Skip to content

ci(deps): Bump actions/checkout from 4 to 6#3

Closed
dependabot[bot] wants to merge 13 commits into
mainfrom
dependabot/github_actions/actions/checkout-6
Closed

ci(deps): Bump actions/checkout from 4 to 6#3
dependabot[bot] wants to merge 13 commits into
mainfrom
dependabot/github_actions/actions/checkout-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown

Bumps actions/checkout from 4 to 6.

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

... (truncated)

Commits
  • df4cb1c Update changelog for v6.0.3 (#2446)
  • 1cce339 Fix checkout init for SHA-256 repositories (#2439)
  • 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
  • 0c366fd Update changelog (#2357)
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • 1af3b93 update readme/changelog for v6 (#2311)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

vardhjain and others added 13 commits June 14, 2026 22:31
ResNet-50 + BNNeck strong baseline (Luo et al., "Bag of Tricks") implemented
as a clean, installable `reid` package:

- Data: Market-1501 dataset, identity-balanced PK sampler, transforms.
- Model: ResNet-50 backbone, GeM pooling, last_stride=1, BNNeck head.
- Losses: label-smoothed cross-entropy, batch-hard/soft-margin triplet,
  optional center loss, combined ReIDLoss.
- Engine: Trainer with AMP, LR warmup (multistep/cosine), best-by-mAP ckpt.
- Eval: cached features, flip-TTA, L2-normalized cosine retrieval, CMC/mAP,
  k-reciprocal re-ranking.
- Tooling: typed YAML config, pytest suite, ruff, mypy, GitHub Actions CI,
  Docker, pre-commit, Gradio demo, visualizations.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adopt the Contributor Covenant 2.1 (resolving the broken link from CONTRIBUTING.md) and add SECURITY.md with private vulnerability-reporting channels and deployment safety notes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Compute the epoch length once at construction as the number of complete PK batches times the batch size, and stop mutating self.length inside __iter__. Previously len(sampler) was an upper-bound estimate that changed after the first iteration, so len(dataloader) was wrong on epoch 0 and inconsistent thereafter.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Add pure-CPU unit tests for the previously-untested engine schedulers (warmup endpoints, milestone decay, cosine annealing, factory dispatch), checkpoint save/load round-trips and classifier-size inference, device CPU-fallback, and the results-table renderer.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Add CI/license/Python/PyTorch/ruff badges and a Results table (reference strong-baseline figures with placeholders for measured numbers). Add notebooks/train_colab.ipynb for one-click GPU reproduction, linked from the README. Fix the stale 'make install' comment and record the changes in CHANGELOG.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Replace the brittle clone+install cells with one setup cell that locates the project root (or clones it), installs the package, and puts src/ on sys.path and PYTHONPATH so 'import reid' resolves in both the kernel and the !python subprocesses. Prevents ModuleNotFoundError: No module named 'reid' when the package isn't installed or the code lives outside the repo root.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Replace ghcr.io/astral-sh/uv:latest (which contradicted the 'pinned' comment) with an exact version (0.11.21) for reproducible image builds, and add a HEALTHCHECK that verifies the Gradio server answers on port 7860.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Run 'uv build' and install the resulting wheel into a clean venv, verifying 'import reid' works from the packaged distribution (guards the src-layout packaging and console-script entry points) and uploading the sdist/wheel as artifacts. Verified locally that the wheel ships both reid/ and scripts/.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Trainer._run_evaluation reused the Evaluator's cached query/gallery features (Evaluator._ensure_features early-returns on the cache), so every periodic eval after the first computed mAP against the FIRST epoch's features. mAP stayed frozen and best-by-mAP locked best.pth to the earliest evaluated epoch. Reset the cache before each in-loop eval so metrics reflect the current weights and best.pth tracks the true best epoch. Found by the pre-training correctness audit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…audit)

camid regex uses \d+ (future-proof beyond nine cameras; identical on Market-1501); DataLoader pin_memory is derived from torch.cuda.is_available() instead of hardcoded True; the Gradio demo skips unreadable gallery images and gains an optional --auth flag with an off-loopback warning. All non-result-affecting hardening from the audit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
len(sampler) is now a construction-time estimate (the __len__ mutation was removed), so it is not the exact yielded count: under random identity selection the sampler can strand a few groups, making the yield <= len(sampler). The old 'len(sampler) == len(indices)' assertion relied on the removed mutation and was flaky across RNG states (only surfaced in the full suite). Assert the real invariant instead.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Rebrand from person-reid-market1501 across the distribution name, GitHub URLs (README badges, project URLs, CITATION, Colab link), Docker image name, Makefile, and docs. The import package (reid) and all behavior are unchanged.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/actions/checkout-6 branch June 16, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant