Stop uploading raw calibration logs as public Actions artifacts

.github/workflows/pull_request.yaml

@@ -72,6 +72,10 @@ jobs:
           fetch-depth: 0 # Fetch all history for all tags and branches
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
+        # Restore uv's package cache but never save one from a job that
+        # holds the data: its location can be moved (UV_CACHE_DIR).
+        with:
+          save-cache: false
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -86,17 +90,11 @@ jobs:
         run: uv run --frozen make data
         env:
           TESTING: "1"
-      - name: Save calibration log (constituencies)
-        uses: actions/upload-artifact@v7
-        with:
-          name: constituency_calibration_log.csv
-          path: constituency_calibration_log.csv
-
-      - name: Save calibration log (local authorities)
-        uses: actions/upload-artifact@v7
-        with:
-          name: la_calibration_log.csv
-          path: la_calibration_log.csv
+      # The raw calibration logs stay on the runner. They hold every target's
+      # weighted estimate at every logged epoch with no small-cell control, so a
+      # target supported by a few households, divided by a published count,
+      # could give one household's value back, and this repository's
+      # artifacts are public.
 
       - name: Run tests
         run: uv run --frozen make test

.github/workflows/push.yaml

@@ -123,6 +123,10 @@ jobs:
           fetch-depth: 0 # Fetch all history for all tags and branches
       - name: Install uv
         uses: astral-sh/setup-uv@v8.1.0
+        # Restore uv's package cache but never save one from a job that
+        # holds the data: its location can be moved (UV_CACHE_DIR).
+        with:
+          save-cache: false
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -139,17 +143,11 @@ jobs:
           HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}
       - name: Build datasets
         run: uv run --frozen make data
-      - name: Save calibration log (constituencies)
-        uses: actions/upload-artifact@v7
-        with:
-          name: constituency_calibration_log.csv
-          path: constituency_calibration_log.csv
-
-      - name: Save calibration log (local authorities)
-        uses: actions/upload-artifact@v7
-        with:
-          name: la_calibration_log.csv
-          path: la_calibration_log.csv
+      # The raw calibration logs stay on the runner. They hold every target's
+      # weighted estimate at every logged epoch with no small-cell control, so a
+      # target supported by a few households, divided by a published count,
+      # could give one household's value back, and this repository's
+      # artifacts are public.
       - name: Run tests
         run: uv run --frozen make test
       - name: Upload data

changelog.d/stop-raw-calibration-log-artifacts.fixed.md

@@ -0,0 +1 @@
+Pull request and push builds no longer upload the raw constituency and local authority calibration logs as Actions artifacts, which are public on this repository; the logs stay on the runner.