[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[Git][xorg-team/vulkan/spirv-tools][debian-unstable] 68 commits: Add as/dis support for Arm.MotionEngine.100 extended instruction set (#6284)

Title: GitLab

Timo Aaltonen pushed to branch debian-unstable at X Strike Force / vulkan / spirv-tools

Commits:

  • 5b6d1ff5
    by Kévin Petit at 2025-09-22T16:56:43-04:00 
    Add as/dis support for Arm.MotionEngine.100 extended instruction set (#6284)

Change-Id: I9971a0c3f7edbdbd9be9ecab25797f0ee67cf720

---------

Signed-off-by: Kevin Petit <kevin.petit@arm.com>
  • b98b92e4
    by David Neto at 2025-09-22T17:48:31-04:00 
    [build_defs.bzl]: tests: disable implicit-int warning (#6337)

Also reformat to satisfy Google-internal formatting checker
  • f3b6c44c
    by Lucie Choi at 2025-09-23T11:40:20-07:00 
    spirv-opt: Add a folding rule for `OpBitReverse` and fix `OpBitCast` to support lower to higher bit conversions. (#6321)

Add a folding rule for `OpBitReverse` on scalar and vector types.

Noticed we are missing this optimization while working on
https://github.com/microsoft/DirectXShaderCompiler/issues/7680

**Additionally, fix various constant folding errors for `OpBitCast` to
handle null constants as well as lower-bit to higher-bit integer
conversions.** Previously, it was throwing error for e.g. `OpBitcast
%int %v2ushort_1_null`.
  • 42809ea3
    by David Neto at 2025-09-23T16:51:50-04:00 
    [tools/val] fix u8str for real this time (#6341)

Really fix the problem from #6336
Actually use the std::string filepath when calling the helper function.

Also, remove spurious blank lines from build_defs.bzl. Google's internal
linter complains about them.
  • 19042c89
    by Spencer Fricke at 2025-09-24T19:33:18-04:00 
    spirv-val: Improve Explicit Layout message (#6331)

closes https://github.com/KhronosGroup/SPIRV-Tools/issues/6323 and
https://github.com/KhronosGroup/SPIRV-Tools/issues/6071

New messages now look like

> [VUID-StandaloneSpirv-None-10684] Invalid explicit layout decorations
on type for operand '5[%_ptr_Private__struct_2]', the Private storage
class has a explicit layout from the Offset decoration.

and

> [VUID-StandaloneSpirv-None-10684] Invalid explicit layout decorations
on type for operand '6[%_ptr_Workgroup__arr_uint_uint_4]', the Workgroup
storage class has a explicit layout from the ArrayStride decoration.

----

Providing both the storage class and the decoration that makes it
explicit layout should be enough, the whole details around which version
make it valid or not-valid I think is overkill, the main thing is
showing a SPIR-V generator what to look for
  • d5d5b61e
    by github-actions[bot] at 2025-09-29T10:27:33-04:00 
    Roll external/abseil_cpp/ f4c22a176..9b55d184e (1 commit) (#6338)

https://github.com/abseil/abseil-cpp/compare/f4c22a176f07...9b55d184e03d

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • 5a047db9
    by github-actions[bot] at 2025-09-30T09:32:02-04:00 
    roll deps (#6345)

- **Roll external/re2/ 6569a9a3d..61c464417 (6 commits)**
- **Roll external/abseil_cpp/ b2574e9da..820cd9ee9 (1 commit)**

---------

Co-authored-by: GitHub Actions[bot] <>
  • 19138be6
    by dependabot[bot] at 2025-09-30T10:11:19-04:00 
    build(deps): bump the github-actions group across 1 directory with 2 updates (#6343)

Bumps the github-actions group with 2 updates in the / directory:
[actions/cache](https://github.com/actions/cache) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/cache` from 4.2.4 to 4.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add note on runner versions by <a
href=""><code>@​GhadimiR</code></a> in <a
href="">actions/cache#1642</a></li>
<li>Prepare <code>v4.3.0</code> release by <a
href=""><code>@​Link</code></a>- in <a
href="">actions/cache#1655</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""><code>@​GhadimiR</code></a>
made their first contribution in <a
href="">actions/cache#1642</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="">https://github.com/actions/cache/compare/v4...v4.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h3>4.3.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to <a
href="">v4.1.0</a></li>
</ul>
<h3>4.2.4</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.5</li>
</ul>
<h3>4.2.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token in
debug logs for cache entries)</li>
</ul>
<h3>4.2.2</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.2</li>
</ul>
<h3>4.2.1</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.1</li>
</ul>
<h3>4.2.0</h3>
<p>TLDR; The cache backend service has been rewritten from the ground up
for improved performance and reliability. <a
href="">actions/cache</a> now integrates
with the new cache service (v2) APIs.</p>
<p>The new service will gradually roll out as of <strong>February 1st,
2025</strong>. The legacy service will also be sunset on the same date.
Changes in these release are <strong>fully backward
compatible</strong>.</p>
<p><strong>We are deprecating some versions of this action</strong>. We
recommend upgrading to version <code>v4</code> or <code>v3</code> as
soon as possible before <strong>February 1st, 2025.</strong> (Upgrade
instructions below).</p>
<p>If you are using pinned SHAs, please use the SHAs of versions
<code>v4.2.0</code> or <code>v3.4.0</code></p>
<p>If you do not upgrade, all workflow runs using any of the deprecated
<a href="">actions/cache</a> will
fail.</p>
<p>Upgrading to the recommended versions will not break your
workflows.</p>
<h3>4.1.2</h3>
<ul>
<li>Add GitHub Enterprise Cloud instances hostname filters to inform API
endpoint choices - <a
href="">#1474</a></li>
<li>Security fix: Bump braces from 3.0.2 to 3.0.3 - <a
href="">#1475</a></li>
</ul>
<h3>4.1.1</h3>
<ul>
<li>Restore original behavior of <code>cache-hit</code> output - <a
href="">#1467</a></li>
</ul>
<h3>4.1.0</h3>
<ul>
<li>Ensure <code>cache-hit</code> output is set when a cache is missed -
<a
href="">#1404</a></li>
<li>Deprecate <code>save-always</code> input - <a
href="">#1452</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>0057852</code></a>
Merge pull request <a
href="">#1655</a>
from actions/Link-/prepare-4.3.0</li>
<li><a
href=""><code>4f5ea67</code></a>
Update licensed cache</li>
<li><a
href=""><code>9fcad95</code></a>
Upgrade actions/cache to 4.1.0 and prepare 4.3.0 release</li>
<li><a
href=""><code>638ed79</code></a>
Merge pull request <a
href="">#1642</a>
from actions/GhadimiR-patch-1</li>
<li><a
href=""><code>3862dcc</code></a>
Add note on runner versions</li>
<li>See full diff in <a
href="">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 3.30.3 to 3.30.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.4</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.8 - 08 Aug 2025</h2>
<ul>
<li>Fix an issue where the Action would autodetect unsupported languages
such as HTML. <a
href="">#3015</a></li>
</ul>
<h2>3.29.7 - 07 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>303c0ae</code></a>
Merge pull request <a
href="">#3149</a>
from github/update-v3.30.4-e4b85ab65</li>
<li><a
href=""><code>333a673</code></a>
Update changelog for v3.30.4</li>
<li><a
href=""><code>e4b85ab</code></a>
Merge pull request <a
href="">#3148</a>
from github/cklin/just-test_file-serial</li>
<li><a
href=""><code>1e72556</code></a>
build: use --serial in 'just test_file'</li>
<li><a
href=""><code>39842d8</code></a>
Merge pull request <a
href="">#3146</a>
from github/mbg/start-proxy/authenticate</li>
<li><a
href=""><code>6ccec2a</code></a>
Remove <code>url</code> from log messages</li>
<li><a
href=""><code>435f474</code></a>
Merge pull request <a
href="">#3147</a>
from github/dependabot/npm_and_yarn/npm-76d2ab1078</li>
<li><a
href=""><code>f134e09</code></a>
Rebuild</li>
<li><a
href=""><code>50a31df</code></a>
Bump <code>@​actions/cache</code> from 4.0.5 to 4.1.0 in the npm
group</li>
<li><a
href=""><code>8e25b34</code></a>
Merge pull request <a
href="">#3144</a>
from github/henrymercer/dependabot</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 01628d6f
    by Steven Perron at 2025-09-30T21:53:11-04:00 
    spirv-opt: Fix id overflow in ConvertToSampledImage (#6339)

In ConvertImageVariableToSampledImage, the result of FindPointerToType
is
not checked before being passed to MoveInstructionNextToType. This can
cause a crash if FindPointerToType returns 0.

This CL adds a check to ensure type_id is not 0 before calling
MoveInstructionNextToType. If type_id is 0, the function will return
false.
  • f932fc23
    by Steven Perron at 2025-09-30T21:53:26-04:00 
    spirv-opt: Handle id overflow in MergeReturnPass (#6340)

This CL adds error handling to the MergeReturnPass to gracefully handle
cases where the pass runs out of IDs.

The following functions were modified to return a boolean indicating
success or failure:
- AddNewPhiNodes
- AddReturnFlag
- AddReturnValue
- BranchToBlock
- CreatePhiNodesForInst
- ProcessStructuredBlock
- RecordReturned
- UpdatePhiNodes

The callers of these functions were updated to check the return value
and propagate the failure. This prevents the pass from crashing when it
runs out of IDs.
  • 21b7f738
    by github-actions[bot] at 2025-10-02T06:38:29-04:00 
    roll deps (#6346)

- **Roll external/googletest/ 50b8600c6..9706f75b8 (1 commit)**
- **Roll external/abseil_cpp/ 820cd9ee9..6315c2027 (1 commit)**

---------

Co-authored-by: GitHub Actions[bot] <>
  • 533a69c6
    by dependabot[bot] at 2025-10-03T10:06:47-04:00 
    build(deps): bump the github-actions group across 1 directory with 3 updates (#6348)

Bumps the github-actions group with 3 updates in the / directory:
[lukka/get-cmake](https://github.com/lukka/get-cmake),
[ossf/scorecard-action](https://github.com/ossf/scorecard-action) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `lukka/get-cmake` from 4.1.1 to 4.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">lukka/get-cmake's
releases</a>.</em></p>
<blockquote>
<h2>CMake v4.1.2</h2>
<p>The <code>get-cmake</code> action downloads and caches CMake and
Ninja on your workflows. Versions can be specified using <a
href="">semantic
versioning ranges</a> using <a
href=""><code>cmakeVersion</code></a>
and <a
href=""><code>ninjaVersion</code></a>
inputs.</p>
<p>Changes:</p>
<ul>
<li><code>latest</code> is now using CMake version <code>v4.1.2</code>,
use this one-liner e.g.:
<code>uses: lukka/get-cmake@latest</code></li>
</ul>
<p>Enjoy!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>628dd51</code></a>
New CMake version(s): cmake-v4.1.2 (<a
href="">#206</a>)</li>
<li>See full diff in <a
href="">compare
view</a></li>
</ul>
</details>
<br />

Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.3</h2>
<h2>What's Changed</h2>
<p>This update bumps the Scorecard version to the v5.3.0 release. For a
complete list of changes, please refer to the <a
href="">Scorecard
v5.3.0 release notes</a>.</p>
<h2>Documentation</h2>
<ul>
<li>docs: clarify <code>GITHUB_TOKEN</code> permissions needed for
private repos by <a
href=""><code>@​pankajtaneja5</code></a>
in <a
href="">ossf/scorecard-action#1574</a></li>
<li>:book: Fix recommended command to test the image in development by
<a
href=""><code>@​deivid-rodriguez</code></a>
in <a
href="">ossf/scorecard-action#1583</a></li>
</ul>
<h2>Other</h2>
<ul>
<li>add missing top-level token permissions to workflows by <a
href=""><code>@​timothyklee</code></a> in
<a
href="">ossf/scorecard-action#1566</a></li>
<li>setup codeowners for requesting reviews by <a
href=""><code>@​spencerschrock</code></a>
in <a
href="">ossf/scorecard-action#1576</a></li>
<li>:seedling: Improve printing options by <a
href=""><code>@​deivid-rodriguez</code></a>
in <a
href="">ossf/scorecard-action#1584</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href=""><code>@​timothyklee</code></a>
made their first contribution in <a
href="">ossf/scorecard-action#1566</a></li>
<li><a
href=""><code>@​pankajtaneja5</code></a>
made their first contribution in <a
href="">ossf/scorecard-action#1574</a></li>
<li><a
href=""><code>@​deivid-rodriguez</code></a>
made their first contribution in <a
href="">ossf/scorecard-action#1584</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="">https://github.com/ossf/scorecard-action/compare/v2.4.2...v2.4.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>4eaacf0</code></a>
bump docker to ghcr v2.4.3 (<a
href="">#1587</a>)</li>
<li><a
href=""><code>42e3a01</code></a>
:seedling: Bump the github-actions group with 3 updates (<a
href="">#1585</a>)</li>
<li><a
href=""><code>88c07ac</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.6.0 (<a
href="">#1579</a>)</li>
<li><a
href=""><code>6c690f2</code></a>
Bump github.com/ossf/scorecard/v5 from v5.2.1 to v5.3.0 (<a
href="">#1586</a>)</li>
<li><a
href=""><code>92083b5</code></a>
:book: Fix recommended command to test the image in development (<a
href="">#1583</a>)</li>
<li><a
href=""><code>7975ea6</code></a>
:seedling: Bump the docker-images group across 1 directory with 2
updates (<a
href="">#1</a>...</li>
<li><a
href=""><code>0d1a743</code></a>
:seedling: Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (<a
href="">#1575</a>)</li>
<li><a
href=""><code>46e6e0c</code></a>
:seedling: Bump the github-actions group with 2 updates (<a
href="">#1580</a>)</li>
<li><a
href=""><code>c3f1350</code></a>
:seedling: Improve printing options (<a
href="">#1584</a>)</li>
<li><a
href=""><code>43e475b</code></a>
:seedling: Bump golang.org/x/net from 0.42.0 to 0.44.0 (<a
href="">#1578</a>)</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 3.30.5 to 3.30.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.30.6</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<p>No user facing changes.</p>
<h2>3.29.9 - 12 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>64d10c1</code></a>
Merge pull request <a
href="">#3172</a>
from github/update-v3.30.6-10feb5d2a</li>
<li><a
href=""><code>909610e</code></a>
Update changelog for v3.30.6</li>
<li><a
href=""><code>10feb5d</code></a>
Merge pull request <a
href="">#3167</a>
from github/mbg/upload-sarif/find-then-filter</li>
<li><a
href=""><code>4182ea3</code></a>
Merge pull request <a
href="">#3168</a>
from github/update-bundle/codeql-bundle-v2.23.2</li>
<li><a
href=""><code>34afe5b</code></a>
Merge pull request <a
href="">#3171</a>
from github/mbg/start-proxy/telemetry</li>
<li><a
href=""><code>096fe67</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.2</li>
<li><a
href=""><code>b496401</code></a>
Merge pull request <a
href="">#3170</a>
from github/mbg/start-proxy/remove-update-workflow</li>
<li><a
href=""><code>d573787</code></a>
Report registry types that are configured for CodeQL in
<code>start-proxy</code> telemetry</li>
<li><a
href=""><code>1591680</code></a>
Send a basic status report in <code>start-proxy</code> Action if it
succeeds</li>
<li><a
href=""><code>cb5a284</code></a>
Send status report when <code>start-proxy</code> fails</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • bced46bb
    by github-actions[bot] at 2025-10-07T10:09:56-04:00 
    Roll external/abseil_cpp/ a54cb45cb..0c01ee189 (1 commit) (#6349)

https://github.com/abseil/abseil-cpp/compare/a54cb45cb9fe...0c01ee18955d

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • 10eff5db
    by github-actions[bot] at 2025-10-08T09:31:43-04:00 
    Roll external/googletest/ 9706f75b8..279f84794 (2 commits) (#6352)

https://github.com/google/googletest/compare/9706f75b8f91...279f8479469d

Created with:
  roll-dep external/googletest

Co-authored-by: GitHub Actions[bot] <>
  • b9997daf
    by dependabot[bot] at 2025-10-08T10:03:57-04:00 
    build(deps): bump github/codeql-action from 3.30.6 to 4.30.7 in the github-actions group (#6353)

Bumps the github-actions group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.30.6 to 4.30.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.30.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
<h2>v3.30.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>3.30.7 - 06 Oct 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.22.4. <a
href="">#3044</a></li>
</ul>
<h2>3.29.10 - 18 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>e296a93</code></a>
Merge pull request <a
href="">#3183</a>
from github/update-v4.30.7-55283843c</li>
<li><a
href=""><code>93c1673</code></a>
Update changelog for v4.30.7</li>
<li><a
href=""><code>5528384</code></a>
Merge pull request <a
href="">#3169</a>
from github/mario-campos/node24</li>
<li><a
href=""><code>b66db86</code></a>
Hoist CHANGELOG note back to &quot;UNRELEASED&quot; section.</li>
<li><a
href=""><code>b2e2232</code></a>
Merge remote-tracking branch 'origin/main' into mario-campos/node24</li>
<li><a
href=""><code>065c6cf</code></a>
Merge pull request <a
href="">#3174</a>
from github/mbg/fix/start-proxy-matrix</li>
<li><a
href=""><code>7fb8378</code></a>
Re-throw exception in <code>createStatusReportBase</code> when in test
mode</li>
<li><a
href=""><code>dddf033</code></a>
Revert changes to build.mjs</li>
<li><a
href=""><code>54ae8ba</code></a>
Simplify PR check by reverting changes to <code>@types/node</code>.</li>
<li><a
href=""><code>65e9e64</code></a>
Make <code>matrix</code> available to <code>start-proxy</code>
action</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.30.6&new-version=4.30.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 83c47422
    by github-actions[bot] at 2025-10-10T14:19:09-04:00 
    roll deps (#6354)

- **Roll external/abseil_cpp/ 2af4687a5..fc4481e96 (1 commit)**
- **Roll external/spirv-headers/ 01e057791..a5164829e (1 commit)**

---------

Co-authored-by: GitHub Actions[bot] <>
  • 43448765
    by Kévin Petit at 2025-10-10T14:40:43-04:00 
    spirv-opt: Add basic support for graphs (#6351)

- Graph objects
- IR Context & Loader support
- Module integration

---------

Signed-off-by: Kevin Petit <kevin.petit@arm.com>
  • 6d43afe9
    by Spencer Fricke at 2025-10-10T17:06:32-04:00 
    build: Add missing graph.h to BUILD.gn
  • 42c2fe22
    by github-actions[bot] at 2025-10-15T09:41:38-04:00 
    Roll external/abseil_cpp/ 6ae6cc6fd..bf891a1c9 (2 commits) (#6357)

https://github.com/abseil/abseil-cpp/compare/6ae6cc6fde4b...bf891a1c9753

Created with:
  roll-dep external/abseil_cpp

---------

Co-authored-by: GitHub Actions[bot] <>
  • f856af40
    by Spencer Fricke at 2025-10-16T21:39:06-04:00 
    spirv-val: Break up the 3000 line ValidateExtInst function (#6364)


This is 2 commits, first just move the `get_ext_inst_name` lambda to be
a function so it doesn't have to be passed around everywhere. Then I
just created dedicated `ValidateExtInst*` for each set of extended
instruction sets currently supported

This is just a copy-and-paste job, but shows a LOT of diff because it
removed a level of indentation from everything
  • d44ffafc
    by Steven Perron at 2025-10-17T10:56:28-07:00 
    spirv-opt: Handle ID overflow in AggressiveDCEPass (#6366)

Refactored AggressiveDCEPass to return Pass::Status instead of bool
in several key functions. This allows the pass to gracefully fail
and propagate the error when the module's ID bound is reached,
preventing crashes due to null pointers or zero IDs.

Part of https://github.com/KhronosGroup/SPIRV-Tools/issues/6260
  • 19ea9374
    by github-actions[bot] at 2025-10-17T17:21:28-04:00 
    Roll external/abseil_cpp/ 346ac9dbc..ef1ae8e31 (10 commits) (#6363)

https://github.com/abseil/abseil-cpp/compare/346ac9dbcfd8...ef1ae8e310e8

Created with:
  roll-dep external/abseil_cpp

---------

Co-authored-by: GitHub Actions[bot] <>
  • c1d23cac
    by dependabot[bot] at 2025-10-17T18:03:11-04:00 
    build(deps): bump github/codeql-action from 4.30.7 to 4.30.8 in the github-actions group (#6359)

Bumps the github-actions group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.30.7 to 4.30.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.30.8</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<ul>
<li>Reduce the size of the CodeQL Action, speeding up workflows by
approximately 4 seconds. <a
href="">#3054</a></li>
</ul>
<h2>3.29.11 - 21 Aug 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>f443b60</code></a>
Merge pull request <a
href="">#3198</a>
from github/update-v4.30.8-527f0f324</li>
<li><a
href=""><code>7a2cb62</code></a>
Update changelog for v4.30.8</li>
<li><a
href=""><code>527f0f3</code></a>
Merge pull request <a
href="">#3195</a>
from github/dependabot/npm_and_yarn/npm-minor-37415c...</li>
<li><a
href=""><code>f402506</code></a>
Merge pull request <a
href="">#3196</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href=""><code>f5e53f9</code></a>
Merge pull request <a
href="">#3197</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href=""><code>4e90a42</code></a>
Merge pull request <a
href="">#3193</a>
from github/mbg/ff/tools-toolcache</li>
<li><a
href=""><code>413a4a4</code></a>
Rebuild</li>
<li><a
href=""><code>4521864</code></a>
Bump github/codeql-action from 3 to 4 in /.github/workflows</li>
<li><a
href=""><code>eadf14b</code></a>
Bump ruby/setup-ruby</li>
<li><a
href=""><code>e1257b6</code></a>
Rebuild</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.30.7&new-version=4.30.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 021f92a7
    by alister-chowdhury at 2025-10-18T09:41:34+01:00 
    Adding folding rules for commutive bitwise operations (xor/or/and). (#6358)

This change adds the following reassociations:

* `A | (b | C) = b | (A | C)`
* `A ^ (b ^ C) = b ^ (A ^ C)`
* `A & (b & C) = b & (A & C)`

Where A and C are constants
  • e84cefe0
    by github-actions[bot] at 2025-10-21T09:28:19-04:00 
    Roll external/abseil_cpp/ ab4f684de..0d9dff74c (1 commit) (#6369)

https://github.com/abseil/abseil-cpp/compare/ab4f684de4db...0d9dff74c926

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • e09090b1
    by Steven Perron at 2025-10-21T09:32:13-04:00 
    spirv-opt: Handle id overflow in CCP and constant folding (#6367)

This is a partial fix for
https://github.com/KhronosGroup/SPIRV-Tools/issues/6260

This change handles the case where the id overflows when running CCP or
constant folding.
When this happens, the pass will now return a failure status.
  • fb6d5860
    by alister-chowdhury at 2025-10-21T10:19:52-04:00 
    spirv-opt: Adding normal form to ValueNumber calculation (#6371)

This allows for commutive instructions to be de-duplicated.
```
         %25 = OpFAdd %float %22 %24
         %26 = OpFMul %float %25 %float_10
         %27 = OpFAdd %float %26 %float_2

         %28 = OpFAdd %float %24 %22        ; => %25
         %29 = OpFMul %float %float_10 %28  ; => %26
         %30 = OpFAdd %float %float_2 %29   ; => %27
```
  • 8a94d4b7
    by Lucie Choi at 2025-10-21T08:16:07-07:00 
    Add `SPV_KHR_maximal_reconvergence` to the allowlist (#6372)

Add extension to the allowlist to allow optimization passes to run.

Verified fixes
https://github.com/microsoft/DirectXShaderCompiler/issues/7826
  • 09ac18fa
    by dependabot[bot] at 2025-10-21T12:12:40-04:00 
    build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 in the github-actions group (#6370)

Bumps the github-actions group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.30.8 to 4.30.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.30.9</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.30.9 - 17 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.3. <a
href="">#3205</a></li>
<li>Experimental: A new <code>setup-codeql</code> action has been added
which is similar to <code>init</code>, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="">#3204</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.30.9 - 17 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.3. <a
href="">#3205</a></li>
<li>Experimental: A new <code>setup-codeql</code> action has been added
which is similar to <code>init</code>, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="">#3204</a></li>
</ul>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<h2>3.30.1 - 05 Sep 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.0. <a
href="">#3077</a></li>
</ul>
<h2>3.30.0 - 01 Sep 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>16140ae</code></a>
Merge pull request <a
href="">#3213</a>
from github/update-v4.30.9-70205d3d1</li>
<li><a
href=""><code>30db5fe</code></a>
Update changelog for v4.30.9</li>
<li><a
href=""><code>70205d3</code></a>
Merge pull request <a
href="">#3211</a>
from github/mbg/init/starting-partial-config</li>
<li><a
href=""><code>697c209</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/init/starting-partial-config</li>
<li><a
href=""><code>1bd53ba</code></a>
Merge pull request <a
href="">#3205</a>
from github/update-bundle/codeql-bundle-v2.23.3</li>
<li><a
href=""><code>cac4df0</code></a>
Rebuild</li>
<li><a
href=""><code>77e5c0d</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.3</li>
<li><a
href=""><code>97a4f75</code></a>
Merge pull request <a
href="">#3204</a>
from github/mbg/setup-codeql</li>
<li><a
href=""><code>2d5512b</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/init/starting-partial-config</li>
<li><a
href=""><code>fa7bdf0</code></a>
Call <code>getAnalysisKinds</code> a second time, and ignore exceptions
thrown during th...</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.30.8&new-version=4.30.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 1b74d676
    by github-actions[bot] at 2025-10-22T09:49:13-04:00 
    Roll external/abseil_cpp/ 8faaaebc1..215d8a0e7 (4 commits) (#6374)

https://github.com/abseil/abseil-cpp/compare/8faaaebc1223...215d8a0e7584

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • 5d01ec71
    by Steven Perron at 2025-10-23T14:59:34-07:00 
    spirv-opt: Clone decorations when unrolling loops (#6373)

When unrolling a loop, the instructions in the body of the loop are
cloned.
If an instruction has a decoration, the decoration must be cloned and
applied to the new instruction.
This change ensures that the decorations are cloned.

Fixes #5902
  • a167f0df
    by github-actions[bot] at 2025-10-24T17:28:22-04:00 
    Roll external/abseil_cpp/ 215d8a0e7..ee4780022 (4 commits) (#6375)

https://github.com/abseil/abseil-cpp/compare/215d8a0e7584...ee47800225d0

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • d3c9bea0
    by github-actions[bot] at 2025-10-27T09:39:23-04:00 
    roll deps (#6379)

- **Roll external/abseil_cpp/ d71fcd13f..1a259163c (1 commit)**
- **Roll external/spirv-headers/ 9268f3057..6bb105b6c (1 commit)**

---------

Co-authored-by: GitHub Actions[bot] <>
  • 04c88726
    by dependabot[bot] at 2025-10-27T10:12:10-04:00 
    build(deps): bump the github-actions group with 2 updates (#6380)

Bumps the github-actions group with 2 updates:
[actions/upload-artifact](https://github.com/actions/upload-artifact)
and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<p><strong>BREAKING CHANGE:</strong> this update supports Node
<code>v24.x</code>. This is not a breaking change per-se but we're
treating it as such.</p>
<ul>
<li>Update README.md by <a
href=""><code>@​GhadimiR</code></a> in <a
href="">actions/upload-artifact#681</a></li>
<li>Update README.md by <a
href=""><code>@​nebuk89</code></a> in <a
href="">actions/upload-artifact#712</a></li>
<li>Readme: spell out the first use of GHES by <a
href=""><code>@​danwkennedy</code></a> in
<a
href="">actions/upload-artifact#727</a></li>
<li>Update GHES guidance to include reference to Node 20 version by <a
href=""><code>@​patrikpolyak</code></a>
in <a
href="">actions/upload-artifact#725</a></li>
<li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li>
<li>Prepare <code>v5.0.0</code> by <a
href=""><code>@​danwkennedy</code></a> in
<a
href="">actions/upload-artifact#734</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href=""><code>@​GhadimiR</code></a>
made their first contribution in <a
href="">actions/upload-artifact#681</a></li>
<li><a href=""><code>@​nebuk89</code></a> made
their first contribution in <a
href="">actions/upload-artifact#712</a></li>
<li><a
href=""><code>@​danwkennedy</code></a>
made their first contribution in <a
href="">actions/upload-artifact#727</a></li>
<li><a
href=""><code>@​patrikpolyak</code></a>
made their first contribution in <a
href="">actions/upload-artifact#725</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="">https://github.com/actions/upload-artifact/compare/v4...v5.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>330a01c</code></a>
Merge pull request <a
href="">#734</a>
from actions/danwkennedy/prepare-5.0.0</li>
<li><a
href=""><code>03f2824</code></a>
Update <code>github.dep.yml</code></li>
<li><a
href=""><code>905a1ec</code></a>
Prepare <code>v5.0.0</code></li>
<li><a
href=""><code>2d9f9cd</code></a>
Merge pull request <a
href="">#725</a>
from patrikpolyak/patch-1</li>
<li><a
href=""><code>9687587</code></a>
Merge branch 'main' into patch-1</li>
<li><a
href=""><code>2848b2c</code></a>
Merge pull request <a
href="">#727</a>
from danwkennedy/patch-1</li>
<li><a
href=""><code>9b51177</code></a>
Spell out the first use of GHES</li>
<li><a
href=""><code>cd231ca</code></a>
Update GHES guidance to include reference to Node 20 version</li>
<li><a
href=""><code>de65e23</code></a>
Merge pull request <a
href="">#712</a>
from actions/nebuk89-patch-1</li>
<li><a
href=""><code>8747d8c</code></a>
Update README.md</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.30.9 to 4.31.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.31.0</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.0 - 24 Oct 2025</h2>
<ul>
<li>Bump minimum CodeQL bundle version to 2.17.6. <a
href="">#3223</a></li>
<li>When SARIF files are uploaded by the <code>analyze</code> or
<code>upload-sarif</code> actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
<code>upload-sarif</code> action. For <code>analyze</code>, this may
affect Advanced Setup for CodeQL users who specify a value other than
<code>always</code> for the <code>upload</code> input. <a
href="">#3222</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.31.0 - 24 Oct 2025</h2>
<ul>
<li>Bump minimum CodeQL bundle version to 2.17.6. <a
href="">#3223</a></li>
<li>When SARIF files are uploaded by the <code>analyze</code> or
<code>upload-sarif</code> actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
<code>upload-sarif</code> action. For <code>analyze</code>, this may
affect Advanced Setup for CodeQL users who specify a value other than
<code>always</code> for the <code>upload</code> input. <a
href="">#3222</a></li>
</ul>
<h2>4.30.9 - 17 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.3. <a
href="">#3205</a></li>
<li>Experimental: A new <code>setup-codeql</code> action has been added
which is similar to <code>init</code>, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="">#3204</a></li>
</ul>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<p>No user facing changes.</p>
<h2>3.30.2 - 09 Sep 2025</h2>
<ul>
<li>Fixed a bug which could cause language autodetection to fail. <a
href="">#3084</a></li>
<li>Experimental: The <code>quality-queries</code> input that was added
in <code>3.29.2</code> as part of an internal experiment is now
deprecated and will be removed in an upcoming version of the CodeQL
Action. It has been superseded by a new <code>analysis-kinds</code>
input, which is part of the same internal experiment. Do not use this in
production as it is subject to change at any time. <a
href="">#3064</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>4e94bd1</code></a>
Merge pull request <a
href="">#3235</a>
from github/update-v4.31.0-1d36546c1</li>
<li><a
href=""><code>8f11182</code></a>
Update changelog for v4.31.0</li>
<li><a
href=""><code>1d36546</code></a>
Merge pull request <a
href="">#3234</a>
from github/mbg/changelog/post-processing</li>
<li><a
href=""><code>08ada26</code></a>
Add changelog entry for post-processing change</li>
<li><a
href=""><code>b843cbe</code></a>
Merge pull request <a
href="">#3233</a>
from github/mbg/getOptionalEnvVar</li>
<li><a
href=""><code>1ecd563</code></a>
Use <code>getOptionalEnvVar</code> in
<code>writePostProcessedFiles</code></li>
<li><a
href=""><code>e576807</code></a>
Merge pull request <a
href="">#3223</a>
from github/henrymercer/bump-minimum</li>
<li><a
href=""><code>ad35676</code></a>
Add <code>getOptionalEnvVar</code> function</li>
<li><a
href=""><code>d75645b</code></a>
Merge pull request <a
href="">#3222</a>
from github/mbg/upload-lib/post-process</li>
<li><a
href=""><code>710606c</code></a>
Check that <code>outputPath</code> is non-empty</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 05b0ab12
    by Lucie Choi at 2025-10-27T09:53:55-07:00 
    spirv-opt: Fix constant folding for `OpBitcast` on signed integers. (#6378)

Fixes https://github.com/KhronosGroup/SPIRV-Tools/issues/6377
  • 41fedbe1
    by Steven Perron at 2025-10-30T10:33:05-04:00 
    spirv-opt: Cache IsReadOnlyLoad in ValueNumberTable (#6385)

This change introduces a caching mechanism for IsReadOnlyLoad within the
ValueNumberTable class. This is done to improve performance by avoiding
repeated computations.

This is an alternative solution to PR #6384.
  • 2fa0e29b
    by alister-chowdhury at 2025-10-30T12:10:56-04:00 
    spirv-opt: Adding folding rules for bitwise and (#6361)

This change adds the following folding ops:

**And + Xor/Or**
```
0b1110 & (a | 0b0001) = a & 0b1110
0b1110 & (a ^ 0b0001) = a & 0b1110
0b0110 & (a | 0b1110) = 0b0110
```

Which *should* resolve #4902, but since this doesn't add any kind of
global variable tracking would be laundered away with any kind of OpPhi.

**And + Add/Sub**
```
1 & (b + 2) = b & 1
1 & (b - 2) = b & 1
```

**And + Shifts**
```
1 & (b << 1) = 0
 0x80000000 & (b >> 1) = 0
```
  • fbe9605c
    by github-actions[bot] at 2025-10-31T10:30:05-04:00 
    Roll external/abseil_cpp/ 1a259163c..f0a99676f (3 commits) (#6381)

https://github.com/abseil/abseil-cpp/compare/1a259163cc45...f0a99676ff73

Created with:
  roll-dep external/abseil_cpp

---------

Co-authored-by: GitHub Actions[bot] <>
  • 917617c9
    by Steve Urquhart at 2025-10-31T13:16:18-04:00 
    spirv-opt: Correct ADCE bug keeping dead DebugValue Value operands (#6368)

A logic error in ProcessDebugInfo(), a pass recently added to ADCE,
causes some shaders to fail optimization. When examining the Value
operand of a DebugValue instruction, we should only be reading the live
list, as this change corrects. Previously, we were using the .Set
method, which was incorrectly marking these instructions live. Since
other dependencies may have been killed, the SPIR-V is left in an
inconsistent state.

This PR partially corrects
https://github.com/microsoft/DirectXShaderCompiler/issues/7744. The
remaining issue is in scalar-replacement=0. Since this PR has more
wide-ranging benefits and I haven't root-caused the remaining problem,
I'm submitting it now.
  • a51e335a
    by Spencer Fricke at 2025-10-31T20:20:49-04:00 
    spirv-val: Fix VUID churn for 10685 (#6389)

`VK_QCOM_tile_shading` messed up the VUID in the spec, there is no
`VUID-StandaloneSpirv-LocalSize-06426` and it is now just
`VUID-StandaloneSpirv-None-10685`
  • 8f938177
    by gnl21 at 2025-10-31T20:59:45-04:00 
    spirv-val: Add validation for SPV_KHR_fma (#6388)

Fixes #6355
  • 6ce1be1d
    by Jeff Bolz at 2025-10-31T21:14:11-04:00 
    Validate SPV_EXT_shader_64bit_indexing (#6376)

The validation of 32b vs 64b types will move to VVL.
  • 6570fd40
    by alan-baker at 2025-10-31T21:47:35-04:00 
    Validate logical pointer restrictions (#6240)

* Updates checks based on logical addressing to check logical pointers
* Update pointer allocation validation
* Add function call return pointer check
* Add a new pass for logical pointer validation
  * checks valid logical pointer operands
  * checks logical pointer returns
  * checks same buffer requirement for VariablePointersStorageBuffer
  * checks variables must not:
    * be an operand to array length instructions
    * point to block arrays
    * point to an object containing a matrix
    * point to a component of a matrix
  • 5b2630a6
    by Spencer Fricke at 2025-11-03T11:00:34-05:00 
    spirv-val: Use spvOpcodeString consistently (#6393)

small cleanup to use `spvOpcodeString` like it is everywhere else
  • 84c917b9
    by github-actions[bot] at 2025-11-04T11:22:03-05:00 
    roll deps (#6391)

- **Roll external/googletest/ 4fe3307fb..6ec14dfd8 (2 commits)**
- **Roll external/abseil_cpp/ 6c5a17577..982f4254a (1 commit)**

---------

Co-authored-by: GitHub Actions[bot] <>
  • 54f2ba24
    by Nathan Gauër at 2025-11-05T09:50:22-05:00 
    spirv-as: fix command line for stdin as input (#6398)

The previous command line parsing rewrite added a check expecting
exactly one input file, with `-` meaning `stdin`. Previous spirv-as
versions were assuming stdin when no input file was passed.

Fixing the command line parsing to assume stdin if no inpt file is
passed.

Fixes #6394
  • 30392933
    by Spencer Fricke at 2025-11-05T12:17:38-05:00 
    spirv-val: Add LocalInvocationIndex checks (#6395)

adds

-  VUID-LocalInvocationIndex-LocalInvocationIndex-04284
-  VUID-LocalInvocationIndex-LocalInvocationIndex-04285
-  VUID-LocalInvocationIndex-LocalInvocationIndex-04286

... the functions (`ValidateLocalInvocationIndexAtReference`) where
there, but empty, not sure what happened, seems they were added in
WebGPU (https://github.com/KhronosGroup/SPIRV-Tools/pull/2335) then
stripped, but we need them for Vulkan
  • 0dd1386d
    by Qingyuan Zheng at 2025-11-06T15:05:37+00:00 
    Relax validation rule for DebugGlobalVariable variable (#6382)

Allow DebugGlobalVariable variable to be OpConstantXXX variants instead
of only OpConstant
  • e78655a0
    by David Neto at 2025-11-06T21:30:50-05:00 
    test: graphics robust access pass with Vulkan environment (#6399)

When testing the graphics-robust-access pass, any
test shader that uses the Shader capability will
be validated for the Vulkan 1.0 target environment.

Add a missing LocalSize decoration on the compute shader entry point for
these cases.

See also #6386
  • 3da5c11b
    by github-actions[bot] at 2025-11-07T09:58:43-05:00 
    Roll external/abseil_cpp/ 7374f9b0f..18ac60830 (2 commits) (#6397)

https://github.com/abseil/abseil-cpp/compare/7374f9b0f427...18ac60830796

Created with:
  roll-dep external/abseil_cpp

---------

Co-authored-by: GitHub Actions[bot] <>
  • 811d8e70
    by dependabot[bot] at 2025-11-07T10:36:12-05:00 
    build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 in the github-actions group (#6387)

Bumps the github-actions group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.31.0 to 4.31.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.31.2</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.2 - 30 Oct 2025</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
<h2>v4.31.1</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.1 - 30 Oct 2025</h2>
<ul>
<li>The <code>add-snippets</code> input has been removed from the
<code>analyze</code> action. This input has been deprecated since CodeQL
Action 3.26.4 in August 2024 when this removal was announced.</li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.31.2 - 30 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.1 - 30 Oct 2025</h2>
<ul>
<li>The <code>add-snippets</code> input has been removed from the
<code>analyze</code> action. This input has been deprecated since CodeQL
Action 3.26.4 in August 2024 when this removal was announced.</li>
</ul>
<h2>4.31.0 - 24 Oct 2025</h2>
<ul>
<li>Bump minimum CodeQL bundle version to 2.17.6. <a
href="">#3223</a></li>
<li>When SARIF files are uploaded by the <code>analyze</code> or
<code>upload-sarif</code> actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
<code>upload-sarif</code> action. For <code>analyze</code>, this may
affect Advanced Setup for CodeQL users who specify a value other than
<code>always</code> for the <code>upload</code> input. <a
href="">#3222</a></li>
</ul>
<h2>4.30.9 - 17 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.3. <a
href="">#3205</a></li>
<li>Experimental: A new <code>setup-codeql</code> action has been added
which is similar to <code>init</code>, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="">#3204</a></li>
</ul>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
<li>We added support for reducing the size of dependency caches for Java
analyses, which will reduce cache usage and speed up workflows. This
will be enabled automatically at a later time. <a
href="">#3107</a></li>
<li>You can now run the latest CodeQL nightly bundle by passing
<code>tools: nightly</code> to the <code>init</code> action. In general,
the nightly bundle is unstable and we only recommend running it when
directed by GitHub staff. <a
href="">#3130</a></li>
<li>Update default CodeQL bundle version to 2.23.1. <a
href="">#3118</a></li>
</ul>
<h2>3.30.3 - 10 Sep 2025</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>0499de3</code></a>
Merge pull request <a
href="">#3261</a>
from github/henrymercer/setup-python</li>
<li><a
href=""><code>3b96745</code></a>
Set up Python in mergeback workflow</li>
<li><a
href=""><code>8a06050</code></a>
Merge pull request <a
href="">#3259</a>
from github/update-v4.31.2-9576b5cbe</li>
<li><a
href=""><code>752a642</code></a>
Update changelog for v4.31.2</li>
<li><a
href=""><code>9576b5c</code></a>
Merge pull request <a
href="">#3258</a>
from github/mbg/enablement-errors/case-insensitive</li>
<li><a
href=""><code>cc88437</code></a>
Merge pull request <a
href="">#3257</a>
from github/henrymercer/ubuntu-slim</li>
<li><a
href=""><code>f0e9bf0</code></a>
Make <code>isEnablementError</code> case-insensitive</li>
<li><a
href=""><code>2a3599c</code></a>
Run lightweight workflows on <code>ubuntu-slim</code></li>
<li><a
href=""><code>514ff4d</code></a>
Merge pull request <a
href="">#3256</a>
from github/henrymercer/resolve-bad-merge</li>
<li><a
href=""><code>aab1c2f</code></a>
Merge pull request <a
href="">#3253</a>
from github/mergeback/v4.31.1-to-main-5fe9434c</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.31.0&new-version=4.31.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 5a7edbe4
    by Spencer Fricke at 2025-11-08T21:22:19-05:00 
    Add VK_EXT_shader_uniform_buffer_unsized_array (#6386)

cc @pdaniell-nv
  • 25658c25
    by github-actions[bot] at 2025-11-10T09:58:24-05:00 
    Roll external/googletest/ 6ec14dfd8..dedab73a6 (1 commit) (#6400)

https://github.com/google/googletest/compare/6ec14dfd8c40...dedab73a6892

Created with:
  roll-dep external/googletest

Co-authored-by: GitHub Actions[bot] <>
  • cf9d8e2d
    by Steven Perron at 2025-11-11T11:42:05-05:00 
    [OPT] Move definition of Pass::Status to Utils (#6402)

There are some places where I would like to use the Status class, but
it is unavailable if it is defined in a pass. The enum was already
redefined somewhere else because of this.

I want to move the defintion to a utility header that can be included
anywhere.
  • 1944e8db
    by Steven Perron at 2025-11-12T10:23:59-05:00 
    spirv-opt: Handle id overflow in amd_ext_to_khr (#6403)

Check for null pointers and id overflow in the amd_ext_to_khr pass.
This prevents the pass from crashing when running on very large shaders.
  • 2c1fd897
    by Steven Perron at 2025-11-12T10:55:46-05:00 
    spirv-opt: Handle ID overflow in SplitCombinedImageSamplerPass (#6406)

This pass creates new instructions without checking if the new IDs will
overflow. This can lead to a crash if the module has many IDs.

This CL adds checks for ID overflow and returns an error if it happens.
  • 991db0d9
    by Nathan Gauër at 2025-11-18T09:46:03-05:00 
    Prepare release v2025.5 (#6419)
  • edf29134
    by Shahbaz Youssefi at 2025-11-18T09:48:08-05:00 
    build: Add missing status.h to BUILD.gn (#6417)
  • b8b47b99
    by github-actions[bot] at 2025-11-18T09:48:33-05:00 
    Roll external/abseil_cpp/ ff4395895..c70fe9713 (2 commits) (#6404)

https://github.com/abseil/abseil-cpp/compare/ff4395895672...c70fe971370e

Created with:
  roll-dep external/abseil_cpp

---------

Co-authored-by: GitHub Actions[bot] <>
  • bb651412
    by dependabot[bot] at 2025-11-18T10:41:55-05:00 
    build(deps): bump the github-actions group across 1 directory with 2 updates (#6418)

Bumps the github-actions group with 2 updates in the / directory:
[actions/checkout](https://github.com/actions/checkout) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 5.0.0 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href=""><code>@​ericsciple</code></a> in <a
href="">actions/checkout#2301</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>93cb6ef</code></a>
Cleanup actions/checkout@v6 auth style (<a
href="">#2301</a>)</li>
<li>See full diff in <a
href="">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.31.2 to 4.31.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.31.3</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>4.31.3 - 13 Nov 2025</h2>
<ul>
<li>CodeQL Action v3 will be deprecated in December 2026. The Action now
logs a warning for customers who are running v3 but could be running v4.
For more information, see <a
href="">Upcoming
deprecation of CodeQL Action v3</a>.</li>
<li>Update default CodeQL bundle version to 2.23.5. <a
href="">#3288</a></li>
</ul>
<p>See the full <a
href="">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.31.3 - 13 Nov 2025</h2>
<ul>
<li>CodeQL Action v3 will be deprecated in December 2026. The Action now
logs a warning for customers who are running v3 but could be running v4.
For more information, see <a
href="">Upcoming
deprecation of CodeQL Action v3</a>.</li>
<li>Update default CodeQL bundle version to 2.23.5. <a
href="">#3288</a></li>
</ul>
<h2>4.31.2 - 30 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.31.1 - 30 Oct 2025</h2>
<ul>
<li>The <code>add-snippets</code> input has been removed from the
<code>analyze</code> action. This input has been deprecated since CodeQL
Action 3.26.4 in August 2024 when this removal was announced.</li>
</ul>
<h2>4.31.0 - 24 Oct 2025</h2>
<ul>
<li>Bump minimum CodeQL bundle version to 2.17.6. <a
href="">#3223</a></li>
<li>When SARIF files are uploaded by the <code>analyze</code> or
<code>upload-sarif</code> actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
<code>upload-sarif</code> action. For <code>analyze</code>, this may
affect Advanced Setup for CodeQL users who specify a value other than
<code>always</code> for the <code>upload</code> input. <a
href="">#3222</a></li>
</ul>
<h2>4.30.9 - 17 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.3. <a
href="">#3205</a></li>
<li>Experimental: A new <code>setup-codeql</code> action has been added
which is similar to <code>init</code>, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. <a
href="">#3204</a></li>
</ul>
<h2>4.30.8 - 10 Oct 2025</h2>
<p>No user facing changes.</p>
<h2>4.30.7 - 06 Oct 2025</h2>
<ul>
<li>[v4+ only] The CodeQL Action now runs on Node.js v24. <a
href="">#3169</a></li>
</ul>
<h2>3.30.6 - 02 Oct 2025</h2>
<ul>
<li>Update default CodeQL bundle version to 2.23.2. <a
href="">#3168</a></li>
</ul>
<h2>3.30.5 - 26 Sep 2025</h2>
<ul>
<li>We fixed a bug that was introduced in <code>3.30.4</code> with
<code>upload-sarif</code> which resulted in files without a
<code>.sarif</code> extension not getting uploaded. <a
href="">#3160</a></li>
</ul>
<h2>3.30.4 - 25 Sep 2025</h2>
<ul>
<li>We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
<code>codeql-action/init</code> step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
<code>codeql-action/init</code> step. <a
href="">#3099</a>
and <a
href="">#3100</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href=""><code>014f16e</code></a>
Merge pull request <a
href="">#3293</a>
from github/update-v4.31.3-8c10e89c7</li>
<li><a
href=""><code>14d898e</code></a>
Update changelog for v4.31.3</li>
<li><a
href=""><code>8c10e89</code></a>
Merge pull request <a
href="">#3288</a>
from github/update-bundle/codeql-bundle-v2.23.5</li>
<li><a
href=""><code>9777b01</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.5</li>
<li><a
href=""><code>456a74a</code></a>
Merge pull request <a
href="">#3289</a>
from github/mbg/ci/setup-dotnet</li>
<li><a
href=""><code>3fac49c</code></a>
Update remaining workflows</li>
<li><a
href=""><code>38a3a72</code></a>
Enable <code>installDotNet</code> in all workflows that analyse C#</li>
<li><a
href=""><code>58c9eb6</code></a>
Add <code>global.json</code></li>
<li><a
href=""><code>f20e021</code></a>
Add support for adding <code>setup-dotnet</code> steps to
<code>sync.sh</code></li>
<li><a
href=""><code>8d3d400</code></a>
Add changelog note</li>
<li>Additional commits viewable in <a
href="">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • 3b94e144
    by Kévin Petit at 2025-11-18T10:53:04-05:00 
    spirv-val: add support for SPV_ARM_cooperative_matrix_layouts (#6408)

Signed-off-by: Kevin Petit <kevin.petit@arm.com>
  • fb747184
    by alelenv at 2025-11-18T17:29:57+00:00 
    Add validation support for SPV_EXT_shader_invocation_reorder. (#6401)

Co-authored-by: Steven Perron <stevenperron@google.com>
  • 262bdab4
    by github-actions[bot] at 2025-11-19T13:50:43-05:00 
    Roll external/abseil_cpp/ 48bf10f14..a5e3599b2 (2 commits) (#6421)

https://github.com/abseil/abseil-cpp/compare/48bf10f14296...a5e3599b234f

Created with:
  roll-dep external/abseil_cpp

Co-authored-by: GitHub Actions[bot] <>
  • 0006ea3e
    by Timo Aaltonen at 2025-12-18T11:33:10+02:00 
    Merge branch 'upstream-unstable' into debian-unstable
  • 774629ac
    by Timo Aaltonen at 2025-12-18T11:33:38+02:00 
    version bump
  • c64bf8f4
    by Timo Aaltonen at 2025-12-18T11:36:56+02:00 
    control: Bump build-dep on spirv-headers.
  • bba488fa
    by Timo Aaltonen at 2025-12-18T11:39:02+02:00 
    control: Fix Breaks/Replaces for the packaging split to allow backports.
  • 91c36806
    by Timo Aaltonen at 2025-12-18T11:43:40+02:00 
    releasing package spirv-tools version 2025.5-1

119 changed files:

The diff was not included because it is too large.

—
View it on GitLab.
You're receiving this email because of your account on salsa.debian.org. Manage all notifications · Help Notification message regarding https://salsa.debian.org/xorg-team/vulkan/spirv-tools/-/compare/4c74b3e637134805deda652f15b881475472e0e0...91c368064a95ededa53124f9a5e9d948c7f1ecf0 at 1766051113

Reply to: