New data collected at 2026-03-30_00-08-00

Author: actions-user

github-actions/data.table/pkgup.yaml

@@ -64,4 +64,4 @@ jobs:
       - name: deploy
         if: github.ref == 'refs/heads/master'
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

github-actions/data.table/test-coverage.yaml

@@ -51,7 +51,7 @@ jobs:
           covr::to_cobertura(cov)
         shell: Rscript {0}
 
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@v6
         with:
           fail_ci_if_error: ${{ github.event_name != 'pull_request' || secrets.CODECOV_TOKEN }}
           files: ./cobertura.xml

github-actions/mlflow/advice.yml

@@ -20,6 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0

github-actions/mlflow/auto-assign.yml

@@ -26,6 +26,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0

github-actions/mlflow/auto-close-pr.yml

@@ -22,6 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -31,4 +32,4 @@ jobs:
             const script = require(
               `${process.env.GITHUB_WORKSPACE}/.github/workflows/auto-close-pr.js`
             );
-            await script({ context, github });
+            await script.main({ context, github });

github-actions/mlflow/autoformat-label-notify.yml

@@ -12,7 +12,7 @@ defaults:
 jobs:
   notify:
     runs-on: ubuntu-slim
-    if: ${{ github.event.label.name == 'autoformat' }}
+    if: github.event.label.name == 'autoformat'
     timeout-minutes: 5
     permissions:
       pull-requests: write # to post a comment on the PR

github-actions/mlflow/autoformat.yml

@@ -13,7 +13,7 @@ jobs:
   check-comment:
     runs-on: ubuntu-slim
     timeout-minutes: 10
-    if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '/autoformat') }}
+    if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/autoformat')
     permissions:
       statuses: write # autoformat.createStatus
       pull-requests: write # autoformat.createReaction on PRs
@@ -29,6 +29,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - name: judge
@@ -50,7 +51,7 @@ jobs:
             return { ...pullInfo, shouldAutoformat };
 
       - name: Check maintainer access
-        if: ${{ fromJSON(steps.judge.outputs.result).shouldAutoformat }}
+        if: fromJSON(steps.judge.outputs.result).shouldAutoformat
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           retries: 3
@@ -62,14 +63,15 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     needs: check-comment
-    if: ${{ needs.check-comment.outputs.should_autoformat == 'true' }}
+    if: needs.check-comment.outputs.should_autoformat == 'true'
     permissions:
       pull-requests: read # view files modified in PR
     outputs:
       reformatted: ${{ steps.patch.outputs.reformatted }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           repository: ${{ needs.check-comment.outputs.repository }}
           ref: ${{ needs.check-comment.outputs.head_ref }}
           # Set fetch-depth to merge the base branch
@@ -87,8 +89,10 @@ jobs:
         id: diff
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REPO: ${{ github.repository }}
+          PULL_NUMBER: ${{ needs.check-comment.outputs.pull_number }}
         run: |
-          changed_files="$(gh pr view --repo ${{ github.repository }} ${{ needs.check-comment.outputs.pull_number }} --json files --jq '.files.[].path')"
+          changed_files="$(gh pr view --repo $REPO $PULL_NUMBER --json files --jq '.files.[].path')"
           protos=$([[ -z $(echo "$changed_files" | grep '^\(mlflow/protos\|tests/protos\)') ]] && echo "false" || echo "true")
           js=$([[ -z $(echo "$changed_files" | grep '^mlflow/server/js') ]] && echo "false" || echo "true")
           docs=$([[ -z $(echo "$changed_files" | grep '^docs/') ]] && echo "false" || echo "true")
@@ -103,13 +107,16 @@ jobs:
           echo "api=$api" >> $GITHUB_OUTPUT
       # Merge the base branch (which is usually master) to apply formatting using the latest configurations.
       - name: Merge base branch
+        env:
+          BASE_REPO: ${{ needs.check-comment.outputs.base_repo }}
+          BASE_REF: ${{ needs.check-comment.outputs.base_ref }}
         run: |
           # This identity is only used for the temporary merge commit and is not pushed.
           git config user.name 'name'
           git config user.email 'email'
-          git remote add base https://github.com/${{ needs.check-comment.outputs.base_repo }}.git
-          git fetch base ${{ needs.check-comment.outputs.base_ref }}
-          git merge base/${{ needs.check-comment.outputs.base_ref }}
+          git remote add base https://github.com/$BASE_REPO.git
+          git fetch base $BASE_REF
+          git merge base/$BASE_REF
       - uses: ./.github/actions/setup-python
       # ************************************************************************
       # pre-commit
@@ -144,7 +151,7 @@ jobs:
       - if: steps.diff.outputs.js == 'true'
         working-directory: mlflow/server/js
         run: |
-          yarn install
+          yarn install --immutable
       - if: steps.diff.outputs.js == 'true'
         working-directory: mlflow/server/js
         run: |
@@ -174,16 +181,18 @@ jobs:
       # ************************************************************************
       - if: steps.diff.outputs.api == 'true'
         run: |
-          uv run --group docs --extra gateway --directory docs/api_reference make dummy
+          uv run --group docs --group torch --extra gateway --directory docs/api_reference make dummy
       # ************************************************************************
       # Upload patch
       # ************************************************************************
       - name: Create patch
         id: patch
+        env:
+          RUN_ID: ${{ github.run_id }}
         run: |
           git add -N .
-          git diff > ${{ github.run_id }}.diff
-          reformatted=$([[ -s ${{ github.run_id }}.diff ]] && echo "true" || echo "false")
+          git diff > $RUN_ID.diff
+          reformatted=$([[ -s $RUN_ID.diff ]] && echo "true" || echo "false")
           echo "reformatted=$reformatted" >> $GITHUB_OUTPUT
 
       - name: Upload patch
@@ -196,13 +205,13 @@ jobs:
     runs-on: ubuntu-slim
     timeout-minutes: 5
     needs: [check-comment, format]
-    if: ${{ needs.format.outputs.reformatted == 'true' }}
+    if: needs.format.outputs.reformatted == 'true'
     permissions:
       contents: read
     outputs:
       head_sha: ${{ steps.push.outputs.head_sha }}
     steps:
-      - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
         id: app-token
         with:
           app-id: ${{ secrets.APP_ID }}
@@ -211,6 +220,7 @@ jobs:
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: true
           repository: ${{ needs.check-comment.outputs.repository }}
           ref: ${{ needs.check-comment.outputs.head_ref }}
           # Set fetch-depth to merge the base branch
@@ -257,7 +267,7 @@ jobs:
           git merge base/${BASE_REF}
 
       - name: Download patch
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: ${{ github.run_id }}.diff
           path: /tmp
@@ -285,17 +295,22 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - name: Update status
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          NEEDS_JSON: ${{ toJson(needs) }}
+          HEAD_SHA: ${{ needs.check-comment.outputs.head_sha }}
+          PUSH_HEAD_SHA: ${{ needs.push.outputs.head_sha }}
         with:
           retries: 3
           script: |
-            const needs = ${{ toJson(needs) }};
-            const head_sha = '${{ needs.check-comment.outputs.head_sha }}'
+            const needs = JSON.parse(process.env.NEEDS_JSON);
+            const head_sha = process.env.HEAD_SHA;
             const autoformat = require('./.github/workflows/autoformat.js');
-            const push_head_sha = '${{ needs.push.outputs.head_sha }}';
+            const push_head_sha = process.env.PUSH_HEAD_SHA;
             if (push_head_sha) {
               await autoformat.approveWorkflowRuns(context, github, push_head_sha);
             }

github-actions/mlflow/build-wheel.yml

@@ -48,32 +48,44 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           ref: ${{ github.event.inputs.ref }}
       - uses: ./.github/actions/untracked
       - uses: ./.github/actions/setup-python
-      - uses: ./.github/actions/setup-node
+      - if: matrix.type == 'dev'
+        uses: ./.github/actions/setup-node
 
       - name: Build UI
+        if: matrix.type == 'dev'
         working-directory: mlflow/server/js
         run: |
-          yarn
+          yarn install --immutable
           yarn build
 
+      - name: Create placeholder UI
+        if: matrix.type != 'dev'
+        run: |
+          mkdir -p mlflow/server/js/build
+          echo "<html></html>" > mlflow/server/js/build/index.html
+
       - name: Install dependencies
         run: |
-          pip install build setuptools twine wheel
+          uv pip install --system build setuptools twine wheel
 
       - name: Build distribution files
         id: build-dist
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          MATRIX_TYPE: ${{ matrix.type }}
         run: |
           # if workflow_dispatch is triggered, use the specified ref
-          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
+          if [ "$EVENT_NAME" == "workflow_dispatch" ]; then
             SHA_OPT="--sha $(git rev-parse HEAD)"
           else
             SHA_OPT=""
           fi
 
-          python dev/build.py --package-type "${{ matrix.type }}" $SHA_OPT
+          python dev/build.py --package-type "$MATRIX_TYPE" $SHA_OPT
 
           # List distribution files and check their file sizes
           ls -lh dist
@@ -89,43 +101,57 @@ jobs:
           echo "wheel-size=${wheel_size}" >> $GITHUB_OUTPUT
 
       - name: List files in source distribution
+        env:
+          SDIST_PATH: ${{ steps.build-dist.outputs.sdist-path }}
         run: |
-          tar -tf ${{ steps.build-dist.outputs.sdist-path }}
+          tar -tf $SDIST_PATH
 
       - name: List files in binary distribution
+        env:
+          WHEEL_PATH: ${{ steps.build-dist.outputs.wheel-path }}
         run: |
-          unzip -l ${{ steps.build-dist.outputs.wheel-path }}
+          unzip -l $WHEEL_PATH
 
       - name: Compare files in source and binary distributions
+        env:
+          SDIST_PATH: ${{ steps.build-dist.outputs.sdist-path }}
+          WHEEL_PATH: ${{ steps.build-dist.outputs.wheel-path }}
         run: |
-          tar -tzf ${{ steps.build-dist.outputs.sdist-path }} | grep -v '/$' | cut -d'/' -f2- | sort > /tmp/source.txt
-          zipinfo -1 ${{ steps.build-dist.outputs.wheel-path }} | sort > /tmp/wheel.txt
+          tar -tzf $SDIST_PATH | grep -v '/$' | cut -d'/' -f2- | sort > /tmp/source.txt
+          zipinfo -1 $WHEEL_PATH | sort > /tmp/wheel.txt
           diff /tmp/source.txt /tmp/wheel.txt || true
 
       - name: Run twine check
+        env:
+          WHEEL_PATH: ${{ steps.build-dist.outputs.wheel-path }}
         run: |
-          twine check --strict ${{ steps.build-dist.outputs.wheel-path }}
+          twine check --strict $WHEEL_PATH
 
       - name: Test installation from tarball
+        env:
+          SDIST_PATH: ${{ steps.build-dist.outputs.sdist-path }}
         run: |
-          pip install ${{ steps.build-dist.outputs.sdist-path }}
+          uv pip install --system $SDIST_PATH
           python -c "import mlflow; print(mlflow.__version__)"
           python -c "from mlflow import *"
 
       - name: Test installation from wheel
+        env:
+          WHEEL_PATH: ${{ steps.build-dist.outputs.wheel-path }}
         run: |
-          pip install --force-reinstall ${{ steps.build-dist.outputs.wheel-path }}
+          uv pip install --system --force-reinstall $WHEEL_PATH
           python -c "import mlflow; print(mlflow.__version__)"
           python -c "from mlflow import *"
 
       - name: Test installation from GitHub
         env:
           REPO: ${{ github.repository }}
           REF: ${{ github.ref }}
+          MATRIX_TYPE: ${{ matrix.type }}
         run: |
-          if [ "${{ matrix.type }}" == "skinny" ]; then
+          if [ "$MATRIX_TYPE" == "skinny" ]; then
             URL="git+https://github.com/${REPO}.git@${REF}#subdirectory=libs/skinny"
-          elif [ "${{ matrix.type }}" == "tracing" ]; then
+          elif [ "$MATRIX_TYPE" == "tracing" ]; then
             URL="git+https://github.com/${REPO}.git@${REF}#subdirectory=libs/tracing"
           else
             URL="git+https://github.com/${REPO}.git@${REF}"
@@ -135,8 +161,10 @@ jobs:
 
       - name: Test dev/install-skinny.sh
         if: github.event_name == 'pull_request'
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
-          dev/install-skinny.sh pull/${{ github.event.pull_request.number }}/merge
+          dev/install-skinny.sh pull/$PR_NUMBER/merge
 
       # Anyone with read access can download the uploaded wheel on GitHub.
       - name: Upload wheel
@@ -151,9 +179,11 @@ jobs:
 
       - name: Generate summary
         if: github.event_name == 'workflow_dispatch'
+        env:
+          ARTIFACT_URL: ${{ steps.upload-wheel.outputs.artifact-url }}
         run: |
           echo "### Download URL" >> $GITHUB_STEP_SUMMARY
-          echo "${{ steps.upload-wheel.outputs.artifact-url }}" >> $GITHUB_STEP_SUMMARY
+          echo "$ARTIFACT_URL" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
           echo "### Notes" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY

github-actions/mlflow/closing-pr.yml

@@ -20,6 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          persist-credentials: false
           sparse-checkout: |
             .github
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0

github-actions/mlflow/copilot-setup-steps.yml

@@ -13,10 +13,13 @@ defaults:
 jobs:
   copilot-setup-steps:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
       - uses: ./.github/actions/setup-node
       - uses: ./.github/actions/setup-python
       - uses: ./.github/actions/setup-java