Repository navigation
chore(deps): Update dependency intel/gmmlib to v22.10.1 - #1184
renovate[bot] wants to merge 1 commit into
Conversation
|
Parked as draft — this bump cannot land alone.
(The Follow-up in flight: a Renovate rule to group 🤖 Generated with Claude Code |
…NEO stack as a set Two train PRs could never merge, for reasons Renovate cannot know: - #1183 digest-pinned slsa-framework/slsa-github-generator. The generator's README says its reusable workflows MUST be referenced by an exact @vX.Y.Z tag so slsa-verifier can verify the trusted builder (hash-pinned reusable workflows are unsupported, slsa-verifier#12), and the Release Script Contract check (scripts/release/tests/test-publication-environment-binding.sh) enforces the tag form. pinDigests: false for that package; tag bumps still flow. - #1184 bumped intel/gmmlib alone. dev/Containerfile fetches libigdgmm12_${GMMLIB_VER} and the IGC debs from the intel/compute-runtime release page for NEO_VER, so a lone gmmlib bump yields a 404 in the Dev Container Build. compute-runtime, intel-graphics-compiler, gmmlib and level-zero are now one Renovate group; manual review stays (ADR-0605). Verified: renovate.json parses; the untouched release-contract validator still passes on master's tag-form supply-chain.yml. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update ( If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
…NEO stack as a set (#1188) * chore(renovate): never digest-pin the SLSA generator; bump the Intel NEO stack as a set Two train PRs could never merge, for reasons Renovate cannot know: - #1183 digest-pinned slsa-framework/slsa-github-generator. The generator's README says its reusable workflows MUST be referenced by an exact @vX.Y.Z tag so slsa-verifier can verify the trusted builder (hash-pinned reusable workflows are unsupported, slsa-verifier#12), and the Release Script Contract check (scripts/release/tests/test-publication-environment-binding.sh) enforces the tag form. pinDigests: false for that package; tag bumps still flow. - #1184 bumped intel/gmmlib alone. dev/Containerfile fetches libigdgmm12_${GMMLIB_VER} and the IGC debs from the intel/compute-runtime release page for NEO_VER, so a lone gmmlib bump yields a 404 in the Dev Container Build. compute-runtime, intel-graphics-compiler, gmmlib and level-zero are now one Renovate group; manual review stays (ADR-0605). Verified: renovate.json parses; the untouched release-contract validator still passes on master's tag-form supply-chain.yml. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * ci(go): take the toolchain version from go.mod, not a literal pin go-ci.yml pinned go-version: "1.27.0" while go.mod's directive is what Renovate bumps, and GOTOOLCHAIN=local forbids auto-download — so #1139 (go 1.27.0 -> 1.27.1) failed go vet + go test with: go: go.mod requires go >= 1.27.1 (running go 1.27.0; GOTOOLCHAIN=local) Every setup-go step now uses go-version-file: go.mod. actionlint finding count unchanged vs master. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * docs(changelog): regenerate the Unreleased block from changelog.d/ scripts/release/concat-changelog-fragments.sh --check (Release Script Contract, ADR-1128) fails when a fragment is added without re-rendering CHANGELOG.md. Rendered with --write, not hand-edited (ADR-0221). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Lusoris <lusoris@pm.me> Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
1 participant
This PR contains the following updates:
22.10.0→22.10.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
intel/gmmlib (intel/gmmlib)
v22.10.1Compare Source
Configuration
📅 Schedule: (in timezone Europe/Vienna)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.