Sync with Microsoft ONNX Runtime - 31032026

.github/workflows/android.yml

@@ -29,6 +29,8 @@ jobs:
         "1ES.Pool=onnxruntime-github-Ubuntu2204-AMD-CPU",
         "JobId=AndroidBinarySizeCheckJob_MinimalBaseline-${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}"
         ]
+    env:
+      CCACHE_DIR: ~/.cache/ccache # explicitly set to prevent any fallback to `~/.ccache`
     steps:
     - name: Checkout repository
       uses: actions/checkout@v6
@@ -41,7 +43,7 @@ jobs:
         ndk-version: 28.0.13004108
 
     - name: Get Docker Image using Action
-      uses: microsoft/onnxruntime-github-actions/build-docker-image@v0.0.9
+      uses: microsoft/onnxruntime-github-actions/build-docker-image@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
       id: build_docker_image_step
       with:
         dockerfile: ${{ github.workspace }}/tools/ci_build/github/linux/docker/inference/x86_64/default/cpu/Dockerfile
@@ -71,6 +73,7 @@ jobs:
       shell: python
       working-directory: ${{ github.workspace }}
 
+    # FUTURE WORK: ccache, vcpkg cache
     - name: 1a. Build onnxruntime
       run: |
         set -e -x
@@ -119,6 +122,8 @@ jobs:
         "1ES.Pool=onnxruntime-github-Ubuntu2204-AMD-CPU",
         "JobId=android_nnapi_ep-${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}"
         ]
+    env:
+      CCACHE_DIR: ~/.cache/ccache # explicitly set to prevent any fallback to `~/.ccache`
     steps:
       - uses: actions/checkout@v6
 
@@ -129,9 +134,10 @@ jobs:
           java-version: '17'
           architecture: x64
 
-
-      - uses: microsoft/onnxruntime-github-actions/setup-build-tools@v0.0.9
+      - uses: microsoft/onnxruntime-github-actions/setup-build-tools@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
         with:
+          ccache-version: 4.13.1
+          ccache-hash: 626407a9b81dd86f8ec9867bff396b32dd1f00344f5b323526579a64f6d4104927f83e8d7a05ad9806fd78f4491e0adb4cff73388000a62050cb1b00766214ee
           vcpkg-version: '2025.08.27'
           vcpkg-hash: '9a4b32849792e13bee1d24726f073b3881acae4165206ddf1a6378e44a4ddd05b3ee93f55ff46d8e8873b3cbcd06606212989e248f0bd615a5bf365070074079'
           cmake-version: '3.31.6'
@@ -144,6 +150,23 @@ jobs:
         with:
           ndk-version: 28.0.13004108
 
+      - name: Setup CCache
+        uses: actions/cache@v4
+        with:
+          # Fully qualify by workflow. `actions/cache` does not isolate by workflow, unlike ADO cache actions.
+          key: ccache | android.yml | android_nnapi_ep
+          path: ~/.cache/ccache
+
+      - name: Setup VCPKG Cache
+        uses: actions/cache@v4
+        with:
+          key: vcpkg-cache | android.yml | android_nnapi_ep
+          path: ~/.cache/vcpkg
+
+      - name: CCache reset stats
+        run: ccache --zero-stats
+        shell: bash
+
       - name: NNAPI EP, Build, Test on Android Emulator
         run: >-
           python3 tools/ci_build/build.py
@@ -155,21 +178,27 @@ jobs:
           --android_abi=x86_64
           --android_api=29
           --skip_submodule_sync
-          --parallel --use_vcpkg --use_vcpkg_ms_internal_asset_cache
+          --parallel
+          --use_cache
+          --use_vcpkg
+          --use_vcpkg_ms_internal_asset_cache
           --use_nnapi
           --build_shared_lib
           --cmake_generator=Ninja
           --build_java
           --update --build --test
         shell: bash
 
-
       - name: Build Minimal ORT with NNAPI and run tests
         run:
           tools/ci_build/github/linux/ort_minimal/nnapi_minimal_build_minimal_ort_and_run_tests.sh
           "$(pwd)"
         shell: bash
 
+      - name: CCache stats
+        run: ccache --show-stats -vv
+        shell: bash
+
       - name: Install psutil for emulator shutdown by run_android_emulator.py
         if: always()
         run: python3 -m pip install psutil
@@ -198,7 +227,8 @@ jobs:
         "1ES.Pool=onnxruntime-github-Ubuntu2204-AMD-CPU",
         "JobId=android_cpu_ep-${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}"
         ]
-
+    env:
+      CCACHE_DIR: ~/.cache/ccache # explicitly set to prevent any fallback to `~/.ccache`
     steps:
       - uses: actions/checkout@v6
 
@@ -209,11 +239,39 @@ jobs:
           java-version: '17'
           architecture: x64
 
+      - uses: microsoft/onnxruntime-github-actions/setup-build-tools@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
+        with:
+          ccache-version: 4.13.1
+          ccache-hash: 626407a9b81dd86f8ec9867bff396b32dd1f00344f5b323526579a64f6d4104927f83e8d7a05ad9806fd78f4491e0adb4cff73388000a62050cb1b00766214ee
+          vcpkg-version: '2025.08.27'
+          vcpkg-hash: '9a4b32849792e13bee1d24726f073b3881acae4165206ddf1a6378e44a4ddd05b3ee93f55ff46d8e8873b3cbcd06606212989e248f0bd615a5bf365070074079'
+          cmake-version: '3.31.6'
+          cmake-hash: '42395e20b10a8e9ef3e33014f9a4eed08d46ab952e02d2c1bbc8f6133eca0d7719fb75680f9bbff6552f20fcd1b73d86860f7f39388d631f98fb6f622b37cf04'
+          add-cmake-to-path: 'true'
+          disable-terrapin: 'true'
+
       - name: Setup Android NDK
         uses: ./.github/actions/setup-android-ndk
         with:
           ndk-version: 28.0.13004108
 
+      - name: Setup CCache
+        uses: actions/cache@v4
+        with:
+          # Fully qualify by workflow. `actions/cache` does not isolate by workflow, unlike ADO cache actions.
+          key: ccache | android.yml | android_cpu_ep
+          path: ~/.cache/ccache
+
+      - name: Setup VCPKG Cache
+        uses: actions/cache@v4
+        with:
+          key: vcpkg-cache | android.yml | android_cpu_ep
+          path: ~/.cache/vcpkg
+
+      - name: CCache reset stats
+        run: ccache --zero-stats
+        shell: bash
+
       - name: CPU EP, Build and Test
         run: >-
           python3 tools/ci_build/build.py
@@ -225,12 +283,19 @@ jobs:
           --android_abi=x86_64
           --android_api=30
           --skip_submodule_sync
-          --parallel --use_vcpkg --use_vcpkg_ms_internal_asset_cache
+          --parallel
+          --use_cache
+          --use_vcpkg
+          --use_vcpkg_ms_internal_asset_cache
           --cmake_generator=Ninja
           --build_java
           --update --build --test
         shell: bash
 
+      - name: CCache stats
+        run: ccache --show-stats -vv
+        shell: bash
+
       - name: Install psutil for emulator shutdown by run_android_emulator.py
         if: always()
         run: python3 -m pip install psutil

.github/workflows/linux-wasm-ci-build-and-test-workflow.yml

@@ -4,6 +4,9 @@ description: "This is a reusable workflow for Linux WASM CI pipelines to build a
 on:
   workflow_call:
     inputs:
+      job_name: # workflow-scope unique key
+        required: true
+        type: string
       build_config:
         required: true
         type: string
@@ -43,6 +46,7 @@ jobs:
       buildArch: x64
       common_build_args: >-
         --parallel
+        --use_cache
         ${{ inputs.use_vcpkg == true && '--use_vcpkg --use_vcpkg_ms_internal_asset_cache' || '' }}
         --config ${{ inputs.build_config }}
         --skip_submodule_sync
@@ -77,8 +81,23 @@ jobs:
       - name: Install python dependencies
         run: python -m pip install flatbuffers
 
-      - uses: microsoft/onnxruntime-github-actions/setup-build-tools@v0.0.9
+      - name: Setup CCache
+        uses: actions/cache@v4
+        with:
+          # Fully qualify by workflow. `actions/cache` does not isolate by workflow, unlike ADO cache actions.
+          key: ccache | web.yml | ${{ inputs.job_name }}
+          path: ~/.cache/ccache
+
+      - name: Setup VCPKG Cache
+        uses: actions/cache@v4
+        with:
+          key: vcpkg-cache | web.yml | ${{ inputs.job_name }}
+          path: ~/.cache/vcpkg
+
+      - uses: microsoft/onnxruntime-github-actions/setup-build-tools@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
         with:
+          ccache-version: 4.13.1
+          ccache-hash: 626407a9b81dd86f8ec9867bff396b32dd1f00344f5b323526579a64f6d4104927f83e8d7a05ad9806fd78f4491e0adb4cff73388000a62050cb1b00766214ee
           vcpkg-version: '2025.08.27'
           vcpkg-hash: '9a4b32849792e13bee1d24726f073b3881acae4165206ddf1a6378e44a4ddd05b3ee93f55ff46d8e8873b3cbcd06606212989e248f0bd615a5bf365070074079'
           cmake-version: '3.31.6'

.github/workflows/linux_cuda_ci.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
 
-      - uses: microsoft/onnxruntime-github-actions/build-docker-image@v0.0.9
+      - uses: microsoft/onnxruntime-github-actions/build-docker-image@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
         id: build_docker_image_step
         with:
           dockerfile: ${{ github.workspace }}/tools/ci_build/github/linux/docker/Dockerfile.manylinux2_28_cuda
@@ -95,7 +95,7 @@ jobs:
       # So build.py --build_dir build/Release inside the container correctly finds the artifacts.
       - name: Test ONNX Runtime
         id: test_step
-        uses: microsoft/onnxruntime-github-actions/run-build-script-in-docker@v0.0.9
+        uses: microsoft/onnxruntime-github-actions/run-build-script-in-docker@8bad63a3c05d448311dfa8e5f531171c97471aa1 # v0.0.12
         with:
           docker_image: ${{ steps.build_docker_image_step.outputs.full-image-name }}
           build_config: Release