You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by eq...@apache.org on 2026/10/15 07:36:49 UTC
(pulsar-client-node) branch master updated: [improve][ci] Upgrade approved actions and check the ASF allowlist (#507)
This is an automated email from the ASF dual-hosted git repository.
equanz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar-client-node.git
The following commit(s) were added to refs/heads/master by this push:
new 602dad6 [improve][ci] Upgrade approved actions and check the ASF allowlist (#507)
602dad6 is described below
commit 602dad6a7e9cb9c64d904ff768a5efc9035ab46c
Author: Lari Hotari <lh...@users.noreply.github.com>
AuthorDate: Thu Oct 15 00:36:44 2026 -0700
[improve][ci] Upgrade approved actions and check the ASF allowlist (#507)
---
.github/workflows/ci-build-release-napi.yml | 28 ++++++++---------
.github/workflows/ci-pr-validation.yml | 48 ++++++++++++++++-------------
2 files changed, 40 insertions(+), 36 deletions(-)
diff --git a/.github/workflows/ci-build-release-napi.yml b/.github/workflows/ci-build-release-napi.yml
index 3765a76..ccdf6ac 100644
--- a/.github/workflows/ci-build-release-napi.yml
+++ b/.github/workflows/ci-build-release-napi.yml
@@ -50,15 +50,15 @@ jobs:
# macos-14 is used for arm64
os: macos-14
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js ${{ matrix.nodejs }}
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: ${{ matrix.nodejs }}
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
@@ -83,7 +83,7 @@ jobs:
npx node-pre-gyp package --target_arch=${{ matrix.arch }}
- name: Upload artifacts
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v7
with:
name: macos-${{matrix.nodejs}}-${{matrix.arch}}
path: build/stage/*/*.tar.gz
@@ -107,16 +107,16 @@ jobs:
steps:
- name: checkout
- uses: actions/checkout@v3
+ uses: actions/checkout@v7
- name: Set up QEMU
- uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3
+ uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
- name: Setup Docker Buildx
- uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
+ uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
- name: Build Linux Docker image
- uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf
+ uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
with:
file: ./pkg/linux/Dockerfile_${{matrix.image}}
load: true
@@ -135,7 +135,7 @@ jobs:
/pulsar-client-node/pkg/linux/build-napi-inside-docker.sh
- name: Upload artifacts
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v7
with:
name: ${{matrix.image}}-${{matrix.nodejs}}-${{matrix.cpu.platform}}
path: build/stage/*/*.tar.gz
@@ -156,22 +156,22 @@ jobs:
python:
- "3.10"
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js ${{ matrix.nodejs }}
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: ${{ matrix.nodejs }}
architecture: ${{ matrix.arch }}
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
- name: Cache CPP Client
id: cache-dependencies
- uses: actions/cache@v3
+ uses: actions/cache@v6
with:
path: pkg/windows/
key: ${{ runner.os }}-${{ matrix.arch }}-${{ hashFiles('pulsar-client-cpp.txt') }}
@@ -205,7 +205,7 @@ jobs:
npx node-pre-gyp package --target_arch=${{ env.TARGET }}
- name: Upload artifacts
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v7
with:
name: windows-${{matrix.nodejs}}-${{matrix.arch}}
path: build/stage/*/*.tar.gz
diff --git a/.github/workflows/ci-pr-validation.yml b/.github/workflows/ci-pr-validation.yml
index 375064d..78cd27c 100644
--- a/.github/workflows/ci-pr-validation.yml
+++ b/.github/workflows/ci-pr-validation.yml
@@ -36,14 +36,14 @@ jobs:
- "3.10"
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js 18
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: 18
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
@@ -60,9 +60,13 @@ jobs:
timeout-minutes: 120
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
+ - name: Check ASF action allowlist
+ uses: apache/infrastructure-actions/allowlist-check@main
+ with:
+ scan-glob: '.github/**/*.y*ml'
- name: Use Node.js 18
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: 18
@@ -92,15 +96,15 @@ jobs:
# macos-14 is used for arm64
os: macos-14
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js ${{ matrix.nodejs }}
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: ${{ matrix.nodejs }}
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
@@ -143,16 +147,16 @@ jobs:
steps:
- name: checkout
- uses: actions/checkout@v3
+ uses: actions/checkout@v7
- name: Set up QEMU
- uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3
+ uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
- name: Setup Docker Buildx
- uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
+ uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
- name: Build Linux Docker image
- uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf
+ uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
with:
file: ./pkg/linux/Dockerfile_${{matrix.image}}
load: true
@@ -199,22 +203,22 @@ jobs:
python:
- "3.10"
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js ${{ matrix.nodejs }}
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: ${{ matrix.nodejs }}
architecture: ${{ matrix.arch }}
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
- name: Cache CPP Client
id: cache-dependencies
- uses: actions/cache@v3
+ uses: actions/cache@v6
with:
path: pkg/windows/
key: ${{ runner.os }}-${{ matrix.arch }}-${{ hashFiles('pulsar-client-cpp.txt') }}
@@ -258,14 +262,14 @@ jobs:
- "3.10"
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js 18
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: 18
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}
- name: Install CPP lib
@@ -296,15 +300,15 @@ jobs:
- "3.10"
steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@v7
- name: Use Node.js 18
- uses: actions/setup-node@v3
+ uses: actions/setup-node@v7
with:
node-version: 18
cache: 'npm'
- name: Use Python ${{ matrix.python }}
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v7
with:
python-version: ${{ matrix.python }}