From 6a98f1268622e8077334b3ec2d97bc59d6323370 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Sep 2024 18:42:20 +0000 Subject: [PATCH 1/3] Bump the pytorch group across 1 directory with 13 updates Bumps the pytorch group with 13 updates in the /pytorch directory: | Package | From | To | | --- | --- | --- | | [accelerate](https://github.com/huggingface/accelerate) | `0.33.0` | `0.34.2` | | [datasets](https://github.com/huggingface/datasets) | `2.21.0` | `3.0.0` | | [evaluate](https://github.com/huggingface/evaluate) | `0.4.2` | `0.4.3` | | [onnxruntime-extensions](https://github.com/microsoft/onnxruntime-extensions) | `0.11.0` | `0.12.0` | | [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.18.1` | `1.19.2` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.27.3` | `5.28.1` | | [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.5.1` | `1.5.2` | | [tokenizers](https://github.com/huggingface/tokenizers) | `0.19.1` | `0.20.0` | | [transformers](https://github.com/huggingface/transformers) | `4.44.0` | `4.44.2` | | [numpy](https://github.com/numpy/numpy) | `1.26.4` | `2.1.1` | | [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.3.0b0` | `4.3.0b1` | | [neural-compressor](https://github.com/intel/neural-compressor) | `3.0` | `3.0.2` | | torchtext | `0.18.0` | `0.18.0+cpu` | Updates `accelerate` from 0.33.0 to 0.34.2 - [Release notes](https://github.com/huggingface/accelerate/releases) - [Commits](https://github.com/huggingface/accelerate/compare/v0.33.0...v0.34.2) Updates `datasets` from 2.21.0 to 3.0.0 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](https://github.com/huggingface/datasets/compare/2.21.0...3.0.0) Updates `evaluate` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/huggingface/evaluate/releases) - [Commits](https://github.com/huggingface/evaluate/compare/v0.4.2...v0.4.3) Updates `onnxruntime-extensions` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/microsoft/onnxruntime-extensions/releases) - [Commits](https://github.com/microsoft/onnxruntime-extensions/compare/v0.11.0...v0.12.0) Updates `onnxruntime` from 1.18.1 to 1.19.2 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](https://github.com/microsoft/onnxruntime/compare/v1.18.1...v1.19.2) Updates `protobuf` from 5.27.3 to 5.28.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](https://github.com/protocolbuffers/protobuf/compare/v5.27.3...v5.28.1) Updates `scikit-learn` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.5.1...1.5.2) Updates `tokenizers` from 0.19.1 to 0.20.0 - [Release notes](https://github.com/huggingface/tokenizers/releases) - [Changelog](https://github.com/huggingface/tokenizers/blob/main/RELEASE.md) - [Commits](https://github.com/huggingface/tokenizers/compare/v0.19.1...v0.20.0) Updates `transformers` from 4.44.0 to 4.44.2 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](https://github.com/huggingface/transformers/compare/v4.44.0...v4.44.2) Updates `numpy` from 1.26.4 to 2.1.1 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](https://github.com/numpy/numpy/compare/v1.26.4...v2.1.1) Updates `jupyterlab` from 4.3.0b0 to 4.3.0b1 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/CHANGELOG.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.3.0-beta.0...@jupyterlab/lsp@4.3.0-beta.1) Updates `neural-compressor` from 3.0 to 3.0.2 - [Release notes](https://github.com/intel/neural-compressor/releases) - [Commits](https://github.com/intel/neural-compressor/compare/v3.0...v3.0.2) Updates `torchtext` from 0.18.0 to 0.18.0+cpu --- updated-dependencies: - dependency-name: accelerate dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pytorch - dependency-name: datasets dependency-type: direct:production update-type: version-update:semver-major dependency-group: pytorch - dependency-name: evaluate dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch - dependency-name: onnxruntime-extensions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pytorch - dependency-name: onnxruntime dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pytorch - dependency-name: protobuf dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pytorch - dependency-name: scikit-learn dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch - dependency-name: tokenizers dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pytorch - dependency-name: transformers dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch - dependency-name: numpy dependency-type: direct:production update-type: version-update:semver-major dependency-group: pytorch - dependency-name: jupyterlab dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch - dependency-name: neural-compressor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch - dependency-name: torchtext dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pytorch ... Signed-off-by: dependabot[bot] Signed-off-by: Srikanth Ramakrishna --- pytorch/hf-genai-requirements.txt | 18 +++++++++--------- pytorch/jupyter-requirements.txt | 2 +- pytorch/multinode/requirements.txt | 2 +- pytorch/serving/torchserve-requirements.txt | 2 +- .../serving/torchserve-xpu-requirements.txt | 2 +- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/pytorch/hf-genai-requirements.txt b/pytorch/hf-genai-requirements.txt index 6671cbaf..037085a0 100644 --- a/pytorch/hf-genai-requirements.txt +++ b/pytorch/hf-genai-requirements.txt @@ -1,13 +1,13 @@ -accelerate==0.33.0 -datasets==2.21.0 +accelerate==0.34.2 +datasets==3.0.0 einops==0.8.0 -evaluate==0.4.2 -onnxruntime-extensions==0.11.0 -onnxruntime==1.18.1 +evaluate==0.4.3 +onnxruntime-extensions==0.12.0 +onnxruntime==1.19.2 peft==0.12.0 -protobuf==5.27.3 +protobuf==5.28.1 py-cpuinfo==9.0.0 -scikit-learn==1.5.1 +scikit-learn==1.5.2 SentencePiece==0.2.0 -tokenizers==0.19.1 -transformers==4.44.0 +tokenizers==0.20.0 +transformers==4.44.2 diff --git a/pytorch/jupyter-requirements.txt b/pytorch/jupyter-requirements.txt index e95ad6e8..4313b738 100644 --- a/pytorch/jupyter-requirements.txt +++ b/pytorch/jupyter-requirements.txt @@ -1,4 +1,4 @@ -jupyterlab==4.3.0b0 +jupyterlab==4.3.0b1 jupyterhub==5.1.0 notebook==7.3.0a1 jupyter-server-proxy>=4.1.2 diff --git a/pytorch/multinode/requirements.txt b/pytorch/multinode/requirements.txt index c941708a..a303e658 100644 --- a/pytorch/multinode/requirements.txt +++ b/pytorch/multinode/requirements.txt @@ -1,4 +1,4 @@ -neural-compressor==3.0 +neural-compressor==3.0.2 oneccl_bind_pt==2.4.0+cpu --extra-index-url https://pytorch-extension.intel.com/release-whl/stable/cpu/us/ oneccl-devel>=2021.13.0 # required to build deepspeed ops diff --git a/pytorch/serving/torchserve-requirements.txt b/pytorch/serving/torchserve-requirements.txt index f495a686..41d78b17 100644 --- a/pytorch/serving/torchserve-requirements.txt +++ b/pytorch/serving/torchserve-requirements.txt @@ -6,7 +6,7 @@ pyyaml>=6.0.1 torch-model-archiver==0.11.1 torch-workflow-archiver==0.2.14 torchserve==0.11.1 -torchtext==0.18.0 +torchtext==0.18.0+cpu torchvision==0.19.0 -f https://pytorch-extension.intel.com/release-whl/stable/cpu/us/ intel_extension_for_pytorch==2.4.0+cpu diff --git a/pytorch/serving/torchserve-xpu-requirements.txt b/pytorch/serving/torchserve-xpu-requirements.txt index 693402fe..6cd3ff99 100644 --- a/pytorch/serving/torchserve-xpu-requirements.txt +++ b/pytorch/serving/torchserve-xpu-requirements.txt @@ -3,7 +3,7 @@ torchvision==0.18.1+cxx11.abi torchaudio==2.3.1+cxx11.abi intel_extension_for_pytorch==2.3.110+xpu --extra-index-url https://pytorch-extension.intel.com/release-whl/stable/xpu/us -numpy==1.26.4 +numpy==2.1.1 captum>=0.7.0 cython>=3.0.10 pynvml>=11.5.0 From 7b32c1f7121f456c48b62a4602c149d1f30b7a98 Mon Sep 17 00:00:00 2001 From: Srikanth Ramakrishna Date: Thu, 12 Sep 2024 14:04:08 -0700 Subject: [PATCH 2/3] Update hf-genai-requirements.txt Signed-off-by: Srikanth Ramakrishna Signed-off-by: Srikanth Ramakrishna --- pytorch/hf-genai-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pytorch/hf-genai-requirements.txt b/pytorch/hf-genai-requirements.txt index 037085a0..8eb7fb3a 100644 --- a/pytorch/hf-genai-requirements.txt +++ b/pytorch/hf-genai-requirements.txt @@ -9,5 +9,5 @@ protobuf==5.28.1 py-cpuinfo==9.0.0 scikit-learn==1.5.2 SentencePiece==0.2.0 -tokenizers==0.20.0 +tokenizers==0.19.1 transformers==4.44.2 From f1e08b66d43942c31b9bb154fd92dbf06654b0e7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Sep 2024 13:03:53 -0700 Subject: [PATCH 3/3] Bump step-security/harden-runner from 2.9.1 to 2.10.1 (#381) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Srikanth Ramakrishna --- .github/workflows/chart-ci.yaml | 2 +- .github/workflows/container-ci.yaml | 10 +++++----- .github/workflows/dependency-review.yaml | 2 +- .github/workflows/dockerhub-description.yml | 4 ++-- .github/workflows/docs.yaml | 2 +- .github/workflows/integration-test.yaml | 4 ++-- .github/workflows/lint.yaml | 2 +- .github/workflows/scorecard.yaml | 2 +- .github/workflows/security-report.yaml | 2 +- .github/workflows/test-runner-ci.yaml | 6 +++--- .github/workflows/weekly-test.yaml | 6 +++--- 11 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/chart-ci.yaml b/.github/workflows/chart-ci.yaml index 916423b2..6f698aa6 100644 --- a/.github/workflows/chart-ci.yaml +++ b/.github/workflows/chart-ci.yaml @@ -26,7 +26,7 @@ jobs: runs-on: kubectl steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/container-ci.yaml b/.github/workflows/container-ci.yaml index a64e2307..6d8a22f7 100644 --- a/.github/workflows/container-ci.yaml +++ b/.github/workflows/container-ci.yaml @@ -66,7 +66,7 @@ jobs: runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -117,7 +117,7 @@ jobs: matrix: ${{ steps.scan-matrix.outputs.matrix }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 @@ -136,7 +136,7 @@ jobs: fail-fast: false steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -170,7 +170,7 @@ jobs: matrix: ${{ steps.test-matrix.outputs.matrix }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -187,7 +187,7 @@ jobs: experimental: [true] fail-fast: false steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index cce8357f..635a8176 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -34,7 +34,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/dockerhub-description.yml b/.github/workflows/dockerhub-description.yml index 201e8888..1dbd23b9 100644 --- a/.github/workflows/dockerhub-description.yml +++ b/.github/workflows/dockerhub-description.yml @@ -24,7 +24,7 @@ jobs: matrix: ${{ steps.set-matrix.outputs.matrix }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -39,7 +39,7 @@ jobs: fail-fast: false steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index 997f3e6a..e51dddbb 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -32,7 +32,7 @@ jobs: pages: write steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/integration-test.yaml b/.github/workflows/integration-test.yaml index 2a112c5b..10bc3879 100644 --- a/.github/workflows/integration-test.yaml +++ b/.github/workflows/integration-test.yaml @@ -26,7 +26,7 @@ jobs: groups: ${{ steps.group-list.outputs.FOLDERS }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -118,7 +118,7 @@ jobs: if: always() steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - run: exit 1 diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 2e550689..057aab1e 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -31,7 +31,7 @@ jobs: statuses: write steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index ecdde523..45c83ef4 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -36,7 +36,7 @@ jobs: actions: read steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/security-report.yaml b/.github/workflows/security-report.yaml index 07290f08..2aaa7655 100644 --- a/.github/workflows/security-report.yaml +++ b/.github/workflows/security-report.yaml @@ -27,7 +27,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: rsdmike/github-security-report-action@a149b24539044c92786ec39af8ba38c93496495d # v3.0.4 diff --git a/.github/workflows/test-runner-ci.yaml b/.github/workflows/test-runner-ci.yaml index 75aa8c06..e9f4bb88 100644 --- a/.github/workflows/test-runner-ci.yaml +++ b/.github/workflows/test-runner-ci.yaml @@ -33,7 +33,7 @@ jobs: fail-fast: true steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -66,7 +66,7 @@ jobs: runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: coverallsapp/github-action@643bc377ffa44ace6394b2b5d0d3950076de9f63 # v2.3.0 @@ -76,7 +76,7 @@ jobs: runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 diff --git a/.github/workflows/weekly-test.yaml b/.github/workflows/weekly-test.yaml index 41189eed..388c021f 100644 --- a/.github/workflows/weekly-test.yaml +++ b/.github/workflows/weekly-test.yaml @@ -25,7 +25,7 @@ jobs: groups: ${{ steps.group-list.outputs.FOLDERS }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -56,7 +56,7 @@ jobs: runs-on: kubectl steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 @@ -72,7 +72,7 @@ jobs: runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} steps: - name: Harden Runner - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7