IntelPython / dpnp / 39810416419

83%

push

github

Move open source SYCL build pins out of the workflow file (#3112)

This PR fixes the weekly **Bump open source SYCL build deps** workflow,
which failed on its first real bump in [this
run](https://github.com/IntelPython/dpnp/actions/runs/39009453028/job/117328615468):

```
! [remote rejected] bot/bump-sycl-build-deps -> bot/bump-sycl-build-deps (refusing to allow a GitHub App to create or update workflow `.github/workflows/os-llvm-sycl-build.yml` without `workflows` permission)
```

The job pushes with `GITHUB_TOKEN`, and GitHub never allows that token
to create or update files under `.github/workflows/`. There is no
`workflows` permission that can be granted to it in the `permissions:`
block.

The pins are moved to a new non-workflow file
`.github/sycl-build-deps.env`, so the bump job can update them with
`GITHUB_TOKEN` and no extra secret is needed:
- `os-llvm-sycl-build.yml` checks out the repo first and loads the five
pins into `$GITHUB_ENV`. Only the expected keys are exported, and the
step fails with a clear error if any of them is missing.
- `bump-sycl-deps.yml` rewrites the values in the new file instead of
the workflow.

The pin values are unchanged (`2026-WW28`). Once merged, a manual run of
the bump workflow should open a PR bumping them to `2026-WW42`.

1604 of 2994 branches covered (53.57%)

Branch coverage included in aggregate %.

29403 of 34537 relevant lines covered (85.13%)

19623.16 hits per line