From 07d997a4c59915f550332905c43991cc59204591 Mon Sep 17 00:00:00 2001
From: erman-gurses <erman.gurses@amd.com>
Date: Mon, 31 Aug 2026 19:03:02 +0000
Subject: [PATCH] feat(ci): pin TheRock workflows to 064defc

---
 .github/actions/ci-env/action.yml           |  2 +-
 .github/workflows/therock-multi-arch-ci.yml | 16 ++++++++--------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/actions/ci-env/action.yml b/.github/actions/ci-env/action.yml
index 2c9ac15883c8..743c5b728286 100644
--- a/.github/actions/ci-env/action.yml
+++ b/.github/actions/ci-env/action.yml
@@ -13,7 +13,7 @@ outputs:
     value: "a022846cf553c2b135410a5168f97705f1b9c6ac" # 2026-08-22
   baseline-run-id:
     description: "TheRock workflow run ID for prebuilt stage artifacts"
-    value: "33012920661" # Updated by assistant-librarian[bot] on submodule bumps
+    value: "33351136057" # Updated by assistant-librarian[bot] on submodule bumps
   docker-image:
     description: "Docker container image for Linux builds"
     value: "ghcr.io/rocm/therock_build_manylinux_x86_64@sha256:cf4f6d9909056906e4a1c0bc4c245658a0af4c6a6174082a86adfa2d518b7aeb"
diff --git a/.github/workflows/therock-multi-arch-ci.yml b/.github/workflows/therock-multi-arch-ci.yml
index 21211c0e386a..1909e388f75e 100644
--- a/.github/workflows/therock-multi-arch-ci.yml
+++ b/.github/workflows/therock-multi-arch-ci.yml
@@ -129,7 +129,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: ROCm/TheRock
-          ref: b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+          ref: 064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
           path: _therock
           sparse-checkout: build_tools/github_actions
           sparse-checkout-cone-mode: true
@@ -149,7 +149,7 @@ jobs:
   setup:
     needs: [ci-gate, ci-env, configure]
     if: ${{ needs.ci-gate.outputs.enabled == 'true' }}
-    uses: ROCm/TheRock/.github/workflows/setup_multi_arch.yml@b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+    uses: ROCm/TheRock/.github/workflows/setup_multi_arch.yml@064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
     with:
       build_variant: "release"
       # Limit GPU families for rocm-libraries CI
@@ -172,7 +172,7 @@ jobs:
       # and determines which stages to rebuild based on changed files
       stage_reuse_mode: reuse-stage
       repository: ROCm/TheRock
-      ref: b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+      ref: 064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
       # Pass external repo info for stage-impact analysis
       external_repo: '{"repository":"${{ github.repository }}","ref":"${{ github.sha }}"}'
 
@@ -185,7 +185,7 @@ jobs:
         needs.setup.outputs.enable_build_jobs == 'true' &&
         needs.configure.outputs.skip_tests != 'true'
       }}
-    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_linux.yml@b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_linux.yml@064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
     secrets: inherit
     with:
       build_config: ${{ needs.setup.outputs.linux_build_config }}
@@ -199,7 +199,7 @@ jobs:
       changed_projects: ${{ needs.configure.outputs.run_all_tests == 'true' && '' || needs.configure.outputs.changed_projects }}
       repository: ROCm/TheRock
       # Concrete SHA resolved once by setup; do not re-resolve main here.
-      ref: b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+      ref: 064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
     permissions:
       contents: read
       id-token: write
@@ -213,7 +213,7 @@ jobs:
         needs.setup.outputs.enable_build_jobs == 'true' &&
         needs.configure.outputs.skip_tests != 'true'
       }}
-    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_windows.yml@b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+    uses: ROCm/TheRock/.github/workflows/multi_arch_ci_windows.yml@064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
     secrets: inherit
     with:
       build_config: ${{ needs.setup.outputs.windows_build_config }}
@@ -225,7 +225,7 @@ jobs:
       changed_projects: ${{ needs.configure.outputs.run_all_tests == 'true' && '' || needs.configure.outputs.changed_projects }}
       repository: ROCm/TheRock
       # Concrete SHA resolved once by setup; do not re-resolve main here.
-      ref: b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+      ref: 064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
     permissions:
       contents: read
       id-token: write
@@ -248,7 +248,7 @@ jobs:
         with:
           repository: "ROCm/TheRock"
           # Concrete SHA resolved once by setup; do not re-resolve main here.
-          ref: b45a06045cbb29c85e221748e653ac2521c6e1bf # 2026-08-26
+          ref: 064defc4f45d42ed09b4d40fe4343419663e8ec2 # 2026-08-31
           sparse-checkout: build_tools/github_actions
           sparse-checkout-cone-mode: true