[ML-413] upgrade oneapi for CI and fix Token-Permissions error

.github/workflows/ci-checks-build.yml

@@ -8,7 +8,7 @@ permissions:  # added using https://github.com/step-security/secure-repo
 jobs:
   code-checks-scala:
     name: Code Checks for Scala
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -22,7 +22,7 @@ jobs:
 
   code-checks-java:
     name: Code Checks for Java
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -36,7 +36,7 @@ jobs:
 
   code-checks-cpp:
     name: Code Checks for C++
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Install clang-format
@@ -50,7 +50,7 @@ jobs:
 
   code-build:
     name: Build Checks
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8

.github/workflows/ci-tests.yml

@@ -8,7 +8,7 @@ permissions:  # added using https://github.com/step-security/secure-repo
 jobs:
   local-test-oneAPI_table:
     name: Local Test for Units (OneAPI Table)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -31,7 +31,7 @@ jobs:
           ${{github.workspace}}/dev/ci/ci-local-dpc-test.sh
   local-test-CPU:
     name: Local Test for Units (CPU)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -55,7 +55,7 @@ jobs:
   yarn-test:
     if: ${{ false }}  # disable for now
     name: Yarn Test for Examples (CPU)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -78,7 +78,7 @@ jobs:
           ${{github.workspace}}/dev/ci/ci-yarn-test-cpu.sh
   standalone-scala-test:
     name: Standalone CPU_GPU_PROFILE Test for scala Examples (CPU)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8
@@ -101,7 +101,7 @@ jobs:
           ${{github.workspace}}/dev/ci/ci-standalone-scala-test-cpu.sh
   standalone-python-test:
     name: Standalone CPU_GPU_PROFILE Test for python Examples (CPU)
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Set up JDK 1.8

.github/workflows/dev_cron.yml

@@ -27,15 +27,17 @@ on:
 
 permissions:
   issues: write
-  contents: write
+  contents: read
 
 jobs:
   process:
     name: Process
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
-
+      with:
+          repository: ${{ github.repository }}
+          ref: ${{ github.event.pull_request.base.ref }}
       - name: Comment Issues link
         if: |
           github.event_name == 'pull_request_target' &&

dev/install-build-deps-centos.sh

@@ -13,11 +13,11 @@ repo_gpgcheck=1
 gpgkey=https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
 EOF
   sudo mv /tmp/oneAPI.repo /etc/yum.repos.d
-  sudo yum install -y intel-oneapi-ccl-devel-2021.8.0 \
-                      intel-oneapi-tbb-common-devel-2021.8.0 intel-oneapi-tbb-devel-2021.8.0 \
-                      intel-oneapi-mpi-devel-2021.8.0 \
-                      intel-oneapi-dal-common-devel-2023.0.0 intel-oneapi-dal-devel-2023.0.0 \
-                      intel-oneapi-compiler-dpcpp-cpp-2023.0.0 intel-oneapi-compiler-dpcpp-cpp-common-2023.0.0 intel-oneapi-compiler-dpcpp-cpp-runtime-2023.0.0 intel-oneapi-dpcpp-cpp-2023.0.0
+  sudo yum install -y intel-oneapi-ccl-devel-2021.16 \
+                      intel-oneapi-tbb-common-devel-2021.13 intel-oneapi-tbb-devel-2022.2 \
+                      intel-oneapi-mpi-devel-2021.16 \
+                      intel-oneapi-dal-common-devel-2025.6 intel-oneapi-dal-devel-2025.6 \
+                      intel-oneapi-compiler-dpcpp-cpp-2025.3 intel-oneapi-compiler-dpcpp-cpp-common-2025.3 intel-oneapi-compiler-dpcpp-cpp-runtime-2025.3 intel-oneapi-dpcpp-cpp-2025.3
 else
   echo "oneAPI components already installed!"
 fi  

dev/install-build-deps-ubuntu.sh

@@ -4,15 +4,14 @@ if [ ! -d /opt/intel/oneapi ]; then
   echo "Installing oneAPI components ..."
   sudo apt clean
   cd /tmp
-  wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \
-  | gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null
+  wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null
   echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg] https://apt.repos.intel.com/oneapi all main" | sudo tee /etc/apt/sources.list.d/oneAPI.list
   sudo apt update
-  sudo apt-get install -y intel-oneapi-ccl-devel-2021.8.0 \
-                          intel-oneapi-tbb-common-devel-2021.8.0 intel-oneapi-tbb-devel-2021.8.0 \
-                          intel-oneapi-mpi-devel-2021.8.0 \
-                          intel-oneapi-dal-common-devel-2023.0.0 intel-oneapi-dal-devel-2023.0.0 \
-                          intel-oneapi-compiler-dpcpp-cpp-2023.0.0 intel-oneapi-compiler-dpcpp-cpp-common-2023.0.0 intel-oneapi-compiler-dpcpp-cpp-runtime-2023.0.0 intel-oneapi-dpcpp-cpp-2023.0.0
+  sudo apt-get install -y intel-oneapi-ccl-devel-2021.16 \
+                          intel-oneapi-tbb-common-devel-2021.13 intel-oneapi-tbb-devel-2022.2 \
+                          intel-oneapi-mpi-devel-2021.16 \
+                          intel-oneapi-dal-common-devel-2025.6 intel-oneapi-dal-devel-2025.6 \
+                          intel-oneapi-compiler-dpcpp-cpp-2025.3 intel-oneapi-compiler-dpcpp-cpp-common-2025.3 intel-oneapi-compiler-dpcpp-cpp-runtime-2025.3 intel-oneapi-dpcpp-cpp-2025.3
 else
   echo "oneAPI components already installed!"
 fi

dev/install-runtime-deps-centos.sh

@@ -13,9 +13,9 @@ repo_gpgcheck=1
 gpgkey=https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
 EOF
   sudo mv /tmp/oneAPI.repo /etc/yum.repos.d
-  sudo yum install -y intel-oneapi-ccl-2021.8.0 \
-                      intel-oneapi-mpi-2021.8.0 \
-                      intel-oneapi-compiler-dpcpp-cpp-runtime-2023.0.0 intel-oneapi-dpcpp-cpp-2023.0.0
+  sudo yum install -y intel-oneapi-ccl-2021.16 \
+                      intel-oneapi-mpi-2021.16 \
+                      intel-oneapi-compiler-dpcpp-cpp-runtime-2025.3 intel-oneapi-dpcpp-cpp-2025.3
 else
   echo "oneAPI components already installed!"
 fi  

dev/install-runtime-deps-ubuntu.sh

@@ -4,13 +4,12 @@ if [ ! -d /opt/intel/oneapi ]; then
   echo "Installing oneAPI components ..."
   sudo apt clean
   cd /tmp
-  wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB \
-  | gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null
+  wget -O- https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | gpg --dearmor | sudo tee /usr/share/keyrings/oneapi-archive-keyring.gpg > /dev/null
   echo "deb [signed-by=/usr/share/keyrings/oneapi-archive-keyring.gpg] https://apt.repos.intel.com/oneapi all main" | sudo tee /etc/apt/sources.list.d/oneAPI.list
   sudo apt update
-  sudo apt-get install -y intel-oneapi-ccl-2021.8.0 \
-                          intel-oneapi-mpi-2021.8.0 \
-                          intel-oneapi-compiler-dpcpp-cpp-runtime-2023.0.0 intel-oneapi-dpcpp-cpp-2023.0.0
+  sudo apt-get install -y intel-oneapi-ccl-2021.16 \
+                          intel-oneapi-mpi-2021.16 \
+                          intel-oneapi-compiler-dpcpp-cpp-runtime-2025.3 intel-oneapi-dpcpp-cpp-2025.3
 else
   echo "oneAPI components already installed!"
 fi