You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datafusion.apache.org by gi...@apache.org on 2026/04/07 14:59:53 UTC
(datafusion) branch main updated: chore(deps): bump taiki-e/install-action from 2.70.3 to 2.74.0 (#21434)
This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/datafusion.git
The following commit(s) were added to refs/heads/main by this push:
new 94c7bc2fb6 chore(deps): bump taiki-e/install-action from 2.70.3 to 2.74.0 (#21434)
94c7bc2fb6 is described below
commit 94c7bc2fb6af71edceddfb3d0b1e5b00515e3007
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Apr 7 07:57:34 2026 -0700
chore(deps): bump taiki-e/install-action from 2.70.3 to 2.74.0 (#21434)
Bumps
[taiki-e/install-action](https://github.com/taiki-e/install-action) from
2.70.3 to 2.74.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.74.0</h2>
<ul>
<li>
<p>Support <code>cargo-deb</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1669">#1669</a>)</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.49.0.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.4.4.</p>
</li>
</ul>
<h2>2.73.0</h2>
<ul>
<li>
<p>Introduce <a
href="https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns">dependency
cooldown</a> when installing with
<code>taiki-e/install-action@<tool_name></code>, <code>tool:
<tool_name>@latest</code>, or <code>tool:
<tool_name>@<omitted_version></code> to mitigate the risk of
supply chain attacks by default. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1666">#1666</a>)</p>
<p>This action without this cooldown already takes a few hours to a few
days for new releases to be reflected (as with other common package
managers that verify checksums or signatures), so this should not affect
most users.</p>
<p>See the <a
href="https://github.com/taiki-e/install-action#security">"Security"
section in readme</a> for more details.</p>
</li>
<li>
<p>Improve robustness for network failure.</p>
</li>
<li>
<p>Documentation improvements.</p>
</li>
</ul>
<h2>2.72.0</h2>
<ul>
<li>
<p>Support <code>cargo-xwin</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1659">#1659</a>,
thanks <a
href="https://github.com/daxpedda"><code>@daxpedda</code></a>)</p>
</li>
<li>
<p>Support trailing comma in <code>tool</code> input option.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.14.</p>
</li>
</ul>
<h2>2.71.3</h2>
<ul>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.246.2.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.4.3.</p>
</li>
</ul>
<h2>2.71.2</h2>
<ul>
<li>
<p>Implement workaround for <a
href="https://redirect.github.com/actions/partner-runner-images/issues/169">windows-11-arm
runner bug</a> which sometimes causes installation failure. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1657">#1657</a>)</p>
<p>This addresses an issue that was attempted to be worked around in
2.71.0 but was insufficient.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.4.1.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.3.</p>
</li>
</ul>
<h2>2.71.1</h2>
<ul>
<li>
<p>Fix a regression that caused an execution policy violation on
self-hosted Windows runner due to use of non-default
<code>powershell</code> shell, introduced in 2.71.0.</p>
</li>
<li>
<p>Update <code>dprint@latest</code> to 0.53.2.</p>
</li>
</ul>
<h2>2.71.0</h2>
<ul>
<li>
<p>Support <code>wasm-tools</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1642">#1642</a>,
thanks <a
href="https://github.com/crepererum"><code>@crepererum</code></a>)</p>
</li>
<li>
<p>Support <code>covgate</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1613">#1613</a>,
thanks <a
href="https://github.com/jesse-black"><code>@jesse-black</code></a>)</p>
</li>
<li>
<p>Implement potential workaround for <a
href="https://redirect.github.com/actions/partner-runner-images/issues/169">windows-11-arm
runner bug</a> which sometimes causes issue that the action successfully
completes but the tool is not installed. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1647">#1647</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<ul>
<li>Update <code>tombi@latest</code> to 0.9.15.</li>
</ul>
<h2>[2.74.0] - 2026-04-06</h2>
<ul>
<li>
<p>Support <code>cargo-deb</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1669">#1669</a>)</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.49.0.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.4.4.</p>
</li>
</ul>
<h2>[2.73.0] - 2026-04-05</h2>
<ul>
<li>
<p>Introduce <a
href="https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns">dependency
cooldown</a> when installing with
<code>taiki-e/install-action@<tool_name></code>, <code>tool:
<tool_name>@latest</code>, or <code>tool:
<tool_name>@<omitted_version></code> to mitigate the risk of
supply chain attacks by default. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1666">#1666</a>)</p>
<p>This action without this cooldown already takes a few hours to a few
days for new releases to be reflected (as with other common package
managers that verify checksums or signatures), so this should not affect
most users.</p>
<p>See the <a
href="https://github.com/taiki-e/install-action#security">"Security"
section in readme</a> for more details.</p>
</li>
<li>
<p>Improve robustness for network failure.</p>
</li>
<li>
<p>Documentation improvements.</p>
</li>
</ul>
<h2>[2.72.0] - 2026-04-04</h2>
<ul>
<li>
<p>Support <code>cargo-xwin</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1659">#1659</a>,
thanks <a
href="https://github.com/daxpedda"><code>@daxpedda</code></a>)</p>
</li>
<li>
<p>Support trailing comma in <code>tool</code> input option.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.14.</p>
</li>
</ul>
<h2>[2.71.3] - 2026-04-04</h2>
<ul>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.246.2.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.4.3.</p>
</li>
</ul>
<h2>[2.71.2] - 2026-04-02</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/94cb46f8d6e437890146ffbd78a778b78e623fb2"><code>94cb46f</code></a>
Release 2.74.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/7fef44e1953572bcd24693fc866ad446fb1b4057"><code>7fef44e</code></a>
Update changelog</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/3bf2282bfd15630bbf9543653d4132bc64c9ca89"><code>3bf2282</code></a>
Update mise manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/223b1d599eeacab3f4361624d257a1d50a152a7c"><code>223b1d5</code></a>
Update tombi manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/fdcd834b4f2d5c0d663395c561633bbe19ecb08d"><code>fdcd834</code></a>
Update <code>just@latest</code> to 1.49.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/b45e8d6c436517e3d00a29c621a3534a176e4706"><code>b45e8d6</code></a>
Update <code>mise@latest</code> to 2026.4.4</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/4eac87a84609e7a285bcfd82df34e948017a9fcb"><code>4eac87a</code></a>
ci: Update config</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/5b413367489ec0bfe059fd6482a23cc544ed613e"><code>5b41336</code></a>
Add issue template</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/55a981690b2670493d925900a2569e5065371d31"><code>55a9816</code></a>
Support cargo-deb</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/7a562dfa955aa2e4d5b0fd6ebd57ff9715c07b0b"><code>7a562df</code></a>
Release 2.73.0</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/6ef672efc2b5aabc787a9e94baf4989aa02a97df...94cb46f8d6e437890146ffbd78a778b78e623fb2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
.github/workflows/audit.yml | 2 +-
.github/workflows/rust.yml | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index c880d1bae0..b66cb460ff 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -42,7 +42,7 @@ jobs:
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Install cargo-audit
- uses: taiki-e/install-action@6ef672efc2b5aabc787a9e94baf4989aa02a97df # v2.70.3
+ uses: taiki-e/install-action@94cb46f8d6e437890146ffbd78a778b78e623fb2 # v2.74.0
with:
tool: cargo-audit
- name: Run audit check
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 60ee8d9736..f8772e1ff2 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -430,7 +430,7 @@ jobs:
sudo apt-get update -qq
sudo apt-get install -y -qq clang
- name: Setup wasm-pack
- uses: taiki-e/install-action@6ef672efc2b5aabc787a9e94baf4989aa02a97df # v2.70.3
+ uses: taiki-e/install-action@94cb46f8d6e437890146ffbd78a778b78e623fb2 # v2.74.0
with:
tool: wasm-pack
- name: Run tests with headless mode
@@ -770,7 +770,7 @@ jobs:
- name: Setup Rust toolchain
uses: ./.github/actions/setup-builder
- name: Install cargo-msrv
- uses: taiki-e/install-action@6ef672efc2b5aabc787a9e94baf4989aa02a97df # v2.70.3
+ uses: taiki-e/install-action@94cb46f8d6e437890146ffbd78a778b78e623fb2 # v2.74.0
with:
tool: cargo-msrv
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org