Merge branch 'master' into es/kv-cache-compression-i8

Author: esmirno

.github/actions/common/constants.py

@@ -1,3 +1,6 @@
+# Copyright (C) 2018-2026 Intel Corporation
+# SPDX-License-Identifier: Apache-2.0
+
 from enum import Enum
 
 
@@ -19,7 +22,6 @@ class EventType(Enum):
     'public_windows_vs2019_debug',
     'public_windows_vs2022_release',
     'public_windows_vs2022_debug',
-    'public_manylinux2014_x86_64_release',
     'public_manylinux_2_28_x86_64_release',
     'public_macos_x86_64_release',
     'public_macos_arm64_release',
@@ -31,7 +33,6 @@ class EventType(Enum):
 
 platformKeys = (
     'almalinux8_x86_64',
-    'centos7_x86_64',
     'debian10_armhf',
     'rhel8_x86_64',
     'ubuntu22_arm64',
@@ -58,7 +59,6 @@ class EventType(Enum):
     PlatformKey.WINDOWS_X86_64: ProductType.PUBLIC_WINDOWS_VS2022_RELEASE,
     PlatformKey.MACOS_12_6_X86_64: ProductType.PUBLIC_MACOS_X86_64_RELEASE,
     PlatformKey.MACOS_14_7_ARM64: ProductType.PUBLIC_MACOS_ARM64_RELEASE,
-    PlatformKey.CENTOS7_X86_64: ProductType.PUBLIC_MANYLINUX2014_X86_64_RELEASE,
     PlatformKey.ALMALINUX8_X86_64: ProductType.PUBLIC_MANYLINUX_2_28_X86_64_RELEASE,
     PlatformKey.ANDROID_X64: ProductType.PUBLIC_ANDROID_X64_RELEASE,
     PlatformKey.ANDROID_ARM64: ProductType.PUBLIC_ANDROID_ARM64_RELEASE,

.github/copilot-instructions.md

@@ -99,6 +99,7 @@ Before posting any comment, apply this gate:
 - Do not review vendored/third-party sources under `thirdparty/` unless the PR explicitly modifies integration or patch logic.
 - Do not enforce component-specific runtime behavior rules on docs-only PRs.
 - For generated or auto-updated files (for example stubs/version bumps), comment only if there is clear breakage risk.
+- Python stub files (`.pyi`) under `src/bindings/python/` are auto-generated by a scheduled GitHub Actions workflow (`update_pyapi_stubs.yml`) using `pybind11-stubgen`. Do not request manual fixes to stub files.
 
 ## Component-Specific Expectations
 

.github/dockerfiles/docker_tag

@@ -1 +1 @@
-pr-34333
+pr-34631

.github/dockerfiles/ov_build/fedora_29/Dockerfile

@@ -7,6 +7,11 @@ USER root
 RUN echo "timeout=60" >> /etc/dnf/dnf.conf && \
     echo "retries=10" >> /etc/dnf/dnf.conf
 
+# Hackity hack: Fedora 29 is out of support for so long now
+# that we need to steal `ca-certificates` from Rocky Linux 8 repos
+# to trust "storage.openvinotoolkit.org" again
+RUN rpm -ihv --force https://download.rockylinux.org/pub/rocky/8/BaseOS/x86_64/os/Packages/c/ca-certificates-2025.2.80_v9.0.304-80.2.el8_10.noarch.rpm
+
 RUN dnf update -y && dnf install -y \
     git \
     curl \

.github/dockerfiles/ov_build/manylinux2014_x86_64/Dockerfile

@@ -19,10 +19,6 @@
         "error_text": "Failed to connect to github.com",
         "ticket": 131657
     },
-    {
-        "error_text": "Could not resolve host: github.com",
-        "ticket": 131546
-    },
     {
         "error_text": "retrieving gpg key timed out",
         "ticket": 131538
@@ -190,5 +186,13 @@
     {
         "error_text": "unable to resolve host",
         "ticket": 182238
+    },
+    {
+        "error_text": "Could not resolve host:",
+        "ticket": 182238
+    },
+    {
+        "error_text": "SSL connect error",
+        "ticket": 182850
     }
 ]

.github/scripts/workflow_rerun/errors_to_look_for.json

@@ -50,7 +50,7 @@ jobs:
           ref_name: ${{ github.ref_name }}
           component_pattern: "category: (.*)"
           repo_token: ${{ secrets.GITHUB_TOKEN }}
-          skip_when_only_listed_labels_set: 'docs'
+          skip_when_only_listed_labels_set: 'docs,GPU,NPU'
           skip_when_only_listed_files_changed: '*.md,*.rst,*.png,*.jpg,*.svg,*/layer_tests_summary/*,*/conformance/*'
 
       - name: Show affected components

.github/workflows/debian_10_arm.yml

@@ -225,13 +225,13 @@ jobs:
       INSTALL_TEST_DIR: ${{ github.workspace }}/install/tests
     steps:
       - name: Download OpenVINO package
-        uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: openvino_package
           path: ${{ env.INSTALL_DIR }}
 
       - name: Download OpenVINO tests package
-        uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: openvino_tests
           path: ${{ env.INSTALL_TEST_DIR }}
@@ -283,13 +283,13 @@ jobs:
       PARALLEL_TEST_SCRIPT: ${{ github.workspace }}/install/tests/functional_test_utils/layer_tests_summary/run_parallel.py
     steps:
       - name: Download OpenVINO package
-        uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: openvino_package
           path: ${{ env.INSTALL_DIR }}
 
       - name: Download OpenVINO tests package
-        uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: openvino_tests
           path: ${{ env.INSTALL_TEST_DIR }}

.github/workflows/dev_cpu_linux_snippets_libxsmm.yml

@@ -50,7 +50,7 @@ jobs:
           ref_name: ${{ github.ref_name }}
           component_pattern: "category: (.*)"
           repo_token: ${{ secrets.GITHUB_TOKEN }}
-          skip_when_only_listed_labels_set: 'docs'
+          skip_when_only_listed_labels_set: 'docs,NPU'
           skip_when_only_listed_files_changed: '*.md,*.rst,*.png,*.jpg,*.svg,*/layer_tests_summary/*,*/conformance/*'
 
       - name: Show affected components
@@ -131,7 +131,7 @@ jobs:
 
     steps:
       - name: Download OpenVINO RPM packages
-        uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           name: openvino_rpm_packages
           path: ${{ env.RPM_PACKAGES_DIR }}

.github/workflows/fedora_29.yml

@@ -60,6 +60,11 @@ on:
         description: 'Target branch for the build; taken from GitHub context by default'
         type: string
         required: false
+      use_latest_onednn:
+        description: 'Whether to use the latest OneDNN'
+        type: boolean
+        required: false
+        default: true
 
 permissions: read-all
 
@@ -135,7 +140,7 @@ jobs:
 
       # Ticket: 139627
       - name: Checkout the latest OneDNN for GPU in nightly
-        if: ${{ inputs.event-name == 'schedule' && inputs.os == 'ubuntu_22_04' }} # GPU tests are enabled only on U22
+        if: ${{ inputs.event-name == 'schedule' && inputs.os == 'ubuntu_22_04' && inputs.use_latest_onednn }} # GPU tests are enabled only on U22
         working-directory: ${{ env.OPENVINO_REPO }}/src/plugins/intel_gpu/thirdparty/onednn_gpu
         run: |
           git fetch origin