Merge pull request #2223 from SamuelMarks:update-workflows

PiperOrigin-RevId: 819879087

Author: Google-ML-Automation

.github/workflows/AddLabel.yml

@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v7
         with:
           script: |
             const owner = "google"

.github/workflows/CPUTests.yml

@@ -1,3 +1,17 @@
+# Copyright 2023–2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Linter
 
 on:
@@ -22,9 +36,9 @@ jobs:
         os: [ubuntu-24.04]
         python-version: ['3.12']
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install Dependencies

.github/workflows/RunTests.yml

@@ -161,7 +161,7 @@ jobs:
     - name: Check whether one of the jobs failed
       id: report_failure
       if: ${{ contains(needs.*.result, 'failure') && github.event.pull_request == null && github.event_name != 'workflow_dispatch' }}
-      uses: jayqi/failed-build-issue-action@1a893bbf43ef1c2a8705e2b115cd4f0fe3c5649b  # v1.2.0
+      uses: jayqi/failed-build-issue-action@v1.2
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         labels: "failed-build"

.github/workflows/UploadDockerImages.yml

@@ -76,13 +76,13 @@ jobs:
 
     # Setup for GKE runners per b/412986220#comment82 and b/412986220#comment90
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@v5
       - name: Mark git repository as safe
         run: git config --global --add safe.directory ${GITHUB_WORKSPACE}
       - name: Configure Docker
         run: gcloud auth configure-docker us-docker.pkg.dev,gcr.io -q
       - name: Set up Docker BuildX
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
+        uses: docker/setup-buildx-action@v3.11.1
         with:
           driver: remote
           endpoint: tcp://localhost:1234
@@ -140,13 +140,13 @@ jobs:
             base_image: us-docker.pkg.dev/tpu-prod-env-multipod/jax-stable-stack/candidate/gpu:latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@v5
       - name: Mark git repository as safe
         run: git config --global --add safe.directory ${GITHUB_WORKSPACE}
       - name: Configure Docker
         run: gcloud auth configure-docker us-docker.pkg.dev,gcr.io,us-central1-docker.pkg.dev -q
       - name: Set up Docker BuildX
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
+        uses: docker/setup-buildx-action@v3.11.1
         with:
           driver: remote
           endpoint: tcp://localhost:1234
@@ -173,4 +173,4 @@ jobs:
             JAX_AI_IMAGE_BASEIMAGE=${{ matrix.base_image }}
             COMMIT_HASH=${{ steps.vars.outputs.sha_short }}
             DEVICE=gpu
-            TEST_TYPE=xlml
+            TEST_TYPE=xlml

.github/workflows/build_upload_internal.yml

@@ -41,13 +41,13 @@ jobs:
     runs-on: ${{ inputs.cloud_runner != '' && inputs.cloud_runner || fromJson(format('["self-hosted", "{0}", "{1}"]', inputs.device_type, inputs.device_name)) }}
     container: google/cloud-sdk:524.0.0
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@v5
       - name: Mark git repository as safe
         run: git config --global --add safe.directory ${GITHUB_WORKSPACE}
       - name: Configure Docker
         run: gcloud auth configure-docker us-docker.pkg.dev,gcr.io,us-central1-docker.pkg.dev -q
       - name: Set up Docker BuildX
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2
+        uses: docker/setup-buildx-action@v3.11.1
         with:
           driver: remote
           endpoint: tcp://localhost:1234
@@ -67,5 +67,3 @@ jobs:
             COMMIT_HASH=${{ steps.vars.outputs.sha_short }}
             DEVICE=${{ inputs.device_type }}
             TEST_TYPE=unit_test
-
-

.github/workflows/require-checklist.yml

@@ -1,3 +1,17 @@
+# Copyright 2023–2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Require Checklist
 on:
   pull_request:

.github/workflows/run_tests_internal.yml

@@ -62,7 +62,7 @@ jobs:
         TPU_SKIP_MDS_QUERY: ${{ inputs.image_type == 'tpu' && inputs.device_type != 'tpu' && '1' || '' }}
       options: ${{ inputs.container_resource_option }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run Tests
         run: |
           if [ "${{ inputs.is_scheduled_run }}" = "true" ]; then

.github/workflows/stale.yml

@@ -1,3 +1,17 @@
+# Copyright 2023–2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: 'Close stale PRs'
 on:
   schedule:
@@ -33,4 +47,3 @@ jobs:
           close-pr-message: >
             This PR was closed because it has been inactive for a while.
             Please reopen it if you are still working on it.
-