You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@texera.apache.org by gi...@apache.org on 2026/10/22 01:18:33 UTC
(texera) branch gh-readonly-queue/main/pr-9064-3ba45ee5a5f641388d1a9eda90afa26a62d70d30 created (now 43579d640d)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/main/pr-9064-3ba45ee5a5f641388d1a9eda90afa26a62d70d30
in repository https://gitbox.apache.org/repos/asf/texera.git
at 43579d640d fix(deps, ci): bump sbt/setup-sbt to v1.5.12 to restore CI (#9064)
This branch includes the following new commits:
new 43579d640d fix(deps, ci): bump sbt/setup-sbt to v1.5.12 to restore CI (#9064)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(texera) 01/01: fix(deps, ci): bump sbt/setup-sbt to v1.5.12 to restore CI (#9064)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-9064-3ba45ee5a5f641388d1a9eda90afa26a62d70d30
in repository https://gitbox.apache.org/repos/asf/texera.git
commit 43579d640d0e89f06646a3501f4219ab1b63c141
Author: Xinyuan Lin <xi...@uci.edu>
AuthorDate: Thu Oct 22 01:18:09 2026 +0000
fix(deps, ci): bump sbt/setup-sbt to v1.5.12 to restore CI (#9064)
### What changes were proposed in this PR?
CI has been red since 2026-10-19 on `main` and on every PR that runs a
Scala stack (`amber`, `amber-integration`, `Bench`). The jobs die in
under 40s at *Set up job*, before checkout, so they produce no test
output.
As in #7710, the cause is the ASF actions allowlist, not anything in
this repository. `sbt/setup-sbt` reaches nested `carabiner-dev` actions
that are no longer permitted:
```
.github/workflows/*.yml
└─ sbt/setup-sbt@8feba82 v1.5.7 allowed
└─ carabiner-dev/actions/ampel/verify@36a39ef v1.2.6 allowed
└─ carabiner-dev/actions/install/ampel@2fec8bd8 BLOCKED
└─ install/download-and-verify@16009dca BLOCKED
└─ install/ampel-bootstrap@619a474 BLOCKED
```
> The action
carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe
is not allowed in apache/texera because all actions must be from a
repository owned by your enterprise, created by GitHub, or match one of
the patterns: …
Nothing in the tree changed. `apache/infrastructure-actions` commit
`7a8ef18970` ("Remove Expired Refs", 2026-10-19T02:35Z) dropped the
transitive `ampel-bootstrap` refs that carabiner's older internal refs
use. Last clean run: `main` @ `a46ddc6e` at 2026-10-19T00:53Z. First
failures: #9028 / #9029 at 07:07Z, and `main` @ `22b82a29` at 23:39Z.
This bumps all 9 call sites from v1.5.7 to v1.5.12, which resolves down
a fully allowed path:
| | v1.5.7 (current) | v1.5.12 (this PR) |
| --- | --- | --- |
| `ampel/verify` | `36a39ef` (v1.2.6) | `32587e8` |
| `install/ampel` | **`2fec8bd8` — blocked** | `d6d91c5` |
| `install/download-and-verify` | **`16009dca` — blocked** | `2fec8bd8`
|
| `install/ampel-bootstrap` | **`619a474` — blocked** | `16009dca` |
Every link on the v1.5.12 side is in the current
`approved_patterns.yml`, and `actions.yml` gives v1.5.12 no expiry date
(v1.5.7's own entry expires 2026-11-17). The action's inputs
(`sbt-runner-version`, `disk-cache`) are the same in both versions, so
no call site needs editing beyond the pin.
Call sites: `benchmarks.yml` (1), `build-and-push-images.yml` (3),
`build.yml` (4), `dependency-graph.yml` (1).
`release/v1.2` and `release/v1.3` pin the same v1.5.7, so this carries
their backport labels. `release/v1.1` pins `setup-sbt@508b753`, which is
not on the allowlist either; it needs its own bump if that branch still
runs CI.
### Any related issues, documentation, discussions?
No issue filed — the regression originates outside the repository and
this PR is the unblock. The previous bump of this pin was #7710.
### How was this PR tested?
By this PR's CI, which is the only place the failure reproduces — it
depends on the `apache/texera` actions policy and cannot be triggered
locally or on a fork.
The change touches `.github/**`, so the labeler applies `ci`, which runs
every stack in `LABEL_STACKS` plus `Bench`. Every job that uses
`sbt/setup-sbt` is exercised here.
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Claude Opus 5.5)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---
.github/workflows/benchmarks.yml | 2 +-
.github/workflows/build-and-push-images.yml | 6 +++---
.github/workflows/build.yml | 8 ++++----
.github/workflows/dependency-graph.yml | 2 +-
4 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index a427a18646..a34f34dc98 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -241,7 +241,7 @@ jobs:
- name: Generate Python proto bindings
run: bash bin/python-proto-gen.sh
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]'
diff --git a/.github/workflows/build-and-push-images.yml b/.github/workflows/build-and-push-images.yml
index 7fd76bed7c..1f69cb3607 100644
--- a/.github/workflows/build-and-push-images.yml
+++ b/.github/workflows/build-and-push-images.yml
@@ -126,7 +126,7 @@ jobs:
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
@@ -337,7 +337,7 @@ jobs:
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
@@ -417,7 +417,7 @@ jobs:
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c3cfd13be3..9b0a9e02c3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -246,7 +246,7 @@ jobs:
env:
PGPASSWORD: postgres
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]'
@@ -500,7 +500,7 @@ jobs:
env:
PGPASSWORD: postgres
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]'
@@ -820,7 +820,7 @@ jobs:
distribution: "temurin"
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]'
@@ -975,7 +975,7 @@ jobs:
distribution: "temurin"
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]'
diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml
index 4034b15715..4a2ddf05d1 100644
--- a/.github/workflows/dependency-graph.yml
+++ b/.github/workflows/dependency-graph.yml
@@ -48,7 +48,7 @@ jobs:
java-version: 17
- name: Setup sbt launcher
- uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7
+ uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12
- uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1