You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "kou (via GitHub)" <gi...@apache.org> on 2025/12/04 08:35:44 UTC
[PR] GH-48326: [CI] Stop specifying hash for `actions/*` GitHub Actions [arrow]
kou opened a new pull request, #48327:
URL: https://github.com/apache/arrow/pull/48327
### Rationale for this change
Dependabot sometimes failed to update hash.
For example: https://github.com/apache/arrow/pull/48301
The ASF GitHub Actions policy doesn't requiring pinning `actions/*` actions:
https://infra.apache.org/github-actions-policy.html
> External actions
>
> You MAY use all actions internal to the `apache/*`, `github/*` and `actions/*` namespaces without restrictions.
>
> You MUST pin all external actions to the specific git hash (SHA1) of the action that has been reviewed for use by the project. For instance, you MUST pin `foobar/baz-action@8843d7f92416211de9ebb963ff4ce28125932878`.
We can avoid the Dependabot behavior by removing hash from `actions/*` actions.
### What changes are included in this PR?
* Remove hash from `actions/*` actions.
* Use `@vX` instead of `@vX.Y.Z` to reduce Dependabot updates.
### Are these changes tested?
Yes.
### Are there any user-facing changes?
No.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-48326: [CI] Stop specifying hash for `actions/*` GitHub Actions [arrow]
Posted by "conbench-apache-arrow[bot] (via GitHub)" <gi...@apache.org>.
conbench-apache-arrow[bot] commented on PR #48327:
URL: https://github.com/apache/arrow/pull/48327#issuecomment-3673397309
After merging your PR, Conbench analyzed the 3 benchmarking runs that have been run so far on merge-commit f7159f2bff091a2adf9b918a754701df1f122560.
There were no benchmark performance regressions. 🎉
The [full Conbench report](https://github.com/apache/arrow/runs/58501848836) has more details. It also includes information about 9 possible false positives for unstable benchmarks that are known to sometimes produce them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-48326: [CI] Stop specifying hash for `actions/*` GitHub Actions [arrow]
Posted by "raulcd (via GitHub)" <gi...@apache.org>.
raulcd merged PR #48327:
URL: https://github.com/apache/arrow/pull/48327
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] GH-48326: [CI] Stop specifying hash for `actions/*` GitHub Actions [arrow]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #48327:
URL: https://github.com/apache/arrow/pull/48327#issuecomment-3610885457
:warning: GitHub issue #48326 **has been automatically assigned in GitHub** to PR creator.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org