🕵️ SicherheitslückenHak5: Hackers Just Poisoned the Rust Supply Chain | Threat Wire(01.09.2026 um 14:00 Uhr)
🕵️ SicherheitslückenHak5: Hackers Found a Way Into Humanoid Robots | Threat Wire(04.09.2026 um 15:04 Uhr)
🔧 AI Nachrichten Bits und so #1021 (Passwort für Laufwerk)(31.08.2026 um 22:15 Uhr)
🔧 AI Nachrichten Bits und so #1022 (Wie Weißbier)(06.09.2026 um 20:39 Uhr)
🍏 iOS / Mac OSHue-App 6.0 ist da: das sind die Neuerungen(07.09.2026 um 17:21 Uhr)
🕵️ SicherheitslückenHak5: Hackers Just Poisoned the Rust Supply Chain | Threat Wire(01.09.2026 um 14:00 Uhr)
🕵️ SicherheitslückenHak5: Hackers Found a Way Into Humanoid Robots | Threat Wire(04.09.2026 um 15:04 Uhr)
🔧 AI Nachrichten Bits und so #1021 (Passwort für Laufwerk)(31.08.2026 um 22:15 Uhr)
🔧 AI Nachrichten Bits und so #1022 (Wie Weißbier)(06.09.2026 um 20:39 Uhr)
🍏 iOS / Mac OSHue-App 6.0 ist da: das sind die Neuerungen(07.09.2026 um 17:21 Uhr)

💾 Downloads 🕛 kürzlich 2 Min Lesezeit
0

trunk/ce9267a4585256d1465a00a6a7687ce76f3784a5: Fetch tags in unified manywheel build job so release tags are detected

↗ Quelle (GitHub · github.com)
🗣️ Stimme:
🐙
$ git clone https://github.com/pytorch/pytorch.git

Release candidate builds triggered by a tag (e.g. v2.13.0-rc1) were

producing wheels that pinned triton to a dev-style version such as

triton==3.7.1+git5d6048aa instead of the release triton==3.7.1, which

then fails to install in the test job because that version does not

exist on the test index.


Root cause: the unified inline manywheel build job (cpu/cpu-aarch64/

cuda/cuda-aarch64) checks out the raw commit via ref: github.sha with

fetch-depth: 2. Checking out a bare SHA does not fetch the tag ref, so

tagged_version() in .ci/pytorch/binary_populate_env.sh

(git describe --tags --exact) fails and the build falls through to the

<version>.dev<DATE> default. binary_populate_env.sh then takes its

.*dev.* branch and appends +git<triton-shorthash> to the triton

requirement that gets baked into the wheel metadata.


Fix: add fetch-tags: true to the inline build job checkout in the

linux binary build template so the tag pointing at the checked-out

commit is fetched, letting git describe --tags --exact succeed and the

build resolve to the release version. The ROCm/XPU/s390x builds use the

reusable _binary-build-linux.yml whose checkout has no pinned ref (it

uses the default tag ref for a tag push) and are unaffected.


This is the same class of bug fixed for the older checkout-pytorch path

in #180508; this covers the inlined unified build job introduced since.


Test Plan:


Regenerated the workflows from the template and confirmed only the two

linux manywheel workflows change, each gaining fetch-tags: true on its

four unified build jobs:


CODE
python3 .github/scripts/generate_ci_workflows.py
git diff --stat .github/workflows
grep -c 'fetch-tags: true' \
.github/workflows/generated-linux-binary-manywheel-nightly.yml \
.github/workflows/generated-linux-aarch64-binary-manywheel-nightly.yml

Validated the regenerated YAML parses and passes actionlint (the only

reported shellcheck warnings are pre-existing on the base files):


CODE
python3 -c "import yaml; yaml.safe_load(open(f)) for f in (...)"
lintrunner --take ACTIONLINT \
.github/workflows/generated-linux-binary-manywheel-nightly.yml \
.github/workflows/generated-linux-aarch64-binary-manywheel-nightly.yml

This PR was authored with the assistance of an AI coding assistant.

Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf github.com.
↗ Original-Artikel auf github.com lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 0%
🟡 In Evaluierung 0%
🟢 Keine Auswirkung 0%
Spannende Innovation 0%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
Hackers Just Poisoned the Rust Supply Chain | Threat Wire
1 Quelle
Hackers Found a Way Into Humanoid Robots | Threat Wire
1 Quelle
Bits und so #1021 (Passwort für Laufwerk)
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten trunk/ce9267a4585256d1465a00a6a7687ce76f3784a5: Fetch tags in unified manywheel build job so release tags are detected

Thematisch verwandte Begriffe: trunkce9267a4585256d1465a00a6a7687ce76f3784a5, Fetch, tags, unified · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...