Merge branch 'open-edge-platform:main' into main

rajeshgangireddy · web-flow · commit f0bf5081a28b · 2026-04-16T16:14:59.000+02:00
diff --git a/.github/actions/install-dependencies/action.yaml b/.github/actions/install-dependencies/action.yaml
@@ -37,7 +37,7 @@ runs:
 
     - name: Install Just
       if: ${{ inputs.install-just == 'true' }}
-      uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3.1.0
+      uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
       with:
         just-version: ${{ inputs.just-version }}
 
diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
@@ -13,7 +13,7 @@ permissions: {} # No permissions by default
 jobs:
   component-check:
     name: Backend workflow
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     timeout-minutes: 30
diff --git a/.github/workflows/build-images-comment.yml b/.github/workflows/build-images-comment.yml
@@ -22,15 +22,15 @@ jobs:
     env:
       COMMENT_CREATED_AT: ${{ github.event.comment.created_at }}
     if: github.event.issue.pull_request && github.event.comment.body == '/build'
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       pull-requests: write # to comment on a pull request
     outputs:
       head: ${{ steps.get-sha-commit.outputs.head }}
     steps:
       - name: Validate and get sha commit
         id: get-sha-commit
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const allowedAssociations = ["COLLABORATOR", "MEMBER", "OWNER"];
@@ -65,7 +65,7 @@ jobs:
   get-build-version:
     name: Generate build version
     needs: [get-sha-commit]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     outputs:
@@ -94,7 +94,7 @@ jobs:
   result-output:
     name: Check result and comment PR
     needs: [get-sha-commit, get-build-version, distrib]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       pull-requests: write # to comment on a pull request
     if: ${{ always() && !cancelled() }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -13,7 +13,7 @@ permissions: {}
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       security-events: write # required to publish sarif
 
diff --git a/.github/workflows/collect-license.yml b/.github/workflows/collect-license.yml
@@ -9,7 +9,7 @@ permissions: {} # No permissions by default
 jobs:
   collect-sbom-container-image:
     name: Generate SBOM with Syft
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     strategy:
@@ -83,15 +83,15 @@ jobs:
             @csv' sbom-container-image.spdx.json >> sbom-container-image.csv
 
       - name: Upload docker image CSV
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom-container-image-${{ matrix.ai-device }}-csv
           path: sbom-container-image.csv
           retention-days: 30
 
   collect-sbom-library:
     name: Collect Library Licenses
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     steps:
@@ -114,7 +114,7 @@ jobs:
           uv run pip-licenses --format=csv --output-file=../licenses-library.csv
 
       - name: Upload CSV
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: licenses-list-csv
           path: licenses-library.csv
diff --git a/.github/workflows/collect-source.yml b/.github/workflows/collect-source.yml
@@ -8,7 +8,7 @@ permissions: {} # No permissions by default on workflow level
 jobs:
   collect-packages-names:
     name: Generate SBOM with Syft
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     strategy:
@@ -59,14 +59,14 @@ jobs:
           ] | unique[]' > pkg_list_$DEVICE.txt
 
       - name: Upload packages list
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: pkg_list_${{ matrix.ai-device }}
           path: pkg_list_*
           retention-days: 5
 
   get-unique-names:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     needs:
       - collect-packages-names
     outputs:
@@ -94,10 +94,10 @@ jobs:
           echo "unique_package_names_oneline=$(cat unique_package_names_oneline.txt)" >> $GITHUB_OUTPUT
 
   collect-source-code:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     needs: get-unique-names
     container:
-      image: debian:bookworm-slim@sha256:f06537653ac770703bc45b4b113475bd402f451e85223f0f2837acbf89ab020a
+      image: debian:bookworm-slim@sha256:4724b8cc51e33e398f0e2e15e18d5ec2851ff0c2280647e1310bc1642182655d
     steps:
       - name: Add apt sources for deb-src
         shell: bash
@@ -134,7 +134,7 @@ jobs:
           tar -czf "$ARCHIVE_NAME" -C "$OUTPUT_DIR" .
 
       - name: Upload source code archive
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: source-code-archive
           path: source_code.tar.gz
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
@@ -9,7 +9,7 @@ permissions: {} # No permissions by default
 jobs:
   build-parameters:
     name: Prepare build parameters
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     outputs:
@@ -41,7 +41,7 @@ jobs:
 
   check-existing-issue:
     name: Check for existing failure issue
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     needs: distrib
     if: failure()
     permissions:
@@ -51,7 +51,7 @@ jobs:
     steps:
       - name: Check for existing open issue
         id: check
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             core.info('Searching for existing open issues with labels: daily-failure, automated');
@@ -82,14 +82,14 @@ jobs:
 
   create-issue-on-failure:
     name: Create issue on scheduled workflow failure
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     needs: [distrib, check-existing-issue]
     if: failure() && needs.check-existing-issue.outputs.issue_exists == 'false'
     permissions:
       issues: write # Permission to create issues
     steps:
       - name: Create GitHub Issue
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const workflowRunUrl = `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
diff --git a/.github/workflows/distrib.yml b/.github/workflows/distrib.yml
@@ -58,7 +58,7 @@ permissions: {} # No permissions by default
 jobs:
   component-check:
     name: Distrib workflow
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
       packages: write # Permission to push packages to GHCR
@@ -130,7 +130,7 @@ jobs:
 
       - name: Log in to GHCR
         if: inputs.push_images
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
@@ -8,7 +8,7 @@ jobs:
     name: Documentation / MDX checks
     permissions:
       contents: read
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/.github/workflows/library.yml b/.github/workflows/library.yml
@@ -13,7 +13,7 @@ permissions: {} # No permissions by default
 jobs:
   component-check:
     name: Library workflow
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     timeout-minutes: 60
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -21,7 +21,7 @@ concurrency:
 jobs:
   build-parameters:
     name: Prepare build parameters
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     timeout-minutes: 10
@@ -100,7 +100,7 @@ jobs:
     permissions:
       contents: read
     if: needs.build-parameters.outputs.components-list && contains(fromJson(needs.build-parameters.outputs.components-list), 'markdown')
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -122,7 +122,7 @@ jobs:
   success:
     name: Status checks
     needs: [ build-parameters, library, backend, ui, distrib, markdown, documentation ]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     if: ${{ always() && !cancelled() }}
     env:
       CHECKS: ${{ join(needs.*.result, ' ') }}
diff --git a/.github/workflows/npm-audit-fix.yml b/.github/workflows/npm-audit-fix.yml
@@ -14,7 +14,7 @@ permissions: {} # No permissions by default on workflow level
 
 jobs:
   npm-audit-fix:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -62,14 +62,14 @@ jobs:
       - name: Get token
         if: steps.check-changes.outputs.changed == 'true'
         id: get-github-app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
         with:
           app-id: ${{ secrets.RENOVATE_APP_ID }}
           private-key: ${{ secrets.RENOVATE_APP_PEM }}
 
       - name: Create PR if lockfile changed
         if: steps.check-changes.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           token: ${{ steps.get-github-app-token.outputs.token }}
           author: oep-renovate[bot] <212772560+oep-renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/release-candidate-app.yml b/.github/workflows/release-candidate-app.yml
@@ -9,7 +9,7 @@ permissions: {} # No permissions by default
 jobs:
   build-parameters:
     name: Prepare build parameters
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     environment: 'prod'
     permissions:
       contents: read
diff --git a/.github/workflows/release-candidate-lib.yml b/.github/workflows/release-candidate-lib.yml
@@ -10,7 +10,7 @@ permissions: {} # No permissions by default
 jobs:
   build:
     name: Build distribution
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     environment: 'prod'
     permissions:
       contents: read
diff --git a/.github/workflows/release-lib.yml b/.github/workflows/release-lib.yml
@@ -10,7 +10,7 @@ permissions: {} # No permissions by default
 jobs:
   build:
     name: Build distribution
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     environment: 'prod'
     permissions:
       contents: write
diff --git a/.github/workflows/renovate-config-validator.yml b/.github/workflows/renovate-config-validator.yml
@@ -25,7 +25,7 @@ concurrency:
 
 jobs:
   validate:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       contents: read
     steps:
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
@@ -56,7 +56,7 @@ jobs:
   renovate:
     permissions:
       contents: read
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
 
     steps:
       - name: Checkout
@@ -66,13 +66,13 @@ jobs:
 
       - name: Get token
         id: get-github-app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
         with:
           app-id: ${{ secrets.RENOVATE_APP_ID }}
           private-key: ${{ secrets.RENOVATE_APP_PEM }}
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@3633cede7d4d4598438e654eac4a695e46004420 # v46.1.7
+        uses: renovatebot/github-action@eb932558ad942cccfd8211cf535f17ff183a9f74 # v46.1.9
         with:
           configurationFile: .github/renovate.json5
           token: "${{ steps.get-github-app-token.outputs.token }}"
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -14,7 +14,7 @@ permissions: {} # No permissions by default
 jobs:
   analysis:
     name: Scorecards analysis
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'open-edge-platform' && 'overflow' || 'ubuntu-latest' }}
     permissions:
       security-events: write # Needed to upload the results to code-scanning dashboard
       id-token: write # Needed to publish results and get a badge
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
diff --git a/.github/workflows/ui.yml b/.github/workflows/ui.yml
diff --git a/.github/workflows/windows-installer.yml b/.github/workflows/windows-installer.yml
diff --git a/application/backend/app/runtime/webrtc/visualizer.py b/application/backend/app/runtime/webrtc/visualizer.py
diff --git a/application/backend/app/settings.py b/application/backend/app/settings.py
diff --git a/application/backend/tests/unit/runtime/webrtc/test_visualizer.py b/application/backend/tests/unit/runtime/webrtc/test_visualizer.py
diff --git a/application/docker/Dockerfile b/application/docker/Dockerfile
