Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungRefreshed repository pull requests page generally available(22.09.2026 um 03:25 Uhr)
Sichere ProgrammierungThe Joy of Learning the Basics Again(22.09.2026 um 03:28 Uhr)
Sichere ProgrammierungZero-Code OpenTelemetry Tracing for Dagster(22.09.2026 um 03:39 Uhr)
Linux Tipps & Hardening`prime-all`(22.09.2026 um 02:28 Uhr)
IT Security Toolsopensoho v0.15.2(22.09.2026 um 03:33 Uhr)
IT Security NachrichtenUS Proposes AI Incident Alert System in Talks With China, Bessent Says(22.09.2026 um 04:01 Uhr)
Sichere ProgrammierungRefreshed repository pull requests page generally available(22.09.2026 um 03:25 Uhr)
Sichere ProgrammierungThe Joy of Learning the Basics Again(22.09.2026 um 03:28 Uhr)
Sichere ProgrammierungZero-Code OpenTelemetry Tracing for Dagster(22.09.2026 um 03:39 Uhr)
Linux Tipps & Hardening`prime-all`(22.09.2026 um 02:28 Uhr)
IT Security Toolsopensoho v0.15.2(22.09.2026 um 03:33 Uhr)
IT Security NachrichtenUS Proposes AI Incident Alert System in Talks With China, Bessent Says(22.09.2026 um 04:01 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

trunk/ce9267a4585256d1465a00a6a7687ce76f3784a5: Fetch tags in unified manywheel build job so release tags are detected

Release candidate builds triggered by a tag (e.g. v2.13.0-rc1) were producing wheels that pinned triton to a dev-style version such as triton==3.7.1+git5d6048aa instead of the release triton==3.7.1, which then fails to install in the test…

0
↗ Quelle (github.com)
Reagiere als Erste:r — dein Feedback zählt!

Release candidate builds triggered by a tag (e.g. v2.13.0-rc1) were

producing wheels that pinned triton to a dev-style version such as

triton==3.7.1+git5d6048aa instead of the release triton==3.7.1, which

then fails to install in the test job because that version does not

exist on the test index.


Root cause: the unified inline manywheel build job (cpu/cpu-aarch64/

cuda/cuda-aarch64) checks out the raw commit via ref: github.sha with

fetch-depth: 2. Checking out a bare SHA does not fetch the tag ref, so

tagged_version() in .ci/pytorch/binary_populate_env.sh

(git describe --tags --exact) fails and the build falls through to the

<version>.dev<DATE> default. binary_populate_env.sh then takes its

.*dev.* branch and appends +git<triton-shorthash> to the triton

requirement that gets baked into the wheel metadata.


Fix: add fetch-tags: true to the inline build job checkout in the

linux binary build template so the tag pointing at the checked-out

commit is fetched, letting git describe --tags --exact succeed and the

build resolve to the release version. The ROCm/XPU/s390x builds use the

reusable _binary-build-linux.yml whose checkout has no pinned ref (it

uses the default tag ref for a tag push) and are unaffected.


This is the same class of bug fixed for the older checkout-pytorch path

in #180508; this covers the inlined unified build job introduced since.


Test Plan:


Regenerated the workflows from the template and confirmed only the two

linux manywheel workflows change, each gaining fetch-tags: true on its

four unified build jobs:


python3 .github/scripts/generate_ci_workflows.py
git diff --stat .github/workflows
grep -c 'fetch-tags: true' \
.github/workflows/generated-linux-binary-manywheel-nightly.yml \
.github/workflows/generated-linux-aarch64-binary-manywheel-nightly.yml

Validated the regenerated YAML parses and passes actionlint (the only

reported shellcheck warnings are pre-existing on the base files):


python3 -c "import yaml; yaml.safe_load(open(f)) for f in (...)"
lintrunner --take ACTIONLINT \
.github/workflows/generated-linux-binary-manywheel-nightly.yml \
.github/workflows/generated-linux-aarch64-binary-manywheel-nightly.yml

This PR was authored with the assistance of an AI coding assistant.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten trunk/ce9267a4585256d1465a00a6a7687ce76f3784a5: Fetch tags in unified manywheel build job so release tags are detected

Thematisch verwandte Begriffe: trunkce9267a4585256d1465a00a6a7687ce76f3784a5, Fetch, tags, unified · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-49449 | Joplin is an open source note-taking and to-do application that organise…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick