ROCm
diff --git a/‎.github/workflows/abi-compliance-check.yml‎
Lines changed: 4 additions & 4 deletions b/‎.github/workflows/abi-compliance-check.yml‎
Lines changed: 4 additions & 4 deletions
diff --git a/‎.github/workflows/ainic_test_runner.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/ainic_test_runner.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/amdsmi-build.yml‎
Lines changed: 4 additions & 4 deletions b/‎.github/workflows/amdsmi-build.yml‎
Lines changed: 4 additions & 4 deletions
diff --git a/‎.github/workflows/amdsmi-dme-ci.yml‎
Lines changed: 5 additions & 5 deletions b/‎.github/workflows/amdsmi-dme-ci.yml‎
Lines changed: 5 additions & 5 deletions
diff --git a/‎.github/workflows/amdsmi-manylinux-build.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/amdsmi-manylinux-build.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/amdsmi-python-versions.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/amdsmi-python-versions.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/amdsmi-sles-packaging.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/amdsmi-sles-packaging.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/amdsmi-upgrade-downgrade.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/amdsmi-upgrade-downgrade.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/apply-labels.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/workflows/apply-labels.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/aqlprofile-codeql.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/aqlprofile-codeql.yml‎
Lines changed: 1 addition & 1 deletion
@@ -34,7 +34,7 @@ jobs:
           abi-compliance-checker --version
 
       - name: Checkout current code (new version)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -94,7 +94,7 @@ jobs:
 
       - name: Upload Major ABI Report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: major-abi-report
           path: abi_report.html
@@ -130,7 +130,7 @@ jobs:
           abi-compliance-checker --version
 
       - name: Checkout current code (new version)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -190,7 +190,7 @@ jobs:
 
       - name: Upload Minor ABI Report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: minor-abi-report
           path: abi_report.html
 
@@ -127,7 +127,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Run AINIC test suite (sbatch)
         id: run_tests
@@ -359,7 +359,7 @@ jobs:
 
       - name: Upload run log and reports
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ainic-test-report
           path: |
 
@@ -49,7 +49,7 @@ jobs:
     steps:
       # rocm-systems is a large monorepo; the wheel gate only needs the amdsmi
       # project and this workflow, so sparse-checkout keeps the fetch cheap.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           sparse-checkout: |
             projects/amdsmi
@@ -156,7 +156,7 @@ jobs:
     steps:
       # rocm-systems is a large monorepo; only the amdsmi project and this
       # workflow are needed, so sparse-checkout keeps the fetch cheap.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           sparse-checkout: |
             projects/amdsmi
@@ -211,7 +211,7 @@ jobs:
         # Not consumed by any downstream job; kept so a reviewer can download
         # the built .deb/.rpm from a PR run for manual testing.
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: amd-smi-lib-${{ matrix.package_format }}-${{ matrix.os }}-${{ env.PR_NUMBER }}-${{ env.BUILD_DATE }}
           # 99999 is the local (non-release) package version CPack stamps when
@@ -259,7 +259,7 @@ jobs:
 
       - name: Upload AMDSMI Command Test Results
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: amdsmi-command-tests-${{ matrix.os }}
           path: /tmp/test-results-${{ matrix.os }}
 
@@ -97,7 +97,7 @@ jobs:
       # Setup
       # --------------------------------------------------------
       - name: Checkout Super-repo
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Mark workspace safe for git
         run: git config --global --replace-all safe.directory "$GITHUB_WORKSPACE"
@@ -136,7 +136,7 @@ jobs:
       # actions/setup-go verifies the toolchain by version + checksum,
       # unlike a bare wget download.
       - name: Install Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ env.GO_VERSION }}
           # DME (with its go.sum) is cloned later, so setup-go has nothing to
@@ -196,7 +196,7 @@ jobs:
       # go.sum only exists after DME is cloned above, so cache Go modules and
       # the build cache here rather than via setup-go's ineffective auto-cache.
       - name: Cache Go Modules
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/go/pkg/mod
@@ -221,7 +221,7 @@ jobs:
       # so cache the build tree keyed on the pinned GPU_AGENT_BRANCH.
       # GPU_AGENT_WORKDIR is a symlink; cache the real dir under DME_DIR.
       - name: Cache GPU Agent Third-party Build
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ${{ env.DME_DIR }}/gpuagent/sw/nic/build
           key: ${{ runner.os }}-gpuagent-build-${{ env.GPU_AGENT_BRANCH }}
@@ -386,7 +386,7 @@ jobs:
 
       - name: Upload Integration Test Logs
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: dme-integration-logs-${{ matrix.os }}
           path: /tmp/integration-logs/
 
@@ -70,7 +70,7 @@ jobs:
     steps:
       # rocm-systems is a large monorepo; the wheel build only needs the amdsmi
       # project, so sparse-checkout keeps the fetch cheap.
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           sparse-checkout: |
             projects/amdsmi
@@ -130,7 +130,7 @@ jobs:
       # Not consumed by any downstream job; kept so a reviewer can download the
       # built wheel from a run. Named by commit SHA for traceability.
       - name: Upload wheels
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: ${{matrix.target.artifact-prefix}}-${{github.sha}}
           path: ${{github.workspace}}/wheels/*.whl
 
@@ -66,7 +66,7 @@ jobs:
           apt-get update
           apt-get install -y --no-install-recommends git ca-certificates
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # rocm-systems is a large monorepo; only the amdsmi tests are needed.
           sparse-checkout: |
@@ -77,7 +77,7 @@ jobs:
         # Container legs already ship the exact interpreter; only host runners
         # need setup-python.
         if: matrix.container == ''
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{matrix.python-version}}
 
 
@@ -56,7 +56,7 @@ jobs:
             libdrm-devel libnl3-devel libmnl-devel \
             python3 python3-devel
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # rocm-systems is a large monorepo; only the amdsmi project is needed.
           sparse-checkout: |
 
@@ -89,7 +89,7 @@ jobs:
             git gcc gcc-c++ cmake make rpm-build file \
             libdrm-devel libnl3-devel libmnl-devel python3 sudo
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # rocm-systems is a large monorepo; only the amdsmi project is needed.
           sparse-checkout: |
 
@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: Checkout super-repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: 3.x
 
 
@@ -62,7 +62,7 @@ jobs:
         sudo apt install -y git
 
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         sparse-checkout: |
           projects/aqlprofile