You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by gn...@apache.org on 2026/05/18 13:35:36 UTC
(maven-mvnd) 01/01: Pin graalvm/setup-graalvm to ASF-allowed hash and bump Java to 25
This is an automated email from the ASF dual-hosted git repository.
gnodet pushed a commit to branch fix/graalvm-ci-hash-pin
in repository https://gitbox.apache.org/repos/asf/maven-mvnd.git
commit 09f8cc48f227e72538fdb5caffde107e8c3ea061
Author: Guillaume Nodet <gn...@gmail.com>
AuthorDate: Mon May 18 15:33:26 2026 +0200
Pin graalvm/setup-graalvm to ASF-allowed hash and bump Java to 25
ASF policy requires GitHub Actions to use commit hashes instead of tags
for third-party actions. The graalvm/setup-graalvm@v1 tag reference was
blocked, causing CI startup failures.
Additionally, native-maven-plugin 1.1.0 (upgraded via dependabot while
CI was down) downloads reachability metadata with a schema that GraalVM
for JDK 22 does not support. Bumping to JDK 25 resolves this.
Also fix release.yaml source job: remove undefined GRAALVM_VERSION
reference and add missing distribution parameter.
Co-Authored-By: Claude Opus 4.6 (1M context) <no...@anthropic.com>
---
.github/workflows/early-access.yaml | 4 ++--
.github/workflows/release.yaml | 8 ++++----
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/early-access.yaml b/.github/workflows/early-access.yaml
index 10b931fc..e2524f45 100644
--- a/.github/workflows/early-access.yaml
+++ b/.github/workflows/early-access.yaml
@@ -26,7 +26,7 @@ on:
pull_request:
env:
- JAVA_VERSION: '22'
+ JAVA_VERSION: '25'
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
@@ -118,7 +118,7 @@ jobs:
echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_ENV
- name: 'Set up GraalVM'
- uses: graalvm/setup-graalvm@v1
+ uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # v1.5.3
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: 'graalvm'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a39576e4..a4c59fc5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -26,7 +26,7 @@ on:
- '*'
env:
- JAVA_VERSION: '22'
+ JAVA_VERSION: '25'
jobs:
build:
@@ -73,7 +73,7 @@ jobs:
echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout --raw-streams)" >> $GITHUB_ENV
- name: 'Set up GraalVM'
- uses: graalvm/setup-graalvm@v1
+ uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # v1.5.3
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: 'graalvm'
@@ -153,10 +153,10 @@ jobs:
echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_ENV
- name: 'Set up GraalVM'
- uses: graalvm/setup-graalvm@v1
+ uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # v1.5.3
with:
- version: ${{ env.GRAALVM_VERSION }}
java-version: ${{ env.JAVA_VERSION }}
+ distribution: 'graalvm'
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: 'Build source distribution'