Ad/remove api label

.github/ISSUE_TEMPLATE/good_first_issue.yml

@@ -42,6 +42,8 @@ body:
           discussions, guides.
       value: |
           - [Contribution guide - start here!](https://github.com/openvinotoolkit/nncf/blob/develop/CONTRIBUTING.md)
+          - [Intel DevHub Discord channel](https://discord.gg/7pVRxUwdWG) - engage in discussions, ask questions and talk to OpenVINO developers
+          - [How to link your Pull Request to an issue](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue#manually-linking-a-pull-request-to-an-issue-using-the-pull-request-sidebar)
     validations:
       required: true
 

.github/action_configs/labeler.yml

@@ -1,49 +1,81 @@
 # See help here: https://github.com/marketplace/actions/labeler
 
 dependencies:
-  - 'requirements.txt'
-  - '**/setup.py'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'requirements.txt'
+      - '**/setup.py'
 
 NNCF PT:
-  - 'examples/torch/**/*!(.md)'
-  - 'examples/post_training_quantization/torch/**/*!(.md)'
-  - 'nncf/torch/**/*!(.md)'
-  - 'tests/torch/**/*!(.md)'
-  - 'nncf/quantization/**/torch_backend.py'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'examples/torch/**/*!(.md)'
+      - 'examples/post_training_quantization/torch/**/*!(.md)'
+      - 'nncf/torch/**/*!(.md)'
+      - 'tests/torch/**/*!(.md)'
+      - 'nncf/quantization/**/torch_backend.py'
 
 NNCF TF:
-  - 'examples/tensorflow/**/*!(.md)'
-  - 'examples/post_training_quantization/tensorflow/**/*!(.md)'
-  - 'nncf/tensorflow/**/*!(.md)'
-  - 'tests/tensorflow/**/*!(.md)'
-  - 'nncf/quantization/**/tf_backend.py'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'examples/tensorflow/**/*!(.md)'
+      - 'examples/post_training_quantization/tensorflow/**/*!(.md)'
+      - 'nncf/tensorflow/**/*!(.md)'
+      - 'tests/tensorflow/**/*!(.md)'
+      - 'nncf/quantization/**/tf_backend.py'
 
 NNCF ONNX:
-  - 'examples/onnx/**/*!(.md)'
-  - 'examples/post_training_quantization/onnx/**/*!(.md)'
-  - 'nncf/onnx/**/*!(.md)'
-  - 'tests/onnx/**/*!(.md)'
-  - 'nncf/quantization/**/onnx_backend.py'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'examples/onnx/**/*!(.md)'
+      - 'examples/post_training_quantization/onnx/**/*!(.md)'
+      - 'nncf/onnx/**/*!(.md)'
+      - 'tests/onnx/**/*!(.md)'
+      - 'nncf/quantization/**/onnx_backend.py'
 
 NNCF OpenVINO:
-  - 'examples/openvino/**/*!(.md)'
-  - 'examples/post_training_quantization/openvino/**/*!(.md)'
-  - 'nncf/openvino/**/*!(.md)'
-  - 'tests/openvino/**/*!(.md)'
-  - 'nncf/quantization/**/openvino_backend.py'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'examples/openvino/**/*!(.md)'
+      - 'examples/post_training_quantization/openvino/**/*!(.md)'
+      - 'nncf/openvino/**/*!(.md)'
+      - 'tests/openvino/**/*!(.md)'
+      - 'nncf/quantization/**/openvino_backend.py'
 
 NNCF PTQ:
-  - 'nncf/quantization/**/*!(.md)'
-  - 'tests/post_training/**/*!(.md)'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'nncf/quantization/**/*!(.md)'
+      - 'tests/post_training/**/*!(.md)'
 
 documentation:
-  - '**/*.md'
-  - 'docs/**/*'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - '**/*.md'
+      - 'docs/**/*'
 
 experimental:
-  - 'nncf/experimental/**/*!(.md)'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'nncf/experimental/**/*!(.md)'
 
 NNCF Common:
-  - 'examples/common/**/*!(.md)'
-  - 'nncf/common/**/*!(.md)'
-  - 'tests/common/**/*!(.md)'
+- any:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'examples/common/**/*!(.md)'
+      - 'nncf/common/**/*!(.md)'
+      - 'tests/common/**/*!(.md)'
+
+release target:
+- any:
+  - base-branch:
+    - '^release_v*'

.github/workflows/api_changes_check.yml

@@ -1,6 +1,8 @@
 name: API changes check
+permissions: read-all
+
 on:
-  pull_request_target:
+  pull_request:
     branches:
       - develop
 
@@ -23,11 +25,11 @@ jobs:
       issues: write
     steps:
       - name: Download built HTML doc as artifact from previous step
-        uses: alehechka/download-tartifact@v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: html_doc_artifact
       - name: Checkout latest doc_pages branch tip
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
           ref: doc_pages
           path: previous_doc_state
@@ -39,37 +41,24 @@ jobs:
           echo ${CHANGED_FILES}
           CHANGED_FILES=$(echo $CHANGED_FILES | tr '\n' ' ')
           echo "changed_files=${CHANGED_FILES}" >> $GITHUB_OUTPUT
-      - uses: actions/github-script@v6
-        if: ${{ !(contains(steps.diff.outputs.changed_files, 'differ'))  && contains(github.event.pull_request.labels.*.name, 'API') }}
-        with:
-          github-token: ${{ secrets.ADD_LABELS_WITH_REST_API }}
-          script: |
-            github.rest.issues.removeLabel({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              name: "API"
-            })
-      - uses: actions/github-script@v6
+
+      - name: Add label
         if: ${{ contains(steps.diff.outputs.changed_files, 'differ') }}
+        run: |
+          echo '{"pr_number": "${{ github.event.pull_request.number }}", "action": "add"}' > api_status.json
+
+      - name: Remove label
+        if: ${{ !(contains(steps.diff.outputs.changed_files, 'differ')) && contains(github.event.pull_request.labels.*.name, 'API') }}
+        run: |
+          echo '{"pr_number": "${{ github.event.pull_request.number }}", "action": "remove"}' > api_status.json
+
+      - name: No change label
+        if: ${{ !(contains(steps.diff.outputs.changed_files, 'differ')) && !contains(github.event.pull_request.labels.*.name, 'API') }}
+        run: |
+          echo '{"pr_number": "${{ github.event.pull_request.number }}", "action": "none"}' > api_status.json
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
         with:
-          github-token: ${{ secrets.ADD_LABELS_WITH_REST_API }}
-          script: |
-            github.rest.issues.addLabels({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              labels: ["API"]
-            })
-      - name: Add release label
-        uses: actions/github-script@v6
-        if: ${{ contains(github.event.pull_request.base.ref, 'release_v') }}
-        with:
-          github-token: ${{ secrets.ADD_LABELS_WITH_REST_API }}
-          script: |
-            github.rest.issues.addLabels({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              labels: ["release_target"]
-            })
+          name: api_status
+          path: api_status.json

.github/workflows/assign_issue.yml

@@ -0,0 +1,24 @@
+name: Take Issue
+permissions: read-all
+
+on:
+  issue_comment:
+    types:
+      - created
+      - edited
+
+jobs:
+  take-issue:
+    name: Take issue
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    timeout-minutes: 10
+    steps:
+      - name: take an issue
+        uses: bdougie/take-action@1439165ac45a7461c2d89a59952cd7d941964b87 # v1.6.1
+        with:
+          message: Thank you for looking into this issue! Please let us know if you have any questions or require any help.
+          issueCurrentlyAssignedMessage: Thanks for being interested in this issue. It looks like this ticket is already assigned to a contributor. Please communicate with the assigned contributor to confirm the status of the issue.
+          trigger: .take
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/build_and_publish_doc.yml

@@ -1,4 +1,6 @@
 name: Build complete docs and publish to GH Pages
+permissions: read-all
+
 on:
   push:
     branches:
@@ -11,8 +13,6 @@ concurrency:
   group: ci-${{ github.head_ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
-permissions:
-  contents: write
 jobs:
   call-build-html-doc:
     uses: ./.github/workflows/build_html_doc.yml
@@ -25,18 +25,18 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout main repo  # the github-pages-deploy-action seems to require this step
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       - name: Download HTML doc build artifact
-        uses: alehechka/download-tartifact@v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: html_doc_artifact
       - name: Download schema doc build artifact
-        uses: alehechka/download-tartifact@v2
+        uses: alehechka/download-tartifact@1195216b256562056097b175df17b167557f8681 # v2
         with:
           name: schema_doc_artifact
           path: html_build/html
       - name: Publish built docs on Github Pages branch ${{ env.GH_PAGES_BRANCH }}
-        uses: JamesIves/github-pages-deploy-action@v4
+        uses: JamesIves/github-pages-deploy-action@5c6e9e9f3672ce8fd37b9856193d2a537941e66c # v4.6.1
         with:
           folder: html_build/html
           token: ${{ secrets.PUSH_TO_GH_PAGES_BRANCH }}

.github/workflows/build_html_doc.yml

@@ -1,4 +1,6 @@
 name: HTML documentation build
+permissions: read-all
+
 on:
   workflow_call:
     inputs:
@@ -10,9 +12,13 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
         with:
           ref: ${{ inputs.ref }}
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        with:
+          python-version: 3.10.14
+          cache: pip
       - name: Install NNCF and doc requirements
         run: |
           pip install .
@@ -21,7 +27,7 @@ jobs:
         run: |
           sphinx-build -M html docs/api/source html_build
       - name: Upload built HTMLs as job artifact
-        uses: alehechka/upload-tartifact@v2
+        uses: alehechka/upload-tartifact@a055d3a102b9ed9cfff1263bc713295047d0197e # v2
         with:
           name: html_doc_artifact
           path: html_build/html

.github/workflows/build_schema_page.yml

@@ -1,26 +1,34 @@
 name: Config schema HTML build
+permissions: read-all
+
 on:
   workflow_call:
+
 jobs:
   build-config-schema-html:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        with:
+          python-version: 3.10.14
+          cache: pip
 
       - name: Install and Build
         run: |
           pip install json-schema-for-humans
           pip install .
           python -c 'import jstyleson; from nncf.config import NNCFConfig; jstyleson.dump(NNCFConfig.schema(), open("./schema.json", "w"), indent=2)'
           mkdir -p schema
-          # In the current approach the line below will replace the schema/index.html generated by a 
+          # In the current approach the line below will replace the schema/index.html generated by a
           # phony schema/index.rst. We only need the phony schema/index.rst at the sphinx-build stage so that
           # the sphinx can generate valid links in the TOC for the JSON schema across all pages.
           generate-schema-doc --deprecated-from-description schema.json schema/index.html
 
       - name: Upload result as artifact
-        uses: alehechka/upload-tartifact@v2
+        uses: alehechka/upload-tartifact@a055d3a102b9ed9cfff1263bc713295047d0197e # v2
         with:
           name: schema_doc_artifact
           path: schema