[SYCL][Graph] Update spec supported features

.github/workflows/docs.yml

@@ -21,6 +21,8 @@ on:
  - 'libcxx/docs/**'
  - 'libc/docs/**'
  - 'lld/docs/**'
+ - 'openmp/docs/**'
+ - 'polly/docs/**'
  pull_request:
  paths:
  - 'llvm/docs/**'
@@ -31,6 +33,8 @@ on:
  - 'libcxx/docs/**'
  - 'libc/docs/**'
  - 'lld/docs/**'
+ - 'openmp/docs/**'
+ - 'polly/docs/**'
 
 jobs:
  check-docs-build:
@@ -67,6 +71,10 @@ jobs:
  - 'libc/docs/**'
  lld:
  - 'lld/docs/**'
+ openmp:
+ - 'openmp/docs/**'
+ polly:
+ - 'polly/docs/**'
  - name: Fetch LLVM sources (PR)
  if: ${{ github.event_name == 'pull_request' }}
  uses: actions/checkout@v4
@@ -125,4 +133,14 @@ jobs:
  run: |
  cmake -B lld-build -GNinja -DCMAKE_BUILD_TYPE=Release -DLLVM_ENABLE_PROJECTS="lld" -DLLVM_ENABLE_SPHINX=ON ./llvm
  TZ=UTC ninja -C lld-build docs-lld-html
+ - name: Build OpenMP docs
+ if: steps.docs-changed-subprojects.outputs.openmp_any_changed == 'true'
+ run: |
+ cmake -B openmp-build -GNinja -DCMAKE_BUILD_TYPE=Release -DLLVM_ENABLE_PROJECTS="clang;openmp" -DLLVM_ENABLE_SPHINX=ON ./llvm
+ TZ=UTC ninja -C openmp-build docs-openmp-html
+ - name: Build Polly docs
+ if: steps.docs-changed-subprojects.outputs.polly_any_changed == 'true'
+ run: |
+ cmake -B polly-build -GNinja -DCMAKE_BUILD_TYPE=Release -DLLVM_ENABLE_PROJECTS="polly" -DLLVM_ENABLE_SPHINX=ON ./llvm
+ TZ=UTC ninja -C polly-build docs-polly-html docs-polly-man
 

.github/workflows/new-prs.yml

@@ -1,56 +1,36 @@
 name: "Labelling new pull requests"
+
+permissions:
+ contents: read
+
 on:
- workflow_run:
- workflows: ["PR Receive"]
+ # It's safe to use pull_request_target here, because we aren't checking out
+ # code from the pull request branch.
+ # See https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
+ pull_request_target:
+ types:
+ - opened
+ - reopened
+ - ready_for_review
+ - synchronize
 
 jobs:
  automate-prs-labels:
  permissions:
- contents: read
  pull-requests: write
  runs-on: ubuntu-latest
+ # Ignore PRs with more than 10 commits. Pull requests with a lot of
+ # commits tend to be accidents usually when someone made a mistake while trying
+ # to rebase. We want to ignore these pull requests to avoid excessive
+ # notifications.
  if: >
  github.repository == 'llvm/llvm-project' &&
- github.event.workflow_run.event == 'pull_request_target' &&
- github.event.workflow_run.conclusion == 'success'
+ github.event.pull_request.draft == false &&
+ github.event.pull_request.commits < 10
  steps:
- # From: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
- # Updated version here: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow
- - name: Debug
- run: |
- echo "Event: ${{ github.event.workflow_run.event }} Conclusion: ${{ github.event.workflow_run.conclusion }}"
- - name: 'Download artifact'
- uses: actions/github-script@v6
- with:
- script: |
- const artifacts = await github.rest.actions.listWorkflowRunArtifacts({
- owner: context.repo.owner,
- repo: context.repo.repo,
- run_id: context.payload.workflow_run.id
- });
- const matchArtifact = artifacts.data.artifacts.find((artifact) =>
- artifact.name === 'pr'
- );
- const download = await github.rest.actions.downloadArtifact({
- owner: context.repo.owner,
- repo: context.repo.repo,
- artifact_id: matchArtifact.id,
- archive_format: 'zip'
- });
- const { writeFileSync } = require('node:fs');
- writeFileSync('${{ github.workspace }}/pr.zip', Buffer.from(download.data));
-
- - run: unzip pr.zip
-
- - name: "Get PR Number"
- id: vars
- run:
- echo "pr-number=$(cat NR)" >> "$GITHUB_OUTPUT"
-
  - uses: actions/labeler@v4
  with:
  configuration-path: .github/new-prs-labeler.yml
  # workaround for https://github.com/actions/labeler/issues/112
  sync-labels: ''
  repo-token: ${{ secrets.ISSUE_SUBSCRIBER_TOKEN }}
- pr-number: ${{ steps.vars.outputs.pr-number }}

.github/workflows/pr-code-format.yml

@@ -10,14 +10,14 @@ jobs:
  - name: Fetch LLVM sources
  uses: actions/checkout@v4
  with:
- fetch-depth: 2
+ fetch-depth: 2 # Fetches only the last 2 commits
 
  - name: Get changed files
  id: changed-files
  uses: tj-actions/changed-files@v39
  with:
  separator: ","
- fetch_depth: 100 # Fetches only the last 10 commits
+ fetch_depth: 2000 # Fetches only the last 2000 commits
 
  - name: "Listed files"
  run: |

.github/workflows/pr-subscriber.yml

@@ -1,22 +1,17 @@
 name: PR Subscriber
 
 on:
- workflow_run:
- workflows: ["PR Receive Label"]
+ pull_request_target:
  types:
- - completed
+ - labeled
 
 permissions:
- actions: read
  contents: read
 
 jobs:
  auto-subscribe:
  runs-on: ubuntu-latest
- if: >
- github.repository == 'llvm/llvm-project' &&
- github.event.workflow_run.event == 'pull_request' &&
- github.event.workflow_run.conclusion == 'success'
+ if: github.repository == 'llvm/llvm-project'
  steps:
  - name: Setup Automation Script
  run: |
@@ -26,47 +21,10 @@ jobs:
  chmod a+x github-automation.py
  pip install -r requirements.txt
 
- - name: 'Wait for other actions'
- # We can't use the concurrency tag for these jobs, because it will
- # cancel pending jobs if another job is running.
- env:
- GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- run: |
- python3 pr-subscriber-wait.py
-
-
- # From: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
- # Updated version here: https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow
- - name: 'Download artifact'
- uses: actions/github-script@v6
- with:
- script: |
- const artifacts = await github.rest.actions.listWorkflowRunArtifacts({
- owner: context.repo.owner,
- repo: context.repo.repo,
- run_id: context.payload.workflow_run.id
- });
- const matchArtifact = artifacts.data.artifacts.find((artifact) =>
- artifact.name === 'pr'
- );
- const download = await github.rest.actions.downloadArtifact({
- owner: context.repo.owner,
- repo: context.repo.repo,
- artifact_id: matchArtifact.id,
- archive_format: 'zip'
- });
- const { writeFileSync } = require('node:fs');
- writeFileSync('${{ github.workspace }}/pr.zip', Buffer.from(download.data));
-
- - run: unzip pr.zip
-
  - name: Update watchers
- # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
  run: |
- PR_NUMBER=$(cat NR)
- LABEL_NAME=$(cat LABEL)
  ./github-automation.py \
  --token '${{ secrets.ISSUE_SUBSCRIBER_TOKEN }}' \
  pr-subscriber \
- --issue-number "$PR_NUMBER" \
- --label-name "$LABEL_NAME"
+ --issue-number "${{ github.event.number }}" \
+ --label-name "${{ github.event.label.name }}"

.github/workflows/scorecard.yml

@@ -0,0 +1,61 @@
+# This workflow uses actions that are not certified by GitHub. They are provided
+# by a third-party and are governed by separate terms of service, privacy
+# policy, and support documentation.
+
+# Check current LLVM-Project results here: https://securityscorecards.dev/viewer/?uri=github.com/llvm/llvm-project
+
+name: Scorecard supply-chain security
+on:
+ # For Branch-Protection check. Only the default branch is supported. See
+ # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
+ branch_protection_rule:
+ # To guarantee Maintained check is occasionally updated. See
+ # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+ schedule:
+ - cron: '38 20 * * *'
+
+# Declare default permissions as read only.
+permissions:
+ contents: read
+
+jobs:
+ analysis:
+ name: Scorecard analysis
+ runs-on: ubuntu-latest
+ permissions:
+ # Needed to upload the results to code-scanning dashboard.
+ security-events: write
+ # Needed to publish results and get a badge (see publish_results below).
+ id-token: write 
+
+ steps:
+ - name: "Checkout code"
+ uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+ with:
+ persist-credentials: false
+
+ - name: "Run analysis"
+ uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
+ with:
+ results_file: results.sarif
+ results_format: sarif
+
+ # - Publish results to OpenSSF REST API for easy access by consumers
+ # - Allows the repository to include the Scorecard badge.
+ # - See https://github.com/ossf/scorecard-action#publishing-results. 
+ publish_results: true
+
+ # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
+ # format to the repository Actions tab.
+ - name: "Upload artifact"
+ uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0
+ with:
+ name: SARIF file
+ path: results.sarif
+ retention-days: 5
+
+ # Upload the results to GitHub's code scanning dashboard.
+ - name: "Upload to code-scanning"
+ uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4
+ with:
+ sarif_file: results.sarif

clang-tools-extra/clang-tidy/bugprone/DanglingHandleCheck.cpp

@@ -33,14 +33,20 @@ handleFrom(const ast_matchers::internal::Matcher<RecordDecl> &IsAHandle,
 
 ast_matchers::internal::Matcher<Stmt> handleFromTemporaryValue(
  const ast_matchers::internal::Matcher<RecordDecl> &IsAHandle) {
+
+ const auto TemporaryExpr = anyOf(
+ cxxBindTemporaryExpr(),
+ cxxFunctionalCastExpr(
+ hasCastKind(CK_ConstructorConversion),
+ hasSourceExpression(ignoringParenImpCasts(cxxBindTemporaryExpr()))));
  // If a ternary operator returns a temporary value, then both branches hold a
  // temporary value. If one of them is not a temporary then it must be copied
  // into one to satisfy the type of the operator.
  const auto TemporaryTernary = conditionalOperator(
- hasTrueExpression(ignoringParenImpCasts(cxxBindTemporaryExpr())),
- hasFalseExpression(ignoringParenImpCasts(cxxBindTemporaryExpr())));
+ hasTrueExpression(ignoringParenImpCasts(TemporaryExpr)),
+ hasFalseExpression(ignoringParenImpCasts(TemporaryExpr)));
 
- return handleFrom(IsAHandle, anyOf(cxxBindTemporaryExpr(), TemporaryTernary));
+ return handleFrom(IsAHandle, anyOf(TemporaryExpr, TemporaryTernary));
 }
 
 ast_matchers::internal::Matcher<RecordDecl> isASequence() {