You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by sh...@apache.org on 2026/10/19 09:53:21 UTC
(airflow) branch airflow-ctl/v0-1-test updated: Bump Actions pins to ASF-allowlisted versions (#75073)
This is an automated email from the ASF dual-hosted git repository.
shahar1 pushed a commit to branch airflow-ctl/v0-1-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/airflow-ctl/v0-1-test by this push:
new e1e7db3e1e0 Bump Actions pins to ASF-allowlisted versions (#75073)
e1e7db3e1e0 is described below
commit e1e7db3e1e0d0c7dcc065f0d340038a8d4f2d14b
Author: Wei Lee <we...@apache.org>
AuthorDate: Mon Oct 19 18:53:13 2026 +0900
Bump Actions pins to ASF-allowlisted versions (#75073)
* Bump setup-uv, configure-aws-credentials and pnpm/action-setup to ASF-allowlisted pins
The ASF organisation-level Actions allowlist no longer permits the pins this
branch carries for astral-sh/setup-uv, aws-actions/configure-aws-credentials
and pnpm/action-setup, and GitHub blocks the whole workflow at startup
rather than failing the single step, so the test pipeline on this branch
cannot start at all.
The replacements are the non-expiring allowlist entries that main already
runs: setup-uv v10.3.0, configure-aws-credentials v6.3.0 (same major as
before) and pnpm/action-setup v6.1.0.
* Bump slackapi/slack-github-action to an ASF-allowlisted pin
The ASF organisation-level Actions allowlist no longer permits the
af78098f (v3.0.1) pin, and GitHub blocks the entire workflow at startup
rather than failing the single step, so the test pipeline on this branch
cannot start at all and asf-allowlist-check reports the pin directly.
v4.0.0 is the only non-expiring slack-github-action pin on the allowlist
and is what main already runs. The one breaking change in v4 only affects
multi-line quoted scalars in `payload`, which this branch does not use.
---
.github/workflows/basic-tests.yml | 2 +-
.github/workflows/ci-amd-arm.yml | 6 +++---
.github/workflows/ci-image-checks.yml | 8 ++++----
.github/workflows/ci-notification.yml | 6 +++---
.github/workflows/e2e-flaky-tests-report.yml | 2 +-
.github/workflows/publish-docs-to-s3.yml | 2 +-
.github/workflows/registry-backfill.yml | 8 ++++----
.github/workflows/registry-build.yml | 4 ++--
.github/workflows/registry-tests.yml | 2 +-
.github/workflows/scheduled-verify-release-calendar.yml | 2 +-
.github/workflows/ui-e2e-tests.yml | 2 +-
.github/workflows/update-constraints-on-push-stable.yml | 2 +-
.github/workflows/upgrade-check.yml | 4 ++--
13 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/.github/workflows/basic-tests.yml b/.github/workflows/basic-tests.yml
index dd23ba30048..2f1e2f8986f 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -192,7 +192,7 @@ jobs:
with:
persist-credentials: false
- name: Setup pnpm
- uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+ uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
with:
version: 9
run_install: false
diff --git a/.github/workflows/ci-amd-arm.yml b/.github/workflows/ci-amd-arm.yml
index da98b28b4d0..85f769b462c 100644
--- a/.github/workflows/ci-amd-arm.yml
+++ b/.github/workflows/ci-amd-arm.yml
@@ -1005,7 +1005,7 @@ jobs:
overwrite: true
- name: "Notify Slack (new/changed failures)"
if: steps.notification.outputs.action == 'notify_new'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1021,7 +1021,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (still not fixed)"
if: steps.notification.outputs.action == 'notify_reminder'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1037,7 +1037,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (all tests passing)"
if: steps.notification.outputs.action == 'notify_recovery'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-image-checks.yml b/.github/workflows/ci-image-checks.yml
index 6b30ceec54e..12a28f1f15f 100644
--- a/.github/workflows/ci-image-checks.yml
+++ b/.github/workflows/ci-image-checks.yml
@@ -264,7 +264,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_new'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -280,7 +280,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_reminder'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -296,7 +296,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_recovery'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -439,7 +439,7 @@ jobs:
inputs.canary-run == 'true' &&
(github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
- name: Configure AWS credentials
- uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
+ uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/ci-notification.yml b/.github/workflows/ci-notification.yml
index 31b390e2d0f..ed95ba86b2a 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -77,7 +77,7 @@ jobs:
- name: "Send Slack notification (new/changed failures)"
if: steps.notification.outputs.action == 'notify_new'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -98,7 +98,7 @@ jobs:
- name: "Send Slack notification (still not fixed)"
if: steps.notification.outputs.action == 'notify_reminder'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -119,7 +119,7 @@ jobs:
- name: "Send Slack notification (all passing)"
if: steps.notification.outputs.action == 'notify_recovery'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/e2e-flaky-tests-report.yml b/.github/workflows/e2e-flaky-tests-report.yml
index be10b33b1c6..f472e5ce66e 100644
--- a/.github/workflows/e2e-flaky-tests-report.yml
+++ b/.github/workflows/e2e-flaky-tests-report.yml
@@ -52,7 +52,7 @@ jobs:
- name: "Post report to Slack"
if: always() && steps.analyze.outcome == 'success'
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/publish-docs-to-s3.yml b/.github/workflows/publish-docs-to-s3.yml
index 4e0ce4d260d..3887815309e 100644
--- a/.github/workflows/publish-docs-to-s3.yml
+++ b/.github/workflows/publish-docs-to-s3.yml
@@ -409,7 +409,7 @@ jobs:
sudo /tmp/aws/install --update
rm -rf /tmp/aws/
- name: Configure AWS credentials
- uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
+ uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/registry-backfill.yml b/.github/workflows/registry-backfill.yml
index 2e1d089e967..95573de6123 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -118,7 +118,7 @@ jobs:
done
- name: "Install uv"
- uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
- name: "Install Breeze"
uses: ./.github/actions/breeze
@@ -136,7 +136,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
+ uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -186,7 +186,7 @@ jobs:
registry/src/_data/modules.json
- name: "Setup pnpm"
- uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+ uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
with:
version: 9
@@ -252,7 +252,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
+ uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/registry-build.yml b/.github/workflows/registry-build.yml
index fe4655cf30f..114516b4031 100644
--- a/.github/workflows/registry-build.yml
+++ b/.github/workflows/registry-build.yml
@@ -133,7 +133,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
+ uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -217,7 +217,7 @@ jobs:
fi
- name: "Setup pnpm"
- uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+ uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
with:
version: 9
diff --git a/.github/workflows/registry-tests.yml b/.github/workflows/registry-tests.yml
index 2c38e724b86..c44e552a8f1 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -50,7 +50,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
with:
python-version: "3.12"
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml b/.github/workflows/scheduled-verify-release-calendar.yml
index 199ccfb72c1..dadbf7c0c17 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -50,7 +50,7 @@ jobs:
# yamllint disable rule:line-length
- name: "Notify Slack on failure"
if: failure()
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ secrets.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ui-e2e-tests.yml b/.github/workflows/ui-e2e-tests.yml
index e2028f7c75a..66795bd7220 100644
--- a/.github/workflows/ui-e2e-tests.yml
+++ b/.github/workflows/ui-e2e-tests.yml
@@ -121,7 +121,7 @@ jobs:
uses: ./.github/actions/breeze
if: github.event_name == 'workflow_dispatch'
- name: "Setup pnpm"
- uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+ uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
with:
version: 9
run_install: false
diff --git a/.github/workflows/update-constraints-on-push-stable.yml b/.github/workflows/update-constraints-on-push-stable.yml
index fcacc09a6bb..6505f43dd5c 100644
--- a/.github/workflows/update-constraints-on-push-stable.yml
+++ b/.github/workflows/update-constraints-on-push-stable.yml
@@ -156,7 +156,7 @@ jobs:
SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
steps:
- name: "Send Slack notification"
- uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
+ uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/upgrade-check.yml b/.github/workflows/upgrade-check.yml
index d4f23d57822..cab3e5bda8d 100644
--- a/.github/workflows/upgrade-check.yml
+++ b/.github/workflows/upgrade-check.yml
@@ -103,7 +103,7 @@ jobs:
[${{ inputs.target-branch }}] Notify Slack on success
if: success() && steps.find-pr.outputs.pr-url != ''
uses: >-
- slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95
+ slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -132,7 +132,7 @@ jobs:
[${{ inputs.target-branch }}] Notify Slack on failure
if: failure()
uses: >-
- slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95
+ slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}