Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -80,7 +80,7 @@ jobs:
!cancelled() && !failure()
&& !(needs.pre-flight.outputs.docs_only == 'true'
|| needs.pre-flight.outputs.is_deployment_workflow == 'true')
uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@v1.1.0
uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@a2d0fba9aaaf595d9bb3a0e8f3e71461983e0f15
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Pinning to a commit SHA is good practice for supply-chain security, but without an inline comment the SHA is opaque — it's impossible to tell at a glance what version of _release_library.yml is in use, which makes future audits and upgrades harder. Adding a comment with the corresponding tag name keeps the security benefit while restoring readability. Note also that _cicd_preflight.yml on line 75 is still referenced via a mutable tag (@v0.94.1), so the two workflow references are now inconsistent.

Suggested change
uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@a2d0fba9aaaf595d9bb3a0e8f3e71461983e0f15
uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_release_library.yml@a2d0fba9aaaf595d9bb3a0e8f3e71461983e0f15 # v1.1.0

with:
release-ref: ${{ inputs.release-ref || github.sha }}
python-package: emerging_optimizers
Expand Down
2 changes: 1 addition & 1 deletion emerging_optimizers/package_info.py
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@

MAJOR = 0
MINOR = 2
PATCH = 0
PATCH = 1
PRE_RELEASE = ""

# Use the following formatting: (major, minor, patch, pre-release)
Expand Down