You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@beam.apache.org by da...@apache.org on 2026/10/01 19:50:16 UTC
(beam) branch master updated: Migrate PostCommit workflows from pull_request_target to pull_request (#40373)
This is an automated email from the ASF dual-hosted git repository.
damccorm pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new 5659bb7f826 Migrate PostCommit workflows from pull_request_target to pull_request (#40373)
5659bb7f826 is described below
commit 5659bb7f826d7fe32c24cb7f3e9ef63c8edde58c
Author: Danny McCormick <da...@google.com>
AuthorDate: Thu Oct 1 19:50:06 2026 +0000
Migrate PostCommit workflows from pull_request_target to pull_request (#40373)
---
.github/ACTIONS.md | 14 ++------------
.github/workflows/IO_Iceberg_Integration_Tests.yml | 6 +++---
.../workflows/IO_Iceberg_Integration_Tests_Dataflow.yml | 6 +++---
.../IO_Iceberg_Managed_Integration_Tests_Dataflow.yml | 6 +++---
.github/workflows/IO_Iceberg_Performance_Tests.yml | 6 +++---
.github/workflows/README.md | 12 ++++++------
.github/workflows/beam_Infrastructure_UsersPermissions.yml | 3 ++-
.github/workflows/beam_Playground_CI_Nightly.yml | 4 ++--
.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml | 6 +++---
.github/workflows/beam_PostCommit_Go_VR_Flink.yml | 6 +++---
.github/workflows/beam_PostCommit_Go_VR_Spark.yml | 6 +++---
.github/workflows/beam_PostCommit_Java.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Avro_Versions.yml | 7 ++++---
.../beam_PostCommit_Java_BigQueryEarlyRollout.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_DataflowV1.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_DataflowV2.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_Delta_IO_Dataflow.yml | 6 +++---
.../workflows/beam_PostCommit_Java_Examples_Dataflow.yml | 8 +++++---
.../beam_PostCommit_Java_Examples_Dataflow_ARM.yml | 7 ++++---
.../beam_PostCommit_Java_Examples_Dataflow_Java.yml | 7 ++++---
.../beam_PostCommit_Java_Examples_Dataflow_V2.yml | 7 ++++---
.../beam_PostCommit_Java_Examples_Dataflow_V2_Java.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Examples_Direct.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Examples_Flink.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Examples_Spark.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Hadoop_Versions.yml | 7 ++++---
.../beam_PostCommit_Java_IO_Performance_Tests.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_InfluxDbIO_IT.yml | 6 +++---
.github/workflows/beam_PostCommit_Java_Jpms_Dataflow.yml | 7 ++++---
.../beam_PostCommit_Java_Jpms_Dataflow_Versions.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_Jpms_Direct.yml | 7 ++++---
.../beam_PostCommit_Java_Jpms_Direct_Versions.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_Jpms_Flink_Java11.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_Jpms_Spark_Java11.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml | 6 +++---
.../workflows/beam_PostCommit_Java_PVR_Flink_Streaming.yml | 7 ++++---
.../beam_PostCommit_Java_PVR_Spark3_Streaming.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_PVR_Spark4_Batch.yml | 7 ++++---
.../beam_PostCommit_Java_PVR_Spark4_Streaming.yml | 7 ++++---
...beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.yml | 7 ++++---
.github/workflows/beam_PostCommit_Java_PVR_Spark_Batch.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_SingleStoreIO_IT.yml | 6 +++---
.../beam_PostCommit_Java_ValidatesRunner_Dataflow.yml | 7 ++++---
...stCommit_Java_ValidatesRunner_Dataflow_JavaVersions.yml | 7 ++++---
..._PostCommit_Java_ValidatesRunner_Dataflow_Streaming.yml | 7 ++++---
...mmit_Java_ValidatesRunner_Dataflow_Streaming_Engine.yml | 7 ++++---
...va_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.yml | 7 ++++---
...stCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Direct.yml | 7 ++++---
...PostCommit_Java_ValidatesRunner_Direct_JavaVersions.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Flink.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Spark.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Spark4.yml | 7 ++++---
...ommit_Java_ValidatesRunner_SparkStructuredStreaming.yml | 7 ++++---
.../beam_PostCommit_Java_ValidatesRunner_Twister2.yml | 7 ++++---
.../workflows/beam_PostCommit_Java_ValidatesRunner_ULR.yml | 7 ++++---
.github/workflows/beam_PostCommit_PortableJar_Flink.yml | 7 ++++---
.github/workflows/beam_PostCommit_PortableJar_Spark.yml | 7 ++++---
.github/workflows/beam_PostCommit_Python.yml | 7 ++++---
.github/workflows/beam_PostCommit_Python_Arm.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Examples_Dataflow.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Examples_Direct.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Examples_Flink.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Examples_Spark.yml | 7 ++++---
.github/workflows/beam_PostCommit_Python_MongoDBIO_IT.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Nexmark_Direct.yml | 6 +++---
.../workflows/beam_PostCommit_Python_Portable_Flink.yml | 7 ++++---
.../beam_PostCommit_Python_ValidatesContainer_Dataflow.yml | 7 ++++---
...stCommit_Python_ValidatesContainer_Dataflow_With_RC.yml | 7 ++++---
.../beam_PostCommit_Python_ValidatesRunner_Dataflow.yml | 7 ++++---
.../beam_PostCommit_Python_ValidatesRunner_Flink.yml | 7 ++++---
.../beam_PostCommit_Python_ValidatesRunner_Spark.yml | 7 ++++---
.github/workflows/beam_PostCommit_Python_Versions.yml | 7 ++++---
.../beam_PostCommit_Python_Xlang_Gcp_Dataflow.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Xlang_Gcp_Direct.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Xlang_IO_Dataflow.yml | 7 ++++---
.../workflows/beam_PostCommit_Python_Xlang_IO_Direct.yml | 7 ++++---
.../beam_PostCommit_Python_Xlang_Messaging_Direct.yml | 7 ++++---
.github/workflows/beam_PostCommit_SQL.yml | 7 ++++---
.../workflows/beam_PostCommit_TransformService_Direct.yml | 7 ++++---
.github/workflows/beam_PostCommit_Website_Test.yml | 6 +++---
.github/workflows/beam_PostCommit_XVR_Direct.yml | 7 ++++---
.github/workflows/beam_PostCommit_XVR_Flink.yml | 7 ++++---
.../workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml | 7 ++++---
.../beam_PostCommit_XVR_JavaUsingPython_Dataflow.yml | 7 ++++---
.../beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.yml | 7 ++++---
.../beam_PostCommit_XVR_PythonUsingJava_Dataflow.yml | 7 ++++---
.github/workflows/beam_PostCommit_XVR_Spark3.yml | 7 ++++---
.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml | 7 ++++---
.github/workflows/beam_PreCommit_Python_Examples.yml | 7 ++++---
.github/workflows/beam_PreCommit_Python_ML.yml | 7 ++++---
.github/workflows/beam_PreCommit_Python_Transforms.yml | 7 ++++---
.github/workflows/beam_PreCommit_Website_Stage_GCS.yml | 6 +++---
contributor-docs/release-guide.md | 2 +-
95 files changed, 360 insertions(+), 292 deletions(-)
diff --git a/.github/ACTIONS.md b/.github/ACTIONS.md
index d02cfb12984..c61581ce16b 100644
--- a/.github/ACTIONS.md
+++ b/.github/ACTIONS.md
@@ -31,15 +31,8 @@ Currently, we have both GitHub-hosted and self-hosted runners for running the Gi
* Ubuntu 24.04 self-hosted runner: `[self-hosted, ubuntu-24.04, main]` (also `small`, `highmem`, or `highmem22` pool labels as needed)
* Windows Server 2019 self-hosted runner: `[self-hosted, windows-server-2019]`
* MacOS GitHub-hosted runner: `macos-latest`
-* Every workflow that tests the source code, needs to have the workflow trigger `pull_request_target` instead of `pull_request`.
+* Every workflow that tests the source code needs to have the workflow trigger `pull_request`.
* The workflow must have set read permissions for all the available scopes and jobs: `permissions: read-all`. It must be set at the top of the `jobs` directive.
-* For those workflows that have the `pull_request_target` trigger, in the checkout step must be added a ref to `${{ github.event.pull_request.head.sha }}`
-``` yaml
- - name: Checkout code
- uses: actions/checkout@v#
- with:
- ref: ${{ github.event.pull_request.head.sha }}
-```
* If your workflow runs successfully in a GitHub-hosted runner but not in the self-hosted runner, it might need a new installation step.
```yaml
- name: Setup Node
@@ -55,7 +48,7 @@ Currently, we have both GitHub-hosted and self-hosted runners for running the Gi
```yaml
name: GitHub Actions Example
on:
- pull_request_target:
+ pull_request:
branches: ['master']
permissions: read-all
jobs:
@@ -64,8 +57,6 @@ jobs:
steps:
- name: Check out repository code
uses: actions/checkout@v2
- with:
- ref: ${{ github.event.pull_request.head.sha }}
- run: echo "This job is now running on a ubuntu server hosted by Apache Beam!"
- name: Setup Node
uses: actions/setup-node@v3
@@ -85,7 +76,6 @@ jobs:
* A **detailed review** for changes in the workflows is needed due to important **security concerns**.
* **DO NOT** Approve and Run changes in the workflows in the PR Conversation tab, under "Workflow(s) awaiting approval".
* For approving the updates in the workflows, you should go to the Repository Actions and filter All Workflows by `action_required`. The search will display the workflows that need to be reviewed before running. **Please make sure reviewing the file that is referenced by the workflow.**
-* Seed job will be emulated using the `Approve and Run` built-in feature of GitHub Actions, since the workflows will use the `pull_request_target` directive; no modifications would be allowed either for new or existent jobs unless a committer explicitly approves the job from GitHub Actions UI.
#### Issue Management
Phrases self-assign, close, or manage labels on an issue:
diff --git a/.github/workflows/IO_Iceberg_Integration_Tests.yml b/.github/workflows/IO_Iceberg_Integration_Tests.yml
index 8780bfee5b3..a334f570212 100644
--- a/.github/workflows/IO_Iceberg_Integration_Tests.yml
+++ b/.github/workflows/IO_Iceberg_Integration_Tests.yml
@@ -18,11 +18,11 @@ name: IcebergIO Integration Tests
on:
schedule:
- cron: '15 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: [ 'release/trigger_all_tests.json', '.github/trigger_files/IO_Iceberg_Integration_Tests.json' ]
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -51,7 +51,7 @@ env:
jobs:
IO_Iceberg_Integration_Tests:
if: |
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run IcebergIO Integration Test'
diff --git a/.github/workflows/IO_Iceberg_Integration_Tests_Dataflow.yml b/.github/workflows/IO_Iceberg_Integration_Tests_Dataflow.yml
index 3ec2845d770..e3b40a0703c 100644
--- a/.github/workflows/IO_Iceberg_Integration_Tests_Dataflow.yml
+++ b/.github/workflows/IO_Iceberg_Integration_Tests_Dataflow.yml
@@ -18,11 +18,11 @@ name: IcebergIO Integration Tests on Dataflow
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: [ 'release/trigger_all_tests.json', '.github/trigger_files/IO_Iceberg_Integration_Tests_Dataflow.json' ]
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -51,7 +51,7 @@ env:
jobs:
IO_Iceberg_Integration_Tests_Dataflow:
if: |
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run IcebergIO Integration Tests on Dataflow'
diff --git a/.github/workflows/IO_Iceberg_Managed_Integration_Tests_Dataflow.yml b/.github/workflows/IO_Iceberg_Managed_Integration_Tests_Dataflow.yml
index 4cf38c3ff3f..a8c8b57b2f9 100644
--- a/.github/workflows/IO_Iceberg_Managed_Integration_Tests_Dataflow.yml
+++ b/.github/workflows/IO_Iceberg_Managed_Integration_Tests_Dataflow.yml
@@ -18,11 +18,11 @@ name: IcebergIO Managed Integration Tests on Dataflow
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: [ 'release/trigger_all_tests.json', '.github/trigger_files/IO_Iceberg_Managed_Integration_Tests_Dataflow.json' ]
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -51,7 +51,7 @@ env:
jobs:
IO_Iceberg_Managed_Integration_Tests_Dataflow:
if: |
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run IcebergIO Managed Integration Tests on Dataflow'
diff --git a/.github/workflows/IO_Iceberg_Performance_Tests.yml b/.github/workflows/IO_Iceberg_Performance_Tests.yml
index 3cb9c24c26b..de0b9987577 100644
--- a/.github/workflows/IO_Iceberg_Performance_Tests.yml
+++ b/.github/workflows/IO_Iceberg_Performance_Tests.yml
@@ -18,11 +18,11 @@ name: IcebergIO Performance Tests
on:
schedule:
- cron: '10 10/12 * * *'
- pull_request_target:
+ pull_request:
paths: [ '.github/trigger_files/IO_Iceberg_Performance_Tests.json' ]
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -51,7 +51,7 @@ env:
jobs:
IO_Iceberg_Performance_Tests:
if: |
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run IcebergIO Performance Test'
diff --git a/.github/workflows/README.md b/.github/workflows/README.md
index ff94d5d78b4..88c1de2574a 100644
--- a/.github/workflows/README.md
+++ b/.github/workflows/README.md
@@ -44,7 +44,7 @@ If you would like to manually trigger a job, you have 2 options:
1) Trigger Phrases: Some jobs have trigger phrases associated with them (e.g. `Run XYZ PreCommit`). These will appear in statuses of previous PR runs of that check. You can trigger the job on any PR by commenting that trigger phrase in the PR.
- **Note:** this approach is found not scalable ([#28909](https://github.com/apache/beam/issues/28909)) and currently only enabled for PreCommit workflows. For PostCommit jobs, it is currently replaced by a temporary approach: test suites are configured to trigger whenever a particular trigger file is modified. Test [workflows](https://github.com/apache/beam/tree/master/.github/workflows) have [pull_request_target paths](https://github.com/apache/beam/blob/e33dec69c7cfd01c0b827538e1dad8 [...]
+ **Note:** this approach is found not scalable ([#28909](https://github.com/apache/beam/issues/28909)) and currently only enabled for PreCommit workflows. For PostCommit jobs, it is currently replaced by a temporary approach: test suites are configured to trigger whenever a particular trigger file is modified. Test [workflows](https://github.com/apache/beam/tree/master/.github/workflows) have [pull_request paths](https://github.com/apache/beam/blob/e33dec69c7cfd01c0b827538e1dad8567e3ff [...]
2) **Committers only** - Manual triggering: Any committer can start any job with a [workflow_dispatch](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#workflow_dispatch) trigger defined (all jobs should have these). To do so, navigate to the [Actions tab](https://github.com/apache/beam/actions), click on your desired workflow in the left navigation bar, and then click `Run Workflow`.
@@ -73,7 +73,7 @@ jobs:
job_phrase: [Run Job Phrase]
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
github.event.comment.body == 'Run Job Phrase'
@@ -102,7 +102,7 @@ jobs:
python_version: ['3.9','3.10','3.11','3.12']
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'issue_comment' && github.event.comment.body == format('{0} {1}', matrix.job_phrase, matrix.python_version))
@@ -124,16 +124,16 @@ GitHub allows workflows to define a set of triggers that dictate when a job shou
For the purposes of Beam, each CI workflow should define the following triggers:
1) A `push` trigger
-2) A `pull_request_target` trigger
+2) A `pull_request` trigger
3) An issue_comment trigger (for issue created). This is needed for comment triggering support (see section below).
4) A scheduled trigger
5) A workflow_dispatch trigger
-The `push`/`pull_request_target` triggers should only run when appropriate paths are modified. See https://github.com/apache/beam/blob/master/.github/workflows/beam_PreCommit_Go.yml#L4 for an example (you can copy and paste this into your workflow, you just need to change the paths).
+The `push`/`pull_request` triggers should only run when appropriate paths are modified. See https://github.com/apache/beam/blob/master/.github/workflows/beam_PreCommit_Go.yml#L4 for an example (you can copy and paste this into your workflow, you just need to change the paths).
## Checkout step
-Because we use the `pull_request_target` trigger instead of `pull_request`, we need an explicit checkout of the correct commit. This can be done as a step that uses the `setup-action` action in your workflow. See https://github.com/apache/beam/blob/0ee2dc73ec6f555a5bf1a643dffd37f4927be67e/.github/workflows/beam_PreCommit_Go.yml#L65-L70 for an example (you can copy and paste this into your workflow). Please make sure that you checkout the code before using the composite action.
+For comment triggering support, we need an explicit checkout of the correct commit. This can be done as a step that uses the `setup-action` action in your workflow. See https://github.com/apache/beam/blob/0ee2dc73ec6f555a5bf1a643dffd37f4927be67e/.github/workflows/beam_PreCommit_Go.yml#L65-L70 for an example (you can copy and paste this into your workflow). Please make sure that you checkout the code before using the composite action.
## Token Permissions
diff --git a/.github/workflows/beam_Infrastructure_UsersPermissions.yml b/.github/workflows/beam_Infrastructure_UsersPermissions.yml
index b188e5ff875..2f1e3965eda 100644
--- a/.github/workflows/beam_Infrastructure_UsersPermissions.yml
+++ b/.github/workflows/beam_Infrastructure_UsersPermissions.yml
@@ -24,7 +24,7 @@ name: Modify the GCP User Roles according to the infra/users.yml file
on:
workflow_dispatch:
- pull_request_target:
+ pull_request:
types: [opened, synchronize, reopened, closed]
paths:
- 'infra/iam/users.yml'
@@ -83,6 +83,7 @@ jobs:
- name: Upload plan as a comment to PR
if: github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened'
+ continue-on-error: true
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GH_REPO: ${{ github.repository }}
diff --git a/.github/workflows/beam_Playground_CI_Nightly.yml b/.github/workflows/beam_Playground_CI_Nightly.yml
index 690e8c00b76..bbae4ef43ae 100644
--- a/.github/workflows/beam_Playground_CI_Nightly.yml
+++ b/.github/workflows/beam_Playground_CI_Nightly.yml
@@ -20,7 +20,7 @@ on:
- cron: '20 */12 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -52,7 +52,7 @@ jobs:
beam_Playground_CI_Nightly:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam')
runs-on: [self-hosted, ubuntu-24.04, highmem]
name: "beam_Playground_CI_Nightly"
diff --git a/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml b/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
index 5fd00268b1d..eed45459c7d 100644
--- a/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
+++ b/.github/workflows/beam_PostCommit_Go_Dataflow_ARM.yml
@@ -20,11 +20,11 @@ on:
types: [created]
schedule:
- cron: '30 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Go_Dataflow_ARM.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -55,7 +55,7 @@ jobs:
if: |
github.event_name == 'push' ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Go PostCommit Dataflow ARM'
runs-on: [self-hosted, ubuntu-24.04, main]
diff --git a/.github/workflows/beam_PostCommit_Go_VR_Flink.yml b/.github/workflows/beam_PostCommit_Go_VR_Flink.yml
index 5f9173fa275..efdd01f8384 100644
--- a/.github/workflows/beam_PostCommit_Go_VR_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Go_VR_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit Go VR Flink
on:
schedule:
- cron: '30 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Go_VR_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Go_VR_Flink:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Go Flink ValidatesRunner'
runs-on: [self-hosted, ubuntu-24.04, main]
diff --git a/.github/workflows/beam_PostCommit_Go_VR_Spark.yml b/.github/workflows/beam_PostCommit_Go_VR_Spark.yml
index 63905b9483f..74d0ec5d48d 100644
--- a/.github/workflows/beam_PostCommit_Go_VR_Spark.yml
+++ b/.github/workflows/beam_PostCommit_Go_VR_Spark.yml
@@ -18,11 +18,11 @@ name: PostCommit Go VR Spark
on:
schedule:
- cron: '30 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Go_VR_Spark.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Go_VR_Spark:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Go Spark ValidatesRunner'
runs-on: [self-hosted, ubuntu-24.04, main]
diff --git a/.github/workflows/beam_PostCommit_Java.yml b/.github/workflows/beam_PostCommit_Java.yml
index 1afd320b84d..bc158ffc6ad 100644
--- a/.github/workflows/beam_PostCommit_Java.yml
+++ b/.github/workflows/beam_PostCommit_Java.yml
@@ -20,7 +20,7 @@ name: PostCommit Java
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java PostCommit]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java PostCommit'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Avro_Versions.yml b/.github/workflows/beam_PostCommit_Java_Avro_Versions.yml
index f6362b48b41..44cc6e9e8ad 100644
--- a/.github/workflows/beam_PostCommit_Java_Avro_Versions.yml
+++ b/.github/workflows/beam_PostCommit_Java_Avro_Versions.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Avro Versions
on:
schedule:
- cron: '30 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Avro_Versions.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Avro Versions PostCommit]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Avro Versions PostCommit'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_BigQueryEarlyRollout.yml b/.github/workflows/beam_PostCommit_Java_BigQueryEarlyRollout.yml
index 1b604b2d398..69574ad0239 100644
--- a/.github/workflows/beam_PostCommit_Java_BigQueryEarlyRollout.yml
+++ b/.github/workflows/beam_PostCommit_Java_BigQueryEarlyRollout.yml
@@ -20,7 +20,7 @@ name: PostCommit Java BigQueryEarlyRollout
on:
schedule:
- cron: '30 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_BigQueryEarlyRollout.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java BigQueryEarlyRollout PostCommit]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java BigQueryEarlyRollout PostCommit'
steps:
@@ -111,5 +111,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_DataflowV1.yml b/.github/workflows/beam_PostCommit_Java_DataflowV1.yml
index 05d4132b253..3d38a728c3c 100644
--- a/.github/workflows/beam_PostCommit_Java_DataflowV1.yml
+++ b/.github/workflows/beam_PostCommit_Java_DataflowV1.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Dataflow V1
on:
schedule:
- cron: '30 3/8 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_DataflowV1.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run PostCommit_Java_Dataflow]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run PostCommit_Java_Dataflow'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_DataflowV2.yml b/.github/workflows/beam_PostCommit_Java_DataflowV2.yml
index 7e38e8ce1c5..577795de5d7 100644
--- a/.github/workflows/beam_PostCommit_Java_DataflowV2.yml
+++ b/.github/workflows/beam_PostCommit_Java_DataflowV2.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Dataflow V2
on:
schedule:
- cron: '30 3/8 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_DataflowV2.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run PostCommit_Java_DataflowV2]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run PostCommit_Java_DataflowV2'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Delta_IO_Dataflow.yml b/.github/workflows/beam_PostCommit_Java_Delta_IO_Dataflow.yml
index d2444795d3b..6dae48b5d01 100644
--- a/.github/workflows/beam_PostCommit_Java_Delta_IO_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Java_Delta_IO_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Delta IO Dataflow
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: [ 'release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Delta_IO_Dataflow.json' ]
workflow_dispatch:
-# Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -51,7 +51,7 @@ env:
jobs:
beam_PostCommit_Java_Delta_IO_Dataflow:
if: |
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run PostCommit Java Delta IO Dataflow'
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow.yml b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow.yml
index 696d9496268..ae0e5459819 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Dataflow
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Dataflow.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java examples on Dataflow]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Examples on Dataflow'
steps:
@@ -91,5 +91,7 @@ jobs:
uses: EnricoMi/publish-unit-test-result-action@v2
if: always()
with:
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
+ comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
index 7dbe5e97505..77269b95ee2 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_ARM.yml
@@ -22,7 +22,7 @@ on:
types: [created]
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Dataflow_ARM.json']
workflow_dispatch:
@@ -36,7 +36,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -67,7 +67,7 @@ jobs:
github.event_name == 'push' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startswith(github.event.comment.body, 'Run Java_Examples_Dataflow_ARM PostCommit')
steps:
- uses: actions/checkout@v7
@@ -120,5 +120,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_Java.yml b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_Java.yml
index 51b2593e1c7..5b84fa98551 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_Java.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_Java.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Dataflow Java
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Dataflow_Java.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -63,7 +63,7 @@ jobs:
java_version: ['17', '21', '25']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
startswith(github.event.comment.body, 'Run Java examples on Dataflow Java')
steps:
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2.yml b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2.yml
index c36c9db7d8c..e7b4f621622 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Dataflow V2
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Dataflow_V2.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Examples on Dataflow Runner V2]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Examples on Dataflow Runner V2'
steps:
@@ -116,5 +116,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2_Java.yml b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2_Java.yml
index 762ab81e75a..2264923d415 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2_Java.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Dataflow_V2_Java.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Dataflow V2 Java
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Dataflow_V2_Java.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -64,7 +64,7 @@ jobs:
java_version: ['17', '21', '25']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
(contains(github.event.comment.body, 'Run Java') &&
contains(github.event.comment.body, 'Examples on Dataflow Runner V2'))
@@ -106,5 +106,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Direct.yml b/.github/workflows/beam_PostCommit_Java_Examples_Direct.yml
index 469706c6f6c..d0bd2fb6e21 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Direct.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Direct
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Direct.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Examples_Direct]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Examples_Direct'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Flink.yml b/.github/workflows/beam_PostCommit_Java_Examples_Flink.yml
index c58721208ea..056228f5665 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Flink.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Flink
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Flink.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Examples_Flink]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Examples_Flink'
steps:
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Examples_Spark.yml b/.github/workflows/beam_PostCommit_Java_Examples_Spark.yml
index f3332996ed8..4800b575a27 100644
--- a/.github/workflows/beam_PostCommit_Java_Examples_Spark.yml
+++ b/.github/workflows/beam_PostCommit_Java_Examples_Spark.yml
@@ -20,7 +20,7 @@ name: PostCommit Java Examples Spark
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Examples_Spark.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Examples_Spark]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Examples_Spark'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Hadoop_Versions.yml b/.github/workflows/beam_PostCommit_Java_Hadoop_Versions.yml
index 4b0ad803394..b33c30def91 100644
--- a/.github/workflows/beam_PostCommit_Java_Hadoop_Versions.yml
+++ b/.github/workflows/beam_PostCommit_Java_Hadoop_Versions.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Hadoop Versions
on:
schedule:
- cron: '45 3/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Hadoop_Versions.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run PostCommit_Java_Hadoop_Versions]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run PostCommit_Java_Hadoop_Versions'
steps:
@@ -90,5 +90,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_IO_Performance_Tests.yml b/.github/workflows/beam_PostCommit_Java_IO_Performance_Tests.yml
index 872f0541f39..b1de7efcf3c 100644
--- a/.github/workflows/beam_PostCommit_Java_IO_Performance_Tests.yml
+++ b/.github/workflows/beam_PostCommit_Java_IO_Performance_Tests.yml
@@ -20,11 +20,11 @@ on:
types: [created]
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_IO_Performance_Tests.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -55,7 +55,7 @@ jobs:
if: |
github.event_name == 'push' ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java PostCommit IO Performance Tests'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -122,5 +122,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_InfluxDbIO_IT.yml b/.github/workflows/beam_PostCommit_Java_InfluxDbIO_IT.yml
index 32a42305b76..fd56869cd9c 100644
--- a/.github/workflows/beam_PostCommit_Java_InfluxDbIO_IT.yml
+++ b/.github/workflows/beam_PostCommit_Java_InfluxDbIO_IT.yml
@@ -20,7 +20,7 @@ name: PostCommit Java InfluxDbIO Integration Test
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_InfluxDbIO_IT.json']
workflow_dispatch:
@@ -34,7 +34,7 @@ env:
GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -62,7 +62,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run Java InfluxDbIO_IT'
steps:
- uses: actions/checkout@v7
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow.yml
index 928ced19678..f4a9c2cd6b8 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Dataflow
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -90,5 +90,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow_Versions.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow_Versions.yml
index 07eff3d9cb8..9826a415db8 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow_Versions.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Dataflow_Versions.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Dataflow Versions
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Dataflow_Versions.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Dataflow_Versions:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Dataflow Versions PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Direct.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Direct.yml
index 1d12e2c2116..79e484e591f 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Direct
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -90,5 +90,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Direct_Versions.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Direct_Versions.yml
index a3d6a54b537..5225622762d 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Direct_Versions.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Direct_Versions.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Direct Versions
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Direct_Versions.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Direct_Versions:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Direct Versions PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Flink_Java11.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Flink_Java11.yml
index cfbff90970c..dd5334a2c78 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Flink_Java11.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Flink_Java11.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Flink Java11
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Flink_Java11.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Flink_Java11:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Flink Java 11 PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -93,5 +93,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_Jpms_Spark_Java11.yml b/.github/workflows/beam_PostCommit_Java_Jpms_Spark_Java11.yml
index 1077065388f..ea9237940aa 100644
--- a/.github/workflows/beam_PostCommit_Java_Jpms_Spark_Java11.yml
+++ b/.github/workflows/beam_PostCommit_Java_Jpms_Spark_Java11.yml
@@ -18,11 +18,11 @@ name: PostCommit Java Jpms Spark Java11
on:
schedule:
- cron: '0 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_Jpms_Spark_Java11.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Java_Jpms_Spark_Java11:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Jpms Spark Java 11 PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -93,5 +93,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml b/.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml
index b900ccace0c..a297eb2d406 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml
@@ -26,7 +26,7 @@ on:
- 'runners/java-fn-execution/**'
- 'sdks/java/core/src/test/java/org/apache/beam/sdk/transforms/**'
- '.github/workflows/beam_PostCommit_Java_PVR_Flink_Batch.yml'
- pull_request_target:
+ pull_request:
branches: ['master', 'release-*']
paths:
- 'release/trigger_all_tests.json'
@@ -40,7 +40,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.event.pull_request.head.label || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -74,7 +74,7 @@ jobs:
runs-on: [self-hosted, ubuntu-24.04, highmem]
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
github.event.comment.body == 'Run Java_PVR_Flink_Batch PostCommit'
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Flink_Streaming.yml b/.github/workflows/beam_PostCommit_Java_PVR_Flink_Streaming.yml
index 3961475de33..ea1e22626a5 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Flink_Streaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Flink_Streaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Flink Streaming
on:
schedule:
- cron: '15 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Flink_Streaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -63,7 +63,7 @@ jobs:
flink_version: [ '1.20', '2.0', '2.1', '2.2']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Flink PortableValidatesRunner Streaming'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Spark3_Streaming.yml b/.github/workflows/beam_PostCommit_Java_PVR_Spark3_Streaming.yml
index aef3f86655a..efffe2dc7f6 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Spark3_Streaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Spark3_Streaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Spark3 Streaming
on:
schedule:
- cron: '15 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Spark3_Streaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Spark v3 PortableValidatesRunner Streaming]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Spark v3 PortableValidatesRunner Streaming'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Batch.yml b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Batch.yml
index 331b0f5f49c..89e0d5ed53e 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Batch.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Batch.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Spark4 Batch
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Spark4_Batch.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Spark4 PortableValidatesRunner Batch]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam')
steps:
- uses: actions/checkout@v7
@@ -98,6 +98,7 @@ jobs:
large_files: true
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
- name: Archive SpotBugs Results
uses: actions/upload-artifact@v7
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Streaming.yml b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Streaming.yml
index 0ef53787a8f..6b52c63ef8d 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Streaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_Streaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Spark4 Streaming
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Spark4_Streaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Spark v4 PortableValidatesRunner Streaming]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Spark v4 PortableValidatesRunner Streaming'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.yml b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.yml
index 33c8a3be79e..1975fd98752 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Spark4 StructuredStreaming
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Spark4_StructuredStreaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Spark v4 PortableValidatesRunner StructuredStreaming]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Spark v4 PortableValidatesRunner StructuredStreaming'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_PVR_Spark_Batch.yml b/.github/workflows/beam_PostCommit_Java_PVR_Spark_Batch.yml
index 2c0a0943041..a4acc9729fd 100644
--- a/.github/workflows/beam_PostCommit_Java_PVR_Spark_Batch.yml
+++ b/.github/workflows/beam_PostCommit_Java_PVR_Spark_Batch.yml
@@ -20,7 +20,7 @@ name: PostCommit Java PVR Spark Batch
on:
schedule:
- cron: '15 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_PVR_Spark_Batch.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Spark PortableValidatesRunner Batch]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam')
steps:
- uses: actions/checkout@v7
@@ -96,6 +96,7 @@ jobs:
large_files: true
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
- name: Archive SpotBugs Results
uses: actions/upload-artifact@v7
diff --git a/.github/workflows/beam_PostCommit_Java_SingleStoreIO_IT.yml b/.github/workflows/beam_PostCommit_Java_SingleStoreIO_IT.yml
index 938149972df..637511c7e7a 100644
--- a/.github/workflows/beam_PostCommit_Java_SingleStoreIO_IT.yml
+++ b/.github/workflows/beam_PostCommit_Java_SingleStoreIO_IT.yml
@@ -20,10 +20,10 @@ name: PostCommit Java SingleStoreIO IT
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_SingleStoreIO_IT.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -64,7 +64,7 @@ jobs:
github.event_name == 'push' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run Java SingleStoreIO_IT'
steps:
- uses: actions/checkout@v7
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow.yml
index 74adf33c4ba..32fc87f7ed9 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow
on:
schedule:
- cron: '30 4/8 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Dataflow ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Dataflow ValidatesRunner'
steps:
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_JavaVersions.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_JavaVersions.yml
index 99128e5eb59..5146bc7dfeb 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_JavaVersions.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_JavaVersions.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow JavaVersions
on:
schedule:
- cron: '30 4/8 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_JavaVersions.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -63,7 +63,7 @@ jobs:
java_version: ['25']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
startswith(github.event.comment.body, 'Run Dataflow ValidatesRunner Java')
steps:
@@ -102,5 +102,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming.yml
index 6256cef301c..48ddb0351ce 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow Streaming
on:
schedule:
- cron: '30 12 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Dataflow Streaming ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Dataflow Streaming ValidatesRunner'
steps:
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_Engine.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_Engine.yml
index 027e05c1f99..f760291ae77 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_Engine.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_Engine.yml
@@ -19,7 +19,7 @@ name: PostCommit Java ValidatesRunner Dataflow Streaming Engine
on:
schedule:
- cron: '30 4 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_Engine.json']
workflow_dispatch:
@@ -28,7 +28,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -60,7 +60,7 @@ jobs:
job_phrase: [Run Dataflow Streaming Engine ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Dataflow Streaming Engine ValidatesRunner'
steps:
@@ -94,5 +94,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.yml
index 93efd86931b..8c9ce46ba1a 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow Streaming TagEncodingV2
on:
schedule:
- cron: '30 20 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_Streaming_TagEncodingV2.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Dataflow Streaming TagEncodingV2 ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Dataflow Streaming TagEncodingV2 ValidatesRunner'
steps:
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.yml
index 60a88cfad3c..c73684c7334 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow V2
on:
schedule:
- cron: '30 6/8 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Dataflow V2 ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Dataflow V2 ValidatesRunner'
steps:
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.yml
index 2a8da38993a..4c9bb02b2de 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Dataflow V2 Streaming
on:
schedule:
- cron: '30 6/12 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Dataflow_V2_Streaming.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Java Dataflow V2 ValidatesRunner Streaming]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Java Dataflow V2 ValidatesRunner Streaming'
steps:
@@ -97,5 +97,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct.yml
index 92d44315dc9..a7344260688 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Direct
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Direct.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run Direct ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Direct ValidatesRunner'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct_JavaVersions.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct_JavaVersions.yml
index 5d9ec380019..4c0d19155ad 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct_JavaVersions.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Direct_JavaVersions.yml
@@ -20,7 +20,7 @@ name: PostCommit Java ValidatesRunner Direct JavaVersions
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Direct_JavaVersions.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -63,7 +63,7 @@ jobs:
java_version: ['8', '25']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
startswith(github.event.comment.body, 'Run Direct ValidatesRunner Java')
steps:
@@ -101,5 +101,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Flink.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Flink.yml
index 679c22b627d..b7c3834efb3 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner Flink
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
flink_version: ['1.20', '2.0', '2.1', '2.2']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Flink ValidatesRunner'
steps:
@@ -96,4 +96,5 @@ jobs:
large_files: true
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark.yml
index 0accb780994..ebed3649882 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner Spark
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Spark.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run Spark ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Spark ValidatesRunner'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark4.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark4.yml
index 6b7b66d64e4..756269fbf4a 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark4.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Spark4.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner Spark4
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Spark4.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run Spark4 ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Spark4 ValidatesRunner'
steps:
@@ -93,5 +93,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_SparkStructuredStreaming.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_SparkStructuredStreaming.yml
index 80173f2ec21..6802d670686 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_SparkStructuredStreaming.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_SparkStructuredStreaming.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner SparkStructuredStreaming
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_SparkStructuredStreaming.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run Spark StructuredStreaming ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Spark StructuredStreaming ValidatesRunner'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Twister2.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Twister2.yml
index 0579fa2c89a..fcc7f5099ff 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Twister2.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_Twister2.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner Twister2
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_Twister2.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run Twister2 ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Twister2 ValidatesRunner'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_ULR.yml b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_ULR.yml
index 512b94cae0a..8b28fbd7c0a 100644
--- a/.github/workflows/beam_PostCommit_Java_ValidatesRunner_ULR.yml
+++ b/.github/workflows/beam_PostCommit_Java_ValidatesRunner_ULR.yml
@@ -18,11 +18,11 @@ name: PostCommit Java ValidatesRunner ULR
on:
schedule:
- cron: '45 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Java_ValidatesRunner_ULR.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -59,7 +59,7 @@ jobs:
job_phrase: [Run ULR Loopback ValidatesRunner]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run ULR Loopback ValidatesRunner'
steps:
@@ -91,5 +91,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_PortableJar_Flink.yml b/.github/workflows/beam_PostCommit_PortableJar_Flink.yml
index 4d3571eecff..1d3debd255c 100644
--- a/.github/workflows/beam_PostCommit_PortableJar_Flink.yml
+++ b/.github/workflows/beam_PostCommit_PortableJar_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit PortableJar Flink
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_PortableJar_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run PortableJar_Flink PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 120
@@ -96,5 +96,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_PortableJar_Spark.yml b/.github/workflows/beam_PostCommit_PortableJar_Spark.yml
index 2a7ef43d6a9..a89f22826ba 100644
--- a/.github/workflows/beam_PostCommit_PortableJar_Spark.yml
+++ b/.github/workflows/beam_PostCommit_PortableJar_Spark.yml
@@ -18,11 +18,11 @@ name: PostCommit PortableJar Spark
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_PortableJar_Spark.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run PortableJar_Spark PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 100
@@ -96,5 +96,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python.yml b/.github/workflows/beam_PostCommit_Python.yml
index ad56252da62..5a5f071acba 100644
--- a/.github/workflows/beam_PostCommit_Python.yml
+++ b/.github/workflows/beam_PostCommit_Python.yml
@@ -20,7 +20,7 @@ name: PostCommit Python
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -66,7 +66,7 @@ jobs:
os: [[self-hosted, ubuntu-24.04, highmem22]]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
startswith(github.event.comment.body, 'Run Python PostCommit 3.')
steps:
@@ -119,6 +119,7 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
check_name: "Python ${{ matrix.python_version }} Test Results (${{ join(matrix.os, ', ') }})"
diff --git a/.github/workflows/beam_PostCommit_Python_Arm.yml b/.github/workflows/beam_PostCommit_Python_Arm.yml
index 6f12806f6f9..f75591a1863 100644
--- a/.github/workflows/beam_PostCommit_Python_Arm.yml
+++ b/.github/workflows/beam_PostCommit_Python_Arm.yml
@@ -20,7 +20,7 @@ name: PostCommit Python Arm
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Arm.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -67,7 +67,7 @@ jobs:
python_version: ['3.10', '3.14']
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam')
steps:
- uses: actions/checkout@v7
@@ -123,5 +123,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Examples_Dataflow.yml b/.github/workflows/beam_PostCommit_Python_Examples_Dataflow.yml
index 1eb7c7c6d07..37bff380688 100644
--- a/.github/workflows/beam_PostCommit_Python_Examples_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_Examples_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Examples Dataflow
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Examples_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run Python Examples_Dataflow'
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 180
@@ -96,5 +96,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Examples_Direct.yml b/.github/workflows/beam_PostCommit_Python_Examples_Direct.yml
index 98c8f728465..ecae836e4c8 100644
--- a/.github/workflows/beam_PostCommit_Python_Examples_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Python_Examples_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Examples Direct
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Examples_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Examples_Direct')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 120
@@ -103,5 +103,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Examples_Flink.yml b/.github/workflows/beam_PostCommit_Python_Examples_Flink.yml
index b7f987a73dd..86da31b44a5 100644
--- a/.github/workflows/beam_PostCommit_Python_Examples_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Python_Examples_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Examples Flink
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Examples_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Examples_Flink')
runs-on: [self-hosted, ubuntu-24.04, highmem22]
timeout-minutes: 240
@@ -103,5 +103,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Examples_Spark.yml b/.github/workflows/beam_PostCommit_Python_Examples_Spark.yml
index b9f5f6a705a..a8dd3cc3f99 100644
--- a/.github/workflows/beam_PostCommit_Python_Examples_Spark.yml
+++ b/.github/workflows/beam_PostCommit_Python_Examples_Spark.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Examples Spark
on:
schedule:
- cron: '0 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Examples_Spark.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Examples_Spark')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 120
@@ -103,5 +103,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_MongoDBIO_IT.yml b/.github/workflows/beam_PostCommit_Python_MongoDBIO_IT.yml
index 9c8084df040..c77d473f465 100644
--- a/.github/workflows/beam_PostCommit_Python_MongoDBIO_IT.yml
+++ b/.github/workflows/beam_PostCommit_Python_MongoDBIO_IT.yml
@@ -18,11 +18,11 @@ name: PostCommit Python MongoDBIO IT
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_MongoDBIO_IT.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
github.event.comment.body == 'Run Python MongoDBIO_IT'
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 100
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Nexmark_Direct.yml b/.github/workflows/beam_PostCommit_Python_Nexmark_Direct.yml
index 69166589b4c..d46a01a3988 100644
--- a/.github/workflows/beam_PostCommit_Python_Nexmark_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Python_Nexmark_Direct.yml
@@ -20,7 +20,7 @@ name: PostCommit Python Nexmark Direct
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Nexmark_Direct.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -104,7 +104,7 @@ jobs:
query: [0, 2, 3, 5, 7, 8, 10, 11]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python Direct Runner Nexmark Tests'
steps:
diff --git a/.github/workflows/beam_PostCommit_Python_Portable_Flink.yml b/.github/workflows/beam_PostCommit_Python_Portable_Flink.yml
index 9b05df10d94..feea155e5cd 100644
--- a/.github/workflows/beam_PostCommit_Python_Portable_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Python_Portable_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Portable Flink
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Portable_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target'
+ github.event_name == 'pull_request'
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 120
name: ${{ matrix.job_name }} (${{ matrix.job_phrase }} ${{ matrix.environment_type }})
@@ -101,5 +101,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
index 5a08db49fe2..c84e98702ab 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow.yml
@@ -18,13 +18,13 @@ name: PostCommit Python ValidatesContainer Dataflow
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_ValidatesContainer_Dataflow.json']
workflow_dispatch:
issue_comment:
types: [created]
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -55,7 +55,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Dataflow ValidatesContainer')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 100
@@ -125,5 +125,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
index a50540ce656..48baad48a30 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.yml
@@ -18,11 +18,11 @@ name: PostCommit Python ValidatesContainer Dataflow With RC
on:
schedule:
- cron: '15 8/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_ValidatesContainer_Dataflow_With_RC.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python RC Dataflow ValidatesContainer')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 300
@@ -121,5 +121,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Dataflow.yml b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Dataflow.yml
index cfce84b677f..9118933294b 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Python ValidatesRunner Dataflow
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_ValidatesRunner_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Dataflow ValidatesRunner')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 200
@@ -111,5 +111,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Flink.yml b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Flink.yml
index b18a4a6502b..67b9b0e408d 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Flink.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit Python ValidatesRunner Flink
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_ValidatesRunner_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Flink ValidatesRunner')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 100
@@ -105,5 +105,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Spark.yml b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Spark.yml
index 0e7ef761eeb..f30e29185f4 100644
--- a/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Spark.yml
+++ b/.github/workflows/beam_PostCommit_Python_ValidatesRunner_Spark.yml
@@ -18,11 +18,11 @@ name: PostCommit Python ValidatesRunner Spark
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_ValidatesRunner_Spark.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
startsWith(github.event.comment.body, 'Run Python Spark ValidatesRunner')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 100
@@ -103,5 +103,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Versions.yml b/.github/workflows/beam_PostCommit_Python_Versions.yml
index ef485994fe7..8c773c60c66 100644
--- a/.github/workflows/beam_PostCommit_Python_Versions.yml
+++ b/.github/workflows/beam_PostCommit_Python_Versions.yml
@@ -15,7 +15,7 @@
name: PostCommit Python Versions
on:
- pull_request_target:
+ pull_request:
branches: [ "master", "release-*" ]
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Versions.json']
push:
@@ -26,7 +26,7 @@ on:
- cron: '0 3/6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -84,7 +84,7 @@ jobs:
python_version: ['3.11','3.12','3.13'] # Run Python PreCommit tests on "middle" versions
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch'
steps:
@@ -147,5 +147,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Dataflow.yml b/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Dataflow.yml
index 7d52a220905..bc5918f2269 100644
--- a/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Xlang Gcp Dataflow
on:
schedule:
- cron: '15 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Xlang_Gcp_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
beam_PostCommit_Python_Xlang_Gcp_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python_Xlang_Gcp_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -100,5 +100,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Direct.yml b/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Direct.yml
index c915cc0e0ab..d057afb3de1 100644
--- a/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Python_Xlang_Gcp_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Xlang Gcp Direct
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Xlang_Gcp_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -54,7 +54,7 @@ jobs:
beam_PostCommit_Python_Xlang_Gcp_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python_Xlang_Gcp_Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, highmem]
@@ -101,5 +101,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Xlang_IO_Dataflow.yml b/.github/workflows/beam_PostCommit_Python_Xlang_IO_Dataflow.yml
index 20d93902328..f50f5133d8f 100644
--- a/.github/workflows/beam_PostCommit_Python_Xlang_IO_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_Python_Xlang_IO_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Xlang IO Dataflow
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Xlang_IO_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Python_Xlang_IO_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python_Xlang_IO_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Xlang_IO_Direct.yml b/.github/workflows/beam_PostCommit_Python_Xlang_IO_Direct.yml
index 0767796b1ee..1a45e06aa16 100644
--- a/.github/workflows/beam_PostCommit_Python_Xlang_IO_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Python_Xlang_IO_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Xlang IO Direct
on:
schedule:
- cron: '30 4/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Xlang_IO_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Python_Xlang_IO_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python_Xlang_IO_Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -97,5 +97,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Python_Xlang_Messaging_Direct.yml b/.github/workflows/beam_PostCommit_Python_Xlang_Messaging_Direct.yml
index 88ac36e8d5d..990c1f411fb 100644
--- a/.github/workflows/beam_PostCommit_Python_Xlang_Messaging_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Python_Xlang_Messaging_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit Python Xlang Messaging Direct
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Python_Xlang_Messaging_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Python_Xlang_Messaging_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Python_Xlang_Messaging_Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_SQL.yml b/.github/workflows/beam_PostCommit_SQL.yml
index 22bbe051933..daccc277070 100644
--- a/.github/workflows/beam_PostCommit_SQL.yml
+++ b/.github/workflows/beam_PostCommit_SQL.yml
@@ -20,7 +20,7 @@ name: PostCommit SQL
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_SQL.json']
workflow_dispatch:
@@ -29,7 +29,7 @@ concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.number || github.sha || github.head_ref || github.ref }}-${{ github.event.schedule || github.event.comment.id || github.event.sender.login }}'
cancel-in-progress: true
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -61,7 +61,7 @@ jobs:
job_phrase: [Run SQL PostCommit]
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run SQL PostCommit'
steps:
@@ -92,5 +92,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_TransformService_Direct.yml b/.github/workflows/beam_PostCommit_TransformService_Direct.yml
index cc62be86512..0ada94e714c 100644
--- a/.github/workflows/beam_PostCommit_TransformService_Direct.yml
+++ b/.github/workflows/beam_PostCommit_TransformService_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit TransformService Direct
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_TransformService_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_TransformService_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run TransformService_Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -102,5 +102,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Website_Test.yml b/.github/workflows/beam_PostCommit_Website_Test.yml
index 332551e23e3..c4d91099362 100644
--- a/.github/workflows/beam_PostCommit_Website_Test.yml
+++ b/.github/workflows/beam_PostCommit_Website_Test.yml
@@ -18,11 +18,11 @@ name: PostCommit Website Test
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Website_Test.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Website_Test:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run Full Website Test'
runs-on: [self-hosted, ubuntu-24.04, main]
diff --git a/.github/workflows/beam_PostCommit_XVR_Direct.yml b/.github/workflows/beam_PostCommit_XVR_Direct.yml
index 62cdcaa67a5..8f7a57ae5c2 100644
--- a/.github/workflows/beam_PostCommit_XVR_Direct.yml
+++ b/.github/workflows/beam_PostCommit_XVR_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR Direct
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_XVR_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_Direct PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_Flink.yml b/.github/workflows/beam_PostCommit_XVR_Flink.yml
index cabfba27148..9314efd3676 100644
--- a/.github/workflows/beam_PostCommit_XVR_Flink.yml
+++ b/.github/workflows/beam_PostCommit_XVR_Flink.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR Flink
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_Flink.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -53,7 +53,7 @@ jobs:
beam_PostCommit_XVR_Flink:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_Flink PostCommit'
runs-on: [self-hosted, ubuntu-24.04, highmem]
@@ -100,5 +100,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml b/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
index a84fe3b52d1..39d7f81b689 100644
--- a/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_XVR_GoUsingJava_Dataflow.yml
@@ -21,11 +21,11 @@ name: PostCommit XVR GoUsingJava Dataflow
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['.github/trigger_files/beam_PostCommit_XVR_GoUsingJava_Dataflow.json', 'release/trigger_all_tests.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -55,7 +55,7 @@ jobs:
beam_PostCommit_XVR_GoUsingJava_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_GoUsingJava_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -102,5 +102,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_JavaUsingPython_Dataflow.yml b/.github/workflows/beam_PostCommit_XVR_JavaUsingPython_Dataflow.yml
index 286303ff6e0..609e86968f6 100644
--- a/.github/workflows/beam_PostCommit_XVR_JavaUsingPython_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_XVR_JavaUsingPython_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR JavaUsingPython Dataflow
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_JavaUsingPython_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_XVR_JavaUsingPython_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_JavaUsingPython_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -98,5 +98,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.yml b/.github/workflows/beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.yml
index 14b17a97636..55dd840f17e 100644
--- a/.github/workflows/beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR PythonUsingJavaSQL Dataflow
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_XVR_PythonUsingJavaSQL_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_PythonUsingJavaSQL_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -95,5 +95,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_PythonUsingJava_Dataflow.yml b/.github/workflows/beam_PostCommit_XVR_PythonUsingJava_Dataflow.yml
index fafda7506bf..487fab7428f 100644
--- a/.github/workflows/beam_PostCommit_XVR_PythonUsingJava_Dataflow.yml
+++ b/.github/workflows/beam_PostCommit_XVR_PythonUsingJava_Dataflow.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR PythonUsingJava Dataflow
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_PythonUsingJava_Dataflow.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_XVR_PythonUsingJava_Dataflow:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_PythonUsingJava_Dataflow PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -98,5 +98,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_XVR_Spark3.yml b/.github/workflows/beam_PostCommit_XVR_Spark3.yml
index 4cde1ac2cbf..e5e4573d737 100644
--- a/.github/workflows/beam_PostCommit_XVR_Spark3.yml
+++ b/.github/workflows/beam_PostCommit_XVR_Spark3.yml
@@ -18,11 +18,11 @@ name: PostCommit XVR Spark3
on:
schedule:
- cron: '45 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_XVR_Spark3.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_XVR_Spark3:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event.comment.body == 'Run XVR_Spark3 PostCommit'
runs-on: [self-hosted, ubuntu-24.04, main]
@@ -99,5 +99,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/build/test-results/**/*.xml'
large_files: true
diff --git a/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml b/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
index b390f8faf4e..0fd55b090a3 100644
--- a/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
+++ b/.github/workflows/beam_PostCommit_Yaml_Xlang_Direct.yml
@@ -18,11 +18,11 @@ name: PostCommit YAML Xlang Direct
on:
schedule:
- cron: '30 5/6 * * *'
- pull_request_target:
+ pull_request:
paths: ['release/trigger_all_tests.json', '.github/trigger_files/beam_PostCommit_Yaml_Xlang_Direct.json']
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -52,7 +52,7 @@ jobs:
beam_PostCommit_Yaml_Xlang_Direct:
if: |
github.event_name == 'workflow_dispatch' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam')
runs-on: [self-hosted, ubuntu-24.04, main]
timeout-minutes: 180
@@ -95,6 +95,7 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PreCommit_Python_Examples.yml b/.github/workflows/beam_PreCommit_Python_Examples.yml
index e5572047b4d..ba4689de79b 100644
--- a/.github/workflows/beam_PreCommit_Python_Examples.yml
+++ b/.github/workflows/beam_PreCommit_Python_Examples.yml
@@ -15,7 +15,7 @@
name: PreCommit Python Examples
on:
- pull_request_target:
+ pull_request:
branches: [ "master", "release-*" ]
paths: [ "model/**","sdks/python/**","release/**", 'release/trigger_all_tests.json', '.github/trigger_files/beam_PreCommit_Python_Examples.json']
issue_comment:
@@ -28,7 +28,7 @@ on:
- cron: '45 2/6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -69,7 +69,7 @@ jobs:
python_version: ['3.10','3.14']
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
startsWith(github.event.comment.body, 'Run Python_Examples PreCommit')
@@ -113,5 +113,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PreCommit_Python_ML.yml b/.github/workflows/beam_PreCommit_Python_ML.yml
index 0448dd66369..1e54071ff20 100644
--- a/.github/workflows/beam_PreCommit_Python_ML.yml
+++ b/.github/workflows/beam_PreCommit_Python_ML.yml
@@ -15,7 +15,7 @@
name: PreCommit Python ML tests with ML deps installed
on:
- pull_request_target:
+ pull_request:
branches: [ "master", "release-*" ]
paths: [ "model/**","sdks/python/**","release/**", 'release/trigger_all_tests.json', '.github/trigger_files/beam_PreCommit_Python_ML.json']
issue_comment:
@@ -28,7 +28,7 @@ on:
- cron: '45 2/6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -83,7 +83,7 @@ jobs:
os: [ ubuntu-latest ]
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
startsWith(github.event.comment.body, 'Run Python_ML PreCommit')
@@ -143,6 +143,7 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
check_name: "Python ${{ matrix.python_version }} Test Results (${{ join(matrix.os, ', ') }})"
diff --git a/.github/workflows/beam_PreCommit_Python_Transforms.yml b/.github/workflows/beam_PreCommit_Python_Transforms.yml
index 69368a57d0c..0c5d6f88ed0 100644
--- a/.github/workflows/beam_PreCommit_Python_Transforms.yml
+++ b/.github/workflows/beam_PreCommit_Python_Transforms.yml
@@ -15,7 +15,7 @@
name: PreCommit Python Transforms
on:
- pull_request_target:
+ pull_request:
branches: [ "master", "release-*" ]
paths: [ "model/**","sdks/python/**","release/**", 'release/trigger_all_tests.json', '.github/trigger_files/beam_PreCommit_Python_Transforms.json']
issue_comment:
@@ -28,7 +28,7 @@ on:
- cron: '45 2/6 * * *'
workflow_dispatch:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: write
@@ -69,7 +69,7 @@ jobs:
python_version: ['3.10','3.14']
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
startsWith(github.event.comment.body, 'Run Python_Transforms PreCommit')
@@ -113,5 +113,6 @@ jobs:
with:
commit: '${{ env.prsha || env.GITHUB_SHA }}'
comment_mode: ${{ github.event_name == 'issue_comment' && 'always' || 'off' }}
+ check_run: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
files: '**/pytest*.xml'
large_files: true
diff --git a/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml b/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
index 944e566f145..fdc2cadf368 100644
--- a/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
+++ b/.github/workflows/beam_PreCommit_Website_Stage_GCS.yml
@@ -20,7 +20,7 @@ on:
tags: ['v*']
branches: ['master', 'release-*']
paths: ['website/**','.github/workflows/beam_PreCommit_Website_Stage_GCS.yml']
- pull_request_target:
+ pull_request:
branches: ['master', 'release-*']
paths: ['website/**', 'release/trigger_all_tests.json', '.github/trigger_files/beam_PreCommit_Website_Stage_GCS.json']
issue_comment:
@@ -41,7 +41,7 @@ env:
gcsbucket: apache-beam-website-pull-requests
ghprbPullId:
-#Setting explicit permissions for the action to avoid the default permissions which are `write-all` in case of pull_request_target event
+# Setting explicit permissions for the action
permissions:
actions: write
pull-requests: read
@@ -68,7 +68,7 @@ jobs:
timeout-minutes: 120
if: |
github.event_name == 'push' ||
- github.event_name == 'pull_request_target' ||
+ github.event_name == 'pull_request' ||
(github.event_name == 'schedule' && github.repository == 'apache/beam') ||
github.event_name == 'workflow_dispatch' ||
github.event.comment.body == 'Run Website_Stage_GCS PreCommit'
diff --git a/contributor-docs/release-guide.md b/contributor-docs/release-guide.md
index fb30816b2b5..270ede43ce8 100644
--- a/contributor-docs/release-guide.md
+++ b/contributor-docs/release-guide.md
@@ -310,7 +310,7 @@ Note: Only these variables need to be set in your local repository: RELEASE_VER,
(cd release/src/main/scripts && ./verify_release_build.sh)
```
4. Trigger all Github Action jobs from the PR created by the previous step.
- For GitHub Action jobs, they should be triggered by the pull_request_target event of a specific placeholder file
+ For GitHub Action jobs, they should be triggered by the pull_request event of a specific placeholder file
added to the PR (`release/trigger_all_tests.json`), so no additional action should be needed.
**NOTE**
The GitHub Action jobs triggered by this script often run for several hours, and concurrency issues may cause some to fail. These, and any flaky tests, should be retried. Test failures related to unreleased container images (e.g., see https://github.com/apache/beam/pull/34381#issuecomment-2745245273) can be temporarily ignored, but these workflows must be revisited after the container images are released.