WIP ML Build Docker container for ML repositories (Tensorflow, JAX and XLA).

This container branches off from
/tensorflow/tools/tf_sig_build_dockerfiles/. However, since
hermetic CUDA and hermetic Python is now available for Tensorflow, a lot of the
requirements installed on the original container can be removed to reduce the
footprint of the container and make it more reusable across different ML

name: Helm Chart linting

on:
  pull_request:
    branches:
      - master

# This ensures that previous jobs for the PR are canceled when the PR is
# updated.
concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

# Synchronize all pushes to 'master' branch with 'main' branch to facilitate migration
name: "Sync main branch"
on:
  push:
    branches:
      - master

jobs:
  sync_latest_from_upstream:
    runs-on: ubuntu-latest
    name: Sync latest commits from master branch

    steps:
      - name: Checkout target repo
        uses: actions/checkout@v2
        with:
          ref: main

      - name: Sync upstream changes

const val BOT_DAILY_UPGRADLE_WRAPPER_BRANCH = "devprod/upgrade-to-latest-wrapper"

const val DEPENDABOT_BRANCH_PATTERN = "dependabot/*"

fun determineBranchFilter(branches: List<String>): String =
    listOf(DEPENDABOT_BRANCH_PATTERN).joinToString("\n") { "-:$it" } + "\n" + branches.joinToString("\n") { "+:$it" }

fun Triggers.vcsTrigger(
    branchPatterns: List<String>,
    enable: Boolean = true,
) {
    vcs {

    @Test
    public void testFormatForUrl() {
        // IPv6 addresses - should add brackets
        assertEquals("[::1]", IpAddressUtil.formatForUrl("::1"));
        assertEquals("[2001:db8::1]", IpAddressUtil.formatForUrl("2001:db8::1"));
        assertEquals("[fe80::1]", IpAddressUtil.formatForUrl("fe80::1"));

        // IPv6 addresses already with brackets - should not double-wrap
        assertEquals("[::1]", IpAddressUtil.formatForUrl("[::1]"));

   */
  private fun doReadTimeout() = !connection.client || sink.closed || sink.finished

  /**
   * A source that reads the incoming data frames of a stream. Although this class uses
   * synchronization to safely receive incoming data frames, it is not intended for use by multiple
   * readers.
   */
  inner class FramingSource internal constructor(

    workspace: "/dev/shm/elastic+elasticsearch+pull-request+part-1-fips"
    scm:
      - git:
          refspec: "+refs/pull/${ghprbPullId}/*:refs/remotes/origin/pr/${ghprbPullId}/*"
          branches:
            - "${ghprbActualCommit}"
    triggers:
      - github-pull-request:
          org-list:
            - elastic
          allow-whitelist-orgs-as-admins: true

import okhttp3.internal.closeQuietly
import okio.Buffer
import okio.BufferedSource
import okio.ByteString
import okio.buffer
import okio.source

/** Replays prerecorded outgoing frames and records incoming frames.  */
class MockHttp2Peer : Closeable {
  private var frameCount = 0
  private var client = false
  private val bytesOut = Buffer()
  private var writer = Http2Writer(bytesOut, client)

      (c-set-offset 'inexpr-class          0)
      (c-set-offset 'access-label          0)
      (c-set-offset 'inher-intro           '++)
      (c-set-offset 'inher-cont            '++)
      (c-set-offset 'brace-list-intro      '+)
      (c-set-offset 'func-decl-cont        '++)
      ))
   (c-basic-offset . 4)
   (c-comment-only-line-offset . (0 . 0))
   (fill-column . 140)
   (fci-rule-column . 140)

name: "Check markdown links"

on:
  push:
    branches:
      - master
  pull_request:
  workflow_dispatch:

permissions: {}

jobs:
  check-links:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Check links
        uses: lycheeverse/lychee-action@v2.8.0
        with:
          # excluded: