fix(security): harden artifact serialization and loading

.github/workflows/lint_title.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '16'
+          node-version: '22'
 
       - name: Install commitlint
         run: npm install --save-dev @commitlint/{config-conventional,cli}

.github/workflows/test_qlib_from_pip.yml

@@ -13,6 +13,9 @@ on:
 jobs:
   build:
     timeout-minutes: 120
+    env:
+      # Released Qlib versions use MLflow's legacy file-store backend.
+      MLFLOW_ALLOW_FILE_STORE: "true"
 
     runs-on: ${{ matrix.os }}
     strategy:
@@ -22,6 +25,11 @@ jobs:
         # Also, python 3.7 is no longer supported from macos-14, and will be phased out from macos-13 in the near future.
         # All things considered, we have removed python 3.7.
         python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
+        exclude:
+          # The released package eagerly imports OSQP, whose Windows/Python 3.8
+          # native extension crashes during module initialization.
+          - os: windows-latest
+            python-version: "3.8"
 
     steps:
     - name: Test qlib from pip
@@ -56,5 +64,8 @@ jobs:
         cd qlib
 
     - name: Test workflow by config
-      run: |
-        qrun examples/benchmarks/LightGBM/workflow_config_lightgbm_Alpha158.yaml
+      uses: nick-fields/retry@v2
+      with:
+        timeout_minutes: 30
+        max_attempts: 3
+        command: qrun examples/benchmarks/LightGBM/workflow_config_lightgbm_Alpha158.yaml

.github/workflows/test_qlib_from_source.yml

@@ -104,9 +104,13 @@ jobs:
         make nbconvert
 
     - name: Test workflow by config (install from source)
-      run: |
-        python -m pip install numba
-        python qlib/cli/run.py examples/benchmarks/LightGBM/workflow_config_lightgbm_Alpha158.yaml
+      uses: nick-fields/retry@v2
+      with:
+        timeout_minutes: 30
+        max_attempts: 3
+        command: |
+          python -m pip install numba
+          python qlib/cli/run.py examples/benchmarks/LightGBM/workflow_config_lightgbm_Alpha158.yaml
 
     - name: Unit tests with Pytest (MacOS)
       if: ${{ matrix.os == 'macos-14' || matrix.os == 'macos-15' }}