You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sedona.apache.org by ji...@apache.org on 2026/03/23 09:34:13 UTC

(sedona) branch fix/pin-setup-uv-sha created (now ff34d9c759)

This is an automated email from the ASF dual-hosted git repository.

jiayu pushed a change to branch fix/pin-setup-uv-sha
in repository https://gitbox.apache.org/repos/asf/sedona.git


      at ff34d9c759 [CI] Pin astral-sh/setup-uv to ASF-allowed SHA

This branch includes the following new commits:

     new ff34d9c759 [CI] Pin astral-sh/setup-uv to ASF-allowed SHA

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



(sedona) 01/01: [CI] Pin astral-sh/setup-uv to ASF-allowed SHA

Posted by ji...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

jiayu pushed a commit to branch fix/pin-setup-uv-sha
in repository https://gitbox.apache.org/repos/asf/sedona.git

commit ff34d9c759ce48491415590dfdd59be8bffd27c8
Author: Jia Yu <ji...@apache.org>
AuthorDate: Mon Mar 23 02:32:23 2026 -0700

    [CI] Pin astral-sh/setup-uv to ASF-allowed SHA
    
    Pin astral-sh/setup-uv to commit 37802adc (v7.6.0) across all
    workflows to comply with ASF infrastructure action allow list.
    
    Also add .claude/ and python/.venv-test/ to .prettierignore to
    fix pre-commit hook scanning vendored/generated files.
---
 .github/workflows/docs.yml             | 2 +-
 .github/workflows/pyflink.yml          | 2 +-
 .github/workflows/python-extension.yml | 2 +-
 .github/workflows/python-wheel.yml     | 2 +-
 .github/workflows/python.yml           | 2 +-
 .prettierignore                        | 2 ++
 6 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 60495d39b8..2c3032e293 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -71,7 +71,7 @@ jobs:
         with:
           python-version: '3.11'
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - name: Sync doc environment
         run: uv sync --group docs
       - run: sudo apt update
diff --git a/.github/workflows/pyflink.yml b/.github/workflows/pyflink.yml
index 9b86d74ab7..13fb2affc8 100644
--- a/.github/workflows/pyflink.yml
+++ b/.github/workflows/pyflink.yml
@@ -64,7 +64,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - run: mvn package -pl "org.apache.sedona:sedona-flink-shaded_2.12" -am -DskipTests
       - name: Install python package + flink extra
         run: |
diff --git a/.github/workflows/python-extension.yml b/.github/workflows/python-extension.yml
index 3399c8afd3..649d962897 100644
--- a/.github/workflows/python-extension.yml
+++ b/.github/workflows/python-extension.yml
@@ -65,7 +65,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
         with:
           version: '0.9.22'
       - name: Install dependencies (dev)
diff --git a/.github/workflows/python-wheel.yml b/.github/workflows/python-wheel.yml
index 3684d7873d..9bfc5942e3 100644
--- a/.github/workflows/python-wheel.yml
+++ b/.github/workflows/python-wheel.yml
@@ -94,7 +94,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 
       - name: Build sdist
         run: cd python && uv build --sdist
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 10989cd364..7369391547 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -90,7 +90,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - name: Cache Maven packages
         uses: actions/cache@v5
         with:
diff --git a/.prettierignore b/.prettierignore
index fe267f54aa..92ed75d4ea 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -23,3 +23,5 @@ site/
 target/
 binder/Pipfile.lock
 docs-overrides/main.html
+.claude/
+python/.venv-test/