Skip to content

chore: Fix some zizmor lints - #2721

Merged
larseggert merged 1 commit into
mozilla:mainfrom
larseggert:chore-zizmor-fixes
Jun 10, 2025
Merged

chore: Fix some zizmor lints#2721
larseggert merged 1 commit into
mozilla:mainfrom
larseggert:chore-zizmor-fixes

Conversation

@larseggert

Copy link
Copy Markdown
Collaborator

These show up when I run locally, but not when we run in CI?

These show up when I run locally, but not when we run in CI?
@github-actions

github-actions Bot commented Jun 9, 2025

Copy link
Copy Markdown
Contributor

Failed Interop Tests

QUIC Interop Runner, client vs. server, differences relative to b41c82b.

neqo-latest as client

neqo-latest as server

  • aioquic vs. neqo-latest: run cancelled after 20 min
  • chrome vs. neqo-latest: ⚠️3
  • go-x-net vs. neqo-latest: 🚀DC ⚠️LR B L2
  • kwik vs. neqo-latest: 🚀DC BP ⚠️H LR 3 B 6 BA ⚠️CM
  • linuxquic vs. neqo-latest: run cancelled after 20 min
  • lsquic vs. neqo-latest: 🚀B C1 ⚠️S 3
  • msquic vs. neqo-latest: run cancelled after 20 min
  • mvfst vs. neqo-latest: ⚠️H DC Z 🚀A ⚠️3 B L1 C1 ⚠️CM
  • neqo vs. neqo-latest: run cancelled after 20 min
  • ngtcp2 vs. neqo-latest: ⚠️L2
  • openssl vs. neqo-latest: 🚀DC ⚠️H LR ⚠️C20 M 🚀B A 🚀BA ⚠️6 CM
  • quic-go vs. neqo-latest: 🚀DC LR ⚠️M B U 🚀A ⚠️6 BP 🚀BA CM
  • quiche vs. neqo-latest: run cancelled after 20 min
  • quinn vs. neqo-latest: run cancelled after 20 min
  • s2n-quic vs. neqo-latest: run cancelled after 20 min
  • tquic vs. neqo-latest: run cancelled after 20 min
  • xquic vs. neqo-latest: run cancelled after 20 min
All results

Succeeded Interop Tests

QUIC Interop Runner, client vs. server

neqo-latest as client

neqo-latest as server

Unsupported Interop Tests

QUIC Interop Runner, client vs. server

neqo-latest as client

neqo-latest as server

@github-actions

github-actions Bot commented Jun 9, 2025

Copy link
Copy Markdown
Contributor

Benchmark results

Performance differences relative to 079b02e.

1-conn/1-100mb-resp/mtu-1504 (aka. Download)/client: Change within noise threshold.
       time:   [625.62 ms 626.46 ms 627.33 ms]
       thrpt:  [159.41 MiB/s 159.63 MiB/s 159.84 MiB/s]
change:
       time:   [−0.6624% −0.4682% −0.2830%] (p = 0.00 < 0.05)
       thrpt:  [+0.2838% +0.4704% +0.6668%]

Found 2 outliers among 100 measurements (2.00%)
2 (2.00%) high mild

1-conn/10_000-parallel-1b-resp/mtu-1504 (aka. RPS)/client: No change in performance detected.
       time:   [308.53 ms 310.03 ms 311.52 ms]
       thrpt:  [32.100 Kelem/s 32.254 Kelem/s 32.412 Kelem/s]
change:
       time:   [−0.3758% +0.3582% +1.0635%] (p = 0.33 > 0.05)
       thrpt:  [−1.0523% −0.3569% +0.3772%]
1-conn/1-1b-resp/mtu-1504 (aka. HPS)/client: No change in performance detected.
       time:   [27.102 ms 27.259 ms 27.439 ms]
       thrpt:  [36.445  elem/s 36.685  elem/s 36.898  elem/s]
change:
       time:   [−1.0343% −0.1237% +0.7919%] (p = 0.79 > 0.05)
       thrpt:  [−0.7857% +0.1238% +1.0451%]

Found 8 outliers among 100 measurements (8.00%)
8 (8.00%) high severe

1-conn/1-100mb-req/mtu-1504 (aka. Upload)/client: 💚 Performance has improved.
       time:   [635.86 ms 637.07 ms 638.28 ms]
       thrpt:  [156.67 MiB/s 156.97 MiB/s 157.27 MiB/s]
change:
       time:   [−5.5235% −3.3316% −1.3411%] (p = 0.00 < 0.05)
       thrpt:  [+1.3594% +3.4464% +5.8465%]
decode 4096 bytes, mask ff: No change in performance detected.
       time:   [11.792 µs 11.820 µs 11.856 µs]
       change: [−0.8214% −0.2733% +0.2184%] (p = 0.33 > 0.05)

Found 13 outliers among 100 measurements (13.00%)
1 (1.00%) low severe
6 (6.00%) low mild
6 (6.00%) high severe

decode 1048576 bytes, mask ff: No change in performance detected.
       time:   [3.0219 ms 3.0315 ms 3.0426 ms]
       change: [−0.4083% +0.0462% +0.5246%] (p = 0.87 > 0.05)

Found 10 outliers among 100 measurements (10.00%)
10 (10.00%) high severe

decode 4096 bytes, mask 7f: No change in performance detected.
       time:   [19.935 µs 19.983 µs 20.038 µs]
       change: [−0.6606% −0.0278% +0.5922%] (p = 0.94 > 0.05)

Found 18 outliers among 100 measurements (18.00%)
1 (1.00%) low severe
3 (3.00%) low mild
2 (2.00%) high mild
12 (12.00%) high severe

decode 1048576 bytes, mask 7f: No change in performance detected.
       time:   [5.0477 ms 5.0594 ms 5.0726 ms]
       change: [−0.3192% +0.0321% +0.3943%] (p = 0.88 > 0.05)

Found 16 outliers among 100 measurements (16.00%)
2 (2.00%) low mild
14 (14.00%) high severe

decode 4096 bytes, mask 3f: No change in performance detected.
       time:   [8.2761 µs 8.3071 µs 8.3447 µs]
       change: [−0.3392% +0.3176% +0.9908%] (p = 0.38 > 0.05)

Found 18 outliers among 100 measurements (18.00%)
6 (6.00%) low mild
2 (2.00%) high mild
10 (10.00%) high severe

decode 1048576 bytes, mask 3f: No change in performance detected.
       time:   [1.5853 ms 1.5908 ms 1.5977 ms]
       change: [−0.5358% −0.0087% +0.5131%] (p = 0.89 > 0.05)

Found 6 outliers among 100 measurements (6.00%)
1 (1.00%) high mild
5 (5.00%) high severe

1000 streams of 1 bytes/multistream: Change within noise threshold.
       time:   [48.875 ns 49.211 ns 49.548 ns]
       change: [+0.8048% +1.7408% +2.7813%] (p = 0.00 < 0.05)

Found 4 outliers among 500 measurements (0.80%)
4 (0.80%) high mild

1000 streams of 1000 bytes/multistream: 💔 Performance has regressed.
       time:   [50.493 ns 50.859 ns 51.223 ns]
       change: [+4.5849% +5.5758% +6.5501%] (p = 0.00 < 0.05)

Found 1 outliers among 500 measurements (0.20%)
1 (0.20%) high mild

coalesce_acked_from_zero 1+1 entries: Change within noise threshold.
       time:   [88.737 ns 89.110 ns 89.473 ns]
       change: [+0.2946% +0.6997% +1.1290%] (p = 0.00 < 0.05)

Found 12 outliers among 100 measurements (12.00%)
11 (11.00%) high mild
1 (1.00%) high severe

coalesce_acked_from_zero 3+1 entries: Change within noise threshold.
       time:   [106.50 ns 106.83 ns 107.18 ns]
       change: [+0.4915% +1.1049% +1.9077%] (p = 0.00 < 0.05)

Found 19 outliers among 100 measurements (19.00%)
2 (2.00%) low mild
6 (6.00%) high mild
11 (11.00%) high severe

coalesce_acked_from_zero 10+1 entries: Change within noise threshold.
       time:   [106.10 ns 106.52 ns 107.02 ns]
       change: [+0.7142% +1.1035% +1.5519%] (p = 0.00 < 0.05)

Found 11 outliers among 100 measurements (11.00%)
2 (2.00%) low severe
3 (3.00%) low mild
6 (6.00%) high severe

coalesce_acked_from_zero 1000+1 entries: No change in performance detected.
       time:   [89.579 ns 89.664 ns 89.767 ns]
       change: [−0.6460% +0.1891% +0.9768%] (p = 0.66 > 0.05)

Found 8 outliers among 100 measurements (8.00%)
3 (3.00%) high mild
5 (5.00%) high severe

RxStreamOrderer::inbound_frame(): Change within noise threshold.
       time:   [110.36 ms 110.42 ms 110.48 ms]
       change: [−0.1862% −0.1153% −0.0428%] (p = 0.00 < 0.05)

Found 5 outliers among 100 measurements (5.00%)
4 (4.00%) low mild
1 (1.00%) high mild

SentPackets::take_ranges: No change in performance detected.
       time:   [7.6287 µs 7.9411 µs 8.2122 µs]
       change: [−6.7733% +5.0992% +18.801%] (p = 0.47 > 0.05)

Found 1 outliers among 100 measurements (1.00%)
1 (1.00%) high severe

transfer/pacing-false/varying-seeds: Change within noise threshold.
       time:   [34.734 ms 34.796 ms 34.859 ms]
       change: [+0.4736% +0.7267% +0.9973%] (p = 0.00 < 0.05)
transfer/pacing-true/varying-seeds: Change within noise threshold.
       time:   [35.706 ms 35.816 ms 35.927 ms]
       change: [+1.1806% +1.5952% +2.0247%] (p = 0.00 < 0.05)

Found 1 outliers among 100 measurements (1.00%)
1 (1.00%) high mild

transfer/pacing-false/same-seed: Change within noise threshold.
       time:   [34.545 ms 34.594 ms 34.642 ms]
       change: [+1.1580% +1.3540% +1.5487%] (p = 0.00 < 0.05)
transfer/pacing-true/same-seed: Change within noise threshold.
       time:   [36.055 ms 36.111 ms 36.168 ms]
       change: [+0.7757% +0.9913% +1.2231%] (p = 0.00 < 0.05)

Client/server transfer results

Performance differences relative to 079b02e.

Transfer of 33554432 bytes over loopback, min. 100 runs. All unit-less numbers are in milliseconds.

Client vs. server (params) Mean ± σ Min Max MiB/s ± σ Δ main Δ main
google vs. google 516.6 ± 40.4 494.9 840.3 61.9 ± 0.8
google vs. neqo (cubic, paced) 383.0 ± 38.1 355.5 621.3 83.5 ± 0.8 1.5 0.4%
msquic vs. msquic 154.4 ± 21.3 135.9 232.6 207.2 ± 1.5
msquic vs. neqo (cubic, paced) 290.8 ± 45.9 263.5 504.4 110.0 ± 0.7 9.0 3.2%
neqo vs. google (cubic, paced) 814.5 ± 30.8 777.0 1018.0 39.3 ± 1.0 5.6 0.7%
neqo vs. msquic (cubic, paced) 214.7 ± 38.1 188.1 447.1 149.0 ± 0.8 8.0 3.9%
neqo vs. neqo (cubic) 250.2 ± 19.1 235.0 340.9 127.9 ± 1.7 -6.4 -2.5%
neqo vs. neqo (cubic, paced) 250.1 ± 18.1 235.6 345.7 128.0 ± 1.8 -6.0 -2.3%
neqo vs. neqo (reno) 245.8 ± 13.5 232.9 327.8 130.2 ± 2.4 0.3 0.1%
neqo vs. neqo (reno, paced) 254.8 ± 48.1 233.5 681.9 125.6 ± 0.7 0.6 0.2%
neqo vs. quiche (cubic, paced) 242.2 ± 12.1 223.7 288.8 132.1 ± 2.6 -8.7 -3.5%
neqo vs. s2n (cubic, paced) 259.6 ± 12.9 244.3 320.2 123.2 ± 2.5 0.2 0.1%
quiche vs. neqo (cubic, paced) 422.0 ± 27.4 382.2 530.9 75.8 ± 1.2 💚 -10.5 -2.4%
quiche vs. quiche 190.6 ± 15.9 175.0 265.4 167.9 ± 2.0
s2n vs. neqo (cubic, paced) 307.4 ± 19.1 290.7 399.5 104.1 ± 1.7 -2.9 -0.9%
s2n vs. s2n 256.2 ± 25.0 237.2 346.2 124.9 ± 1.3

Download data for profiler.firefox.com or download performance comparison data.

@github-actions

github-actions Bot commented Jun 9, 2025

Copy link
Copy Markdown
Contributor

🐰 Bencher Report

Branchchore-zizmor-fixes
Testbedt-linux64-ms-280
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
nanoseconds (ns)
(Result Δ%)
Upper Boundary
nanoseconds (ns)
(Limit %)
1-conn/1-100mb-req/mtu-1504 (aka. Upload)/client📈 view plot
🚷 view threshold
637,070,000.00 ns
(-1.64%)Baseline: 647,688,333.33 ns
674,363,156.06 ns
(94.47%)
1-conn/1-100mb-resp/mtu-1504 (aka. Download)/client📈 view plot
🚷 view threshold
626,460,000.00 ns
(-0.62%)Baseline: 630,396,666.67 ns
639,921,393.46 ns
(97.90%)
1-conn/1-1b-resp/mtu-1504 (aka. HPS)/client📈 view plot
🚷 view threshold
27,259,000.00 ns
(+0.21%)Baseline: 27,202,000.00 ns
27,402,658.20 ns
(99.48%)
1-conn/10_000-parallel-1b-resp/mtu-1504 (aka. RPS)/client📈 view plot
🚷 view threshold
310,030,000.00 ns
(+0.22%)Baseline: 309,355,000.00 ns
310,746,843.68 ns
(99.77%)
1000 streams of 1 bytes/multistream📈 view plot
🚷 view threshold
49.21 ns
(+0.82%)Baseline: 48.81 ns
51.47 ns
(95.62%)
1000 streams of 1000 bytes/multistream📈 view plot
🚷 view threshold
50.86 ns
(+3.96%)Baseline: 48.92 ns
52.23 ns
(97.37%)
RxStreamOrderer::inbound_frame()📈 view plot
🚷 view threshold
110,420,000.00 ns
(-0.25%)Baseline: 110,691,666.67 ns
111,599,868.83 ns
(98.94%)
SentPackets::take_ranges📈 view plot
🚷 view threshold
7,941.10 ns
(+0.21%)Baseline: 7,924.22 ns
7,980.96 ns
(99.50%)
coalesce_acked_from_zero 1+1 entries📈 view plot
🚷 view threshold
89.11 ns
(+0.35%)Baseline: 88.80 ns
89.84 ns
(99.19%)
coalesce_acked_from_zero 10+1 entries📈 view plot
🚷 view threshold
106.52 ns
(+0.41%)Baseline: 106.08 ns
107.74 ns
(98.87%)
coalesce_acked_from_zero 1000+1 entries📈 view plot
🚷 view threshold
89.66 ns
(+0.18%)Baseline: 89.51 ns
90.69 ns
(98.87%)
coalesce_acked_from_zero 3+1 entries📈 view plot
🚷 view threshold
106.83 ns
(+0.03%)Baseline: 106.80 ns
108.30 ns
(98.64%)
decode 1048576 bytes, mask 3f📈 view plot
🚷 view threshold
1,590,800.00 ns
(-0.05%)Baseline: 1,591,600.00 ns
1,596,923.97 ns
(99.62%)
decode 1048576 bytes, mask 7f📈 view plot
🚷 view threshold
5,059,400.00 ns
(+0.03%)Baseline: 5,058,116.67 ns
5,060,212.82 ns
(99.98%)
decode 1048576 bytes, mask ff📈 view plot
🚷 view threshold
3,031,500.00 ns
(+0.02%)Baseline: 3,030,816.67 ns
3,037,007.34 ns
(99.82%)
decode 4096 bytes, mask 3f📈 view plot
🚷 view threshold
8,307.10 ns
(+0.21%)Baseline: 8,290.10 ns
8,362.09 ns
(99.34%)
decode 4096 bytes, mask 7f📈 view plot
🚷 view threshold
19,983.00 ns
(+0.02%)Baseline: 19,979.17 ns
20,017.41 ns
(99.83%)
decode 4096 bytes, mask ff📈 view plot
🚷 view threshold
11,820.00 ns
(-0.14%)Baseline: 11,837.00 ns
11,886.15 ns
(99.44%)
transfer/pacing-false/same-seed📈 view plot
🚷 view threshold
34,594,000.00 ns
(+0.51%)Baseline: 34,420,166.67 ns
35,225,406.01 ns
(98.21%)
transfer/pacing-false/varying-seeds📈 view plot
🚷 view threshold
34,796,000.00 ns
(+0.47%)Baseline: 34,632,500.00 ns
35,356,459.95 ns
(98.41%)
transfer/pacing-true/same-seed📈 view plot
🚷 view threshold
36,111,000.00 ns
(-0.31%)Baseline: 36,223,333.33 ns
37,433,145.65 ns
(96.47%)
transfer/pacing-true/varying-seeds📈 view plot
🚷 view threshold
35,816,000.00 ns
(+0.88%)Baseline: 35,504,833.33 ns
36,200,751.56 ns
(98.94%)
🐰 View full continuous benchmarking report in Bencher

@github-actions

github-actions Bot commented Jun 9, 2025

Copy link
Copy Markdown
Contributor

🐰 Bencher Report

Branchchore-zizmor-fixes
Testbedt-linux64-ms-280
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
milliseconds (ms)
(Result Δ%)
Upper Boundary
milliseconds (ms)
(Limit %)
s2n vs. neqo (cubic, paced)📈 view plot
🚷 view threshold
307.37 ms
(-2.53%)Baseline: 315.34 ms
354.38 ms
(86.73%)
🐰 View full continuous benchmarking report in Bencher

@larseggert
larseggert added this pull request to the merge queue Jun 10, 2025
Merged via the queue into mozilla:main with commit ca5c4e7 Jun 10, 2025
@larseggert
larseggert deleted the chore-zizmor-fixes branch June 10, 2025 09:24
larseggert added a commit to larseggert/neqo that referenced this pull request Jun 10, 2025
github-merge-queue Bot pushed a commit that referenced this pull request Jun 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants