2 ; sys_platform == 'linux' and (platform_machine == 'aarch64' or platform_machine == 'arm64' or platform_machine == 'armv7l')", + "decord2 ==3.4.0", "distro", "easydict", # Required by remote model code (e.g. DeepSeek-OCR) loaded via trust_remote_code; validated by transformers 5.4+ check_imports "einops", "fastapi", - "flash-attn-4==4.0.0b15", + "flash-attn-4==4.0.0b27", "flashinfer_cubin==0.6.12", "flashinfer_python[cu13]==0.6.12", # keep it aligned with jit-cache version in Dockerfile "gguf", "interegular", "IPython", "kernels>=0.14.1,<0.15", - "llguidance>=0.7.11,<0.8.0", - "mistral_common>=1.11.0", + "llguidance==0.7.30", + "mistral_common==1.11.7", "modelscope", "msgspec", "ninja", @@ -53,28 +53,28 @@ dependencies = [ "packaging", "partial_json_parser", "pillow", - "prometheus-client>=0.20.0", + "prometheus-client==0.26.0", "psutil", "py-spy", "pybase64", "pydantic", "python-multipart", - "pyzmq>=25.1.2", - "quack-kernels>=0.4.1", + "pyzmq==25.1.2", + "quack-kernels==0.6.4", "requests", "scipy", "sentencepiece", "setproctitle", "sgl-deep-gemm==0.1.3", "sglang-kernel==0.4.4", - "smg-grpc-servicer>=0.5.0", + "smg-grpc-servicer==0.8.0", "soundfile==0.13.1", "tiktoken", "tilelang==0.1.8", "timm==1.0.16", "tokenspeed_mla==0.1.7", "torch==2.11.0", - "torch_memory_saver>=0.0.9.post1", + "torch_memory_saver==0.0.9.post1", "torchao==0.17.0", "torchaudio==2.11.0", "torchcodec==0.11.1 ; sys_platform != 'linux' or (sys_platform == 'linux' and platform_machine != 'aarch64' and platform_machine != 'arm64' and platform_machine != 'armv7l')", # torchcodec 0.11.1 for torch 2.11.x (0.10 is ABI-incompatible: references the pre-2.11 c10::MessageLogger ctor signature). Not available on Linux ARM. @@ -94,7 +94,7 @@ default = true [project.optional-dependencies] checkpoint-engine = ["checkpoint-engine==0.1.2"] -runai = ["runai-model-streamer[s3,gcs,azure]>=0.15.7"] +runai = ["runai-model-streamer[s3,gcs,azure]==0.16.1"] diffusion = [ "addict==2.4.0", "av==16.1.0", @@ -103,22 +103,22 @@ diffusion = [ "diffusers==0.37.0", "imageio==2.36.0", "imageio-ffmpeg==0.5.1", - "moviepy>=2.0.0", + "moviepy==2.2.1", "nvidia-modelopt", "opencv-python-headless==4.10.0.84", "PyYAML==6.0.1", "remote-pdb==2.1.0", - "runai_model_streamer>=0.15.7", + "runai_model_streamer==0.16.1", "scikit-image==0.25.2", "st_attn==0.0.7 ; platform_machine != 'aarch64' and platform_machine != 'arm64'", - "trimesh>=4.0.0", + "trimesh==4.12.2", "vsa==0.0.4 ; platform_machine != 'aarch64' and platform_machine != 'arm64'", "websockets", "xatlas", ] ray = [ - "ray[default]>=2.55.1", + "ray[default]==2.57.0", ] tracing = [ @@ -129,7 +129,7 @@ tracing = [ ] http2 = [ - "granian>=2.6.0", + "granian==2.8.1", ] fastokens = [ @@ -142,13 +142,13 @@ test = [ "bitsandbytes", "diff-cover", "expecttest", - "granian>=2.6.0", + "granian==2.8.1", "jsonlines", - "lm-eval[api]>=0.4.9.2", + "lm-eval[api]==0.4.12", "matplotlib", "pandas", "parameterized", - "peft>=0.18.0", + "peft==0.20.0", "polars", "pytest", "pytest-cov", diff --git a/rust/sglang-grpc/Cargo.toml b/rust/sglang-grpc/Cargo.toml index d2236ed01d3b..2c6a25112502 100644 --- a/rust/sglang-grpc/Cargo.toml +++ b/rust/sglang-grpc/Cargo.toml @@ -11,16 +11,16 @@ crate-type = ["cdylib"] [dependencies] pyo3 = { version = "0.23", features = ["extension-module"] } -tokio = { version = "1", features = ["full"] } +tokio = { version = "=1.53.1", features = ["full"] } tonic = { version = "0.12", features = ["gzip", "transport"] } prost = "0.13" -uuid = { version = "1", features = ["v4"] } -tracing = "0.1" -tracing-subscriber = { version = "0.3", features = ["env-filter"] } -serde_json = "1" +uuid = { version = "=1.24.1", features = ["v4"] } +tracing = "=0.1.44" +tracing-subscriber = { version = "=0.3.23", features = ["env-filter"] } +serde_json = "=1.0.151" tokenizers = { version = "0.21", default-features = false, features = ["onig"] } -tokio-stream = { version = "0.1", features = ["net"] } -async-stream = "0.3" +tokio-stream = { version = "=0.1.19", features = ["net"] } +async-stream = "=0.3.6" [build-dependencies] tonic-build = "0.12" diff --git a/sgl-model-gateway/Cargo.toml b/sgl-model-gateway/Cargo.toml index f80276166863..673f9acf9836 100644 --- a/sgl-model-gateway/Cargo.toml +++ b/sgl-model-gateway/Cargo.toml @@ -34,51 +34,51 @@ name = "amg" path = "src/main.rs" [dependencies] -clap = { version = "4", features = ["derive", "env"] } -axum = { version = "0.8.6", features = ["macros", "ws", "tracing"] } -axum-server = { version = "0.8.0", default-features = false, features = ["tls-rustls"] } -tower = { version = "0.5", features = ["full"] } +clap = { version = "=4.6.6", features = ["derive", "env"] } +axum = { version = "=0.8.9", features = ["macros", "ws", "tracing"] } +axum-server = { version = "=0.8.0", default-features = false, features = ["tls-rustls"] } +tower = { version = "=0.5.3", features = ["full"] } tower-http = { version = "0.6", features = ["trace", "compression-gzip", "cors", "timeout", "limit", "request-id", "util"] } -serde = { version = "1.0", features = ["derive"] } -serde_json = { version = "1.0", default-features = false, features = [ +serde = { version = "=1.0.229", features = ["derive"] } +serde_json = { version = "=1.0.151", default-features = false, features = [ "std", "preserve_order", ] } -bytes = "1.8.0" -http-body = "1.0" +bytes = "=1.12.1" +http-body = "=1.1.0" rand = "0.9.2" reqwest = { version = "0.12.8", features = ["stream", "blocking", "json", "rustls-tls"], default-features = false } -futures-util = "0.3" -futures = "0.3" -dashmap = "6.1.0" -blake3 = "1.5" -xxhash-rust = { version = "0.8", features = ["xxh3"] } -bytemuck = { version = "1.21", features = ["derive"] } -http = "1.1.0" -tokio = { version = "1.42.0", features = ["full"] } -async-trait = "0.1" -tracing = "0.1" -tracing-subscriber = { version = "0.3", features = ["env-filter", "json", "chrono"] } -tracing-log = "0.2" -tracing-appender = "0.2.3" +futures-util = "=0.3.34" +futures = "=0.3.34" +dashmap = "=6.2.1" +blake3 = "=1.8.6" +xxhash-rust = { version = "=0.8.18", features = ["xxh3"] } +bytemuck = { version = "=1.25.2", features = ["derive"] } +http = "=1.5.0" +tokio = { version = "=1.53.1", features = ["full"] } +async-trait = "=0.1.92" +tracing = "=0.1.44" +tracing-subscriber = { version = "=0.3.23", features = ["env-filter", "json", "chrono"] } +tracing-log = "=0.2.0" +tracing-appender = "=0.2.5" opentelemetry = "0.27" opentelemetry_sdk = { version = "0.27", features = ["trace", "rt-tokio"] } opentelemetry-otlp = { version = "0.27", features = ["trace", "grpc-tonic"] } tracing-opentelemetry = "0.28" -chrono = "0.4" -kube = { version = "1.1.0", features = ["runtime", "derive"] } +chrono = "=0.4.45" +kube = { version = "=1.1.0", features = ["runtime", "derive"] } k8s-openapi = { version = "0.25.0", features = ["v1_33"] } -metrics = "0.24.2" +metrics = "=0.24.6" metrics-exporter-prometheus = "0.17.0" -uuid = { version = "1.10", features = ["v4", "serde"] } -parking_lot = "0.12.4" -thiserror = "2.0.12" -regex = "1.10" -memchr = "2.7" # SIMD-optimized byte pattern searching -url = "2.5.4" +uuid = { version = "=1.24.1", features = ["v4", "serde"] } +parking_lot = "=0.12.5" +thiserror = "=2.0.20" +regex = "=1.13.1" +memchr = "=2.8.3" # SIMD-optimized byte pattern searching +url = "=2.5.8" validator = { version = "0.20.0", features = ["derive"] } -tokio-stream = { version = "0.1", features = ["sync"] } -anyhow = "1.0" +tokio-stream = { version = "=0.1.19", features = ["sync"] } +anyhow = "=1.0.104" reasoning-parser = "=1.0.0" openai-protocol = { version = "=1.0.0", features = ["axum"] } tool-parser = "=1.0.0" @@ -90,8 +90,8 @@ smg-mcp = "=1.0.0" smg-wasm = "=1.0.0" smg-mesh = "=1.0.0" rustls = { version = "0.23", default-features = false, features = ["ring", "std"] } -rustls-pemfile = "2.2" -openssl = "0.10.73" +rustls-pemfile = "=2.2.0" +openssl = "=0.10.81" rmcp = { version = "0.8.3", features = ["client", "server", "transport-child-process", "transport-sse-client-reqwest", @@ -100,50 +100,50 @@ rmcp = { version = "0.8.3", features = ["client", "server", "transport-streamable-http-server-session", "reqwest", "auth"] } -serde_yaml = "0.9" -subtle = "2.6" -jsonwebtoken = { version = "9.3", default-features = false, features = ["use_pem"] } -num-traits = "0.2" +serde_yaml = "=0.9.34+deprecated" +subtle = "=2.6.1" +jsonwebtoken = { version = "=9.3.1", default-features = false, features = ["use_pem"] } +num-traits = "=0.2.19" num-bigint = "0.4" base64 = "0.22" openai-harmony = { git = "https://github.com/openai/harmony", tag = "v0.0.4" } -openmetrics-parser = "0.4.4" -arc-swap = "1.7.1" +openmetrics-parser = "=0.4.4" +arc-swap = "=1.9.2" # gRPC and Protobuf dependencies smg-grpc-client = "=1.0.0" -tonic = { version = "0.14.2", features = ["gzip", "transport"] } -prost = "0.14.1" -prost-types = "0.14.1" -tonic-prost = "0.14.2" -bitflags = "2.10.0" -once_cell = "1.21.3" +tonic = { version = "=0.14.6", features = ["gzip", "transport"] } +prost = "=0.14.4" +prost-types = "=0.14.4" +tonic-prost = "=0.14.6" +bitflags = "=2.13.1" +once_cell = "=1.21.4" # CRDT for Mesh state synchronization -crdts = "7.3" +crdts = "=7.3.2" redis = { version = "0.27.6", features = ["tokio-comp", "json", "connection-manager"] } # wasm dependencies sha2 = "0.10" -wasmtime = { version = "38.0", features = ["component-model", "async"] } +wasmtime = { version = "=38.0.4", features = ["component-model", "async"] } [build-dependencies] -chrono = { version = "0.4", features = ["clock"] } -toml = "0.9" +chrono = { version = "=0.4.45", features = ["clock"] } +toml = "=0.9.12+spec-1.1.0" [dev-dependencies] criterion = { version = "0.5", features = ["html_reports"] } -tower = { version = "0.5", features = ["util"] } -http-body-util = "0.1" -portpicker = "0.1" -tempfile = "3.8" -lazy_static = "1.4" +tower = { version = "=0.5.3", features = ["util"] } +http-body-util = "=0.1.5" +portpicker = "=0.1.1" +tempfile = "=3.27.0" +lazy_static = "=1.5.0" wasm-encoder = "0.242" npyz = { version = "0.8", features = ["npz"] } # For reading numpy .npz files in golden tests opentelemetry-proto = { version = "0.27", features = ["gen-tonic"] } tonic-v12 = { version = "0.12.3", package = "tonic" } -serial_test = "3.0" +serial_test = "=3.5.0" rsa = { version = "0.9", features = ["sha2"] } [[bench]] diff --git a/sgl-model-gateway/bindings/golang/Cargo.toml b/sgl-model-gateway/bindings/golang/Cargo.toml index a5fc73293b63..3f6dcc35fb21 100644 --- a/sgl-model-gateway/bindings/golang/Cargo.toml +++ b/sgl-model-gateway/bindings/golang/Cargo.toml @@ -8,16 +8,16 @@ name = "sgl_model_gateway_go" crate-type = ["cdylib"] [dependencies] -tokio = { version = "1.42.0", features = ["full"] } -serde_json = { version = "1.0", default-features = false, features = [ +tokio = { version = "=1.53.1", features = ["full"] } +serde_json = { version = "=1.0.151", default-features = false, features = [ "std", "preserve_order", ] } -uuid = { version = "1.10", features = ["v4", "serde"] } -once_cell = "1.21.3" -futures-util = "0.3" -tracing = "0.1" -libc = "0.2.179" +uuid = { version = "=1.24.1", features = ["v4", "serde"] } +once_cell = "=1.21.4" +futures-util = "=0.3.34" +tracing = "=0.1.44" +libc = "=0.2.189" [dependencies.sgl-model-gateway] path = "../.." diff --git a/sgl-model-gateway/bindings/python/Cargo.toml b/sgl-model-gateway/bindings/python/Cargo.toml index d4754591ad2f..5754a9f651a4 100644 --- a/sgl-model-gateway/bindings/python/Cargo.toml +++ b/sgl-model-gateway/bindings/python/Cargo.toml @@ -9,8 +9,8 @@ crate-type = ["cdylib"] [dependencies] pyo3 = { version = "0.27.1", features = ["extension-module", "abi3-py38"] } -tokio = { version = "1.42.0", features = ["full"] } -once_cell = "1.19" +tokio = { version = "=1.53.1", features = ["full"] } +once_cell = "=1.21.4" [dependencies.sgl-model-gateway] path = "../.." diff --git a/sgl-model-gateway/bindings/python/pyproject.toml b/sgl-model-gateway/bindings/python/pyproject.toml index c44b1b96abb4..241501eb088f 100644 --- a/sgl-model-gateway/bindings/python/pyproject.toml +++ b/sgl-model-gateway/bindings/python/pyproject.toml @@ -38,8 +38,8 @@ dependencies = [ [project.optional-dependencies] dev = [ - "requests>=2.25.0", - "pytest>=7.0.0", + "requests==2.34.2", + "pytest==7.4.4", ] [project.scripts] diff --git a/sgl-model-gateway/e2e_test/k8s_integration/Dockerfile.gateway b/sgl-model-gateway/e2e_test/k8s_integration/Dockerfile.gateway index bbf3779b5d91..bd7df7bba12f 100644 --- a/sgl-model-gateway/e2e_test/k8s_integration/Dockerfile.gateway +++ b/sgl-model-gateway/e2e_test/k8s_integration/Dockerfile.gateway @@ -7,7 +7,7 @@ # production. This Dockerfile builds just the Rust binary in ~5 min on a # warm cache. -FROM rust:1.90-bookworm AS builder +FROM rust:1.90.0-bookworm@sha256:3914072ca0c3b8aad871db9169a651ccfce30cf58303e5d6f2db16d1d8a7e58f AS builder RUN apt-get update && apt-get install -y \ libssl-dev pkg-config protobuf-compiler cmake \ @@ -22,7 +22,7 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \ cargo build --profile ci --bin smg --features vendored-openssl \ && cp target/ci/smg /usr/local/bin/smg -FROM debian:bookworm-slim +FROM debian:13.6-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258 RUN apt-get update && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/*