You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "david-streamlio (via GitHub)" <gi...@apache.org> on 2026/07/08 14:43:55 UTC
[PR] [fix][ci] Update setup-gradle action to v6.2.0 to match ASF actions allowlist [pulsar-connectors]
david-streamlio opened a new pull request, #37:
URL: https://github.com/apache/pulsar-connectors/pull/37
### Motivation
All CI runs in this repository currently fail at the "Setup Gradle" step with:
```
Error: The action gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f is not allowed in apache/pulsar-connectors because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ...
```
The pinned SHA (v6.0.1) was removed from the ASF GitHub Actions allowlist, so every workflow that uses the `.github/actions/setup-gradle` composite action fails before any build step runs (see e.g. the run on #31: https://github.com/apache/pulsar-connectors/actions/runs/28885273489).
This is the same breakage already fixed in apache/pulsar by apache/pulsar#26156 — this repository carries its own copy of the composite action, which was still pinned to the revoked SHA.
### Modifications
Bump both `gradle/actions/setup-gradle` pins in `.github/actions/setup-gradle/action.yml` from `39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f` (v6.0.1) to `3f131e8634966bd73d06cc69884922b02e6faf92` (v6.2.0), which matches the current ASF allowlist (`approved_patterns.yml` in infrastructure-actions-allow-list) — verified by the merged apache/pulsar fix passing CI with this SHA.
### Verification
CI on this PR itself demonstrates the fix: the "Build and License check" job gets past the Setup Gradle step again.
### Documentation
- [x] `doc-not-needed`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][ci] Update setup-gradle action to v6.2.0 to match ASF actions allowlist [pulsar-connectors]
Posted by "david-streamlio (via GitHub)" <gi...@apache.org>.
david-streamlio merged PR #37:
URL: https://github.com/apache/pulsar-connectors/pull/37
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][ci] Update setup-gradle action to v6.2.0 to match ASF actions allowlist [pulsar-connectors]
Posted by "david-streamlio (via GitHub)" <gi...@apache.org>.
david-streamlio commented on PR #37:
URL: https://github.com/apache/pulsar-connectors/pull/37#issuecomment-4916055345
Same issue and [fix](https://github.com/apache/pulsar/pull/26156) as in the apache/pulsar repo.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org