fix: image loading in BitmaskRegion (fix: #8544)

.cursor/rules/iterate_queryset.md

@@ -0,0 +1,17 @@
+# Django QuerySet Iteration
+
+For iterating over large Django QuerySets, use `iterate_queryset()` from `core.utils.iterators` instead of `.iterator()`:
+
+```python
+from core.utils.iterators import iterate_queryset
+
+# Good
+for obj in iterate_queryset(queryset):
+    process(obj)
+
+# Avoid
+for obj in queryset.iterator():
+    process(obj)
+```
+
+**Note:** `iterate_queryset()` doesn't preserve ordering - if order matters, don't use it.

.github/workflows/apply-linters.yml

@@ -35,14 +35,14 @@ jobs:
             > [Workflow run](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }})
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GIT_PAT }}
           ref: ${{ inputs.branch_name }}
           repository: "${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}"
 
       - name: Checkout Actions Hub
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GIT_PAT }}
           repository: HumanSignal/actions-hub
@@ -64,7 +64,7 @@ jobs:
           username: "${{ steps.team_details.outputs.github-username }}"
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.13'
 

.github/workflows/bandit.yml

@@ -22,12 +22,12 @@ jobs:
       - uses: hmarr/[email protected]
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.head_sha }}
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.13'
 

.github/workflows/biome.yml

@@ -20,7 +20,7 @@ jobs:
       - uses: hmarr/[email protected]
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.head_sha }}
 

.github/workflows/blue.yml

@@ -13,12 +13,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.head_sha }}
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.13'
 

.github/workflows/build_pypi.yml

@@ -77,7 +77,7 @@ jobs:
       - uses: hmarr/[email protected]
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.ref }}
 
@@ -117,7 +117,7 @@ jobs:
 
       - name: "Set up Python"
         id: setup_python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.13'
           cache: 'poetry'
@@ -135,7 +135,7 @@ jobs:
 
       - name: Attach artifacts to release
         if: inputs.release-id
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GIT_PAT }}
           script: |
@@ -171,7 +171,7 @@ jobs:
       - name: Get PyPI package details
         id: pypi-package-details
         if: inputs.upload_to_pypi && inputs.release_type == 'release'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           VERSION: ${{ inputs.version }}
         with:

.github/workflows/build_pypi_nightly.yml

@@ -31,7 +31,7 @@ jobs:
     steps:
       - name: Get previous nightly release
         id: previous-nightly
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GIT_PAT }}
           script: |
@@ -61,7 +61,7 @@ jobs:
             }
 
       - name: Generate Changelog
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GIT_PAT }}
           script: |
@@ -103,7 +103,7 @@ jobs:
 
       - name: Create Nightly Release
         id: create_release
-        uses: softprops/[email protected].2
+        uses: softprops/[email protected].3
         with:
           token: ${{ secrets.GIT_PAT }}
           body_path: ${{ github.workspace }}-CHANGELOG.txt

.github/workflows/bump-helm-chart.yml

@@ -33,7 +33,7 @@ jobs:
           git config --global user.email '[email protected]'
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: "${{ github.repository_owner }}/${{ env.HELM_CHART_REPO_NAME }}"
           token: ${{ secrets.GIT_PAT }}

.github/workflows/cicd_pipeline.yml

@@ -36,7 +36,7 @@ jobs:
 
       - name: Checkout
         if: github.event_name == 'push'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.ref }}
 
@@ -68,7 +68,7 @@ jobs:
               - '.github/workflows/cicd_pipeline.yml'
               - '.github/workflows/docker-build.yml'
 
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         id: commit-details
         with:
           script: |
@@ -171,7 +171,7 @@ jobs:
     needs:
       - build-docker
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         env:
           DOCKER_IMAGE_VERSION: ${{ needs.build-docker.outputs.build_version }}
           RELEASE_NAME: 'ls-release'
@@ -237,21 +237,21 @@ jobs:
       - uses: hmarr/[email protected]
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GIT_PAT }}
           ref: ${{ github.sha }}
           fetch-depth: 0
 
       - name: Checkout Actions Hub
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GIT_PAT }}
           repository: HumanSignal/actions-hub
           path: ./.github/actions-hub
 
       - name: Create release draft
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         id: create-draft-release
         env:
           TARGET_COMMITISH: "${{ github.ref_name }}"
@@ -410,7 +410,7 @@ jobs:
           helm_chart_path: "heartex/label-studio/Chart.yaml"
 
       - name: Update Draft Release
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         id: update-draft-release
         env:
           CHANGELOG: "${{ steps.changelog.outputs.changelog }}"

.github/workflows/cicd_pipeline_develop.yml

@@ -64,7 +64,7 @@ jobs:
     needs:
       - build-docker
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         env:
           DOCKER_IMAGE_VERSION: ${{ needs.build-docker.outputs.build_version }}
           RELEASE_NAME: 'ls-develop'

.github/workflows/clean-github-cache.yml

@@ -0,0 +1,34 @@
+name: "Clean github cache"
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 6 * * *"  # Runs every day at 06:00 UTC
+permissions:
+  actions: write
+jobs:
+  delete-cache:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Delete all caches
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          while true; do
+            CACHE_IDS=$(gh cache list --repo "${{ github.repository }}" --limit 100 --json id --jq '.[].id' | tr '\n' ' ')
+            if [ -z "$CACHE_IDS" ]; then
+              echo "No more caches to delete."
+              break
+            fi
+            echo "$CACHE_IDS" | xargs -n 1 -P 10 gh cache delete --repo "${{ github.repository }}"
+            sleep 1
+          done
+      - name: Verify cache deletion
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          REMAINING_CACHES=$(gh cache list --repo "${{ github.repository }}" --limit 1 --json id | jq length)
+          if [ "$REMAINING_CACHES" -ne 0 ]; then
+            echo "Warning: $REMAINING_CACHES caches remain"
+          fi

.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3

.github/workflows/codespell.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Codespell
         uses: codespell-project/actions-codespell@v2
         with:

.github/workflows/create-tag-docs.yml

@@ -36,7 +36,7 @@ jobs:
           git config --global user.email '[email protected]'
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GIT_PAT }}
           ref: ${{ inputs.ref }}

.github/workflows/delete_pr_branch.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: hmarr/[email protected]
 
       - name: Delete branch
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           HEAD_REF: ${{ github.event.pull_request.head.ref }}
         with:

.github/workflows/docker-build-ontop.yml

@@ -65,7 +65,7 @@ jobs:
 
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           submodules: 'recursive'
           ref: ${{ inputs.ref }}
@@ -129,7 +129,7 @@ jobs:
       - docker_build
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           path: ${{ runner.temp }}/digests
           pattern: digests-*
@@ -146,7 +146,7 @@ jobs:
 
       - name: Calculate Docker tags
         id: calculate-docker-tags
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             core.setOutput('docker-tags', `${{ inputs.tags }}`.split(",").join("\n"))

.github/workflows/docker-build.yml

@@ -1,6 +1,16 @@
 name: "Docker build & push"
 
 on:
+  workflow_dispatch:
+    inputs:
+      sha:
+        description: 'The commit SHA to build'
+        type: string
+        required: true
+      branch_name:
+        description: 'The branch name to build'
+        type: string
+        required: true
   workflow_call:
     inputs:
       sha:
@@ -34,7 +44,7 @@ jobs:
       sha: ${{ steps.version.outputs.sha }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           submodules: 'recursive'
           ref: ${{ inputs.sha }}
@@ -92,7 +102,7 @@ jobs:
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           submodules: 'recursive'
           ref: ${{ inputs.sha }}
@@ -173,7 +183,7 @@ jobs:
       - calculate_version
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           path: ${{ runner.temp }}/digests
           pattern: digests-*
@@ -214,7 +224,7 @@ jobs:
     if: success()
     steps:
       - name: Create Docker image tag Check
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const { repo, owner } = context.repo;

.github/workflows/docker-command.yml

@@ -27,7 +27,7 @@ jobs:
             > [Workflow run](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }})
 
       - name: Check user's membership
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         id: check-membership
         env:
           ACTOR: ${{ github.actor }}