You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@opendal.apache.org by "Xuanwo (via GitHub)" <gi...@apache.org> on 2026/06/16 14:51:41 UTC
[I] CI: third-party-actions dependabot bump blocked by ASF allowlist (rust-lang/crates-io-auth-action) [opendal]
Xuanwo opened a new issue, #7765:
URL: https://github.com/apache/opendal/issues/7765
## Problem
Dependabot PR #7757 (`chore(deps): bump the third-party-actions group with 2 updates`) fails the `asf-allowlist-check` job.
The bump pins `rust-lang/crates-io-auth-action` to a new commit SHA used in `.github/workflows/release_rust.yml`:
- `rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18`
This SHA is not yet on the ASF GitHub Actions allowlist, so `asf-allowlist-check` exits non-zero and blocks the PR. This is an ASF INFRA-side requirement, not a problem with the bump itself: the new action revision must be added to the allowlist in `apache/infrastructure-actions` (`allowlist-check/actions.yml`) before the PR can pass CI and merge.
The other action in the same group, `rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092`, is already allowlisted and is not flagged.
## Action needed
Add to the ASF allowlist via `apache/infrastructure-actions`:
- `rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18`
Once allowlisted, re-run CI on #7757 and merge.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CI: third-party-actions dependabot bump blocked by ASF allowlist (rust-lang/crates-io-auth-action) [opendal]
Posted by "erickguan (via GitHub)" <gi...@apache.org>.
erickguan closed issue #7765: CI: third-party-actions dependabot bump blocked by ASF allowlist (rust-lang/crates-io-auth-action)
URL: https://github.com/apache/opendal/issues/7765
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] CI: third-party-actions dependabot bump blocked by ASF allowlist (rust-lang/crates-io-auth-action) [opendal]
Posted by "erickguan (via GitHub)" <gi...@apache.org>.
erickguan commented on issue #7765:
URL: https://github.com/apache/opendal/issues/7765#issuecomment-4767991400
Merged
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org