You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@datafusion.apache.org by "sandy-sachin7 (via GitHub)" <gi...@apache.org> on 2026/06/20 20:48:33 UTC
[PR] fix: pin action SHAs in dev.yml (backport to maint-16.x) [datafusion]
sandy-sachin7 opened a new pull request, #23062:
URL: https://github.com/apache/datafusion/pull/23062
## Which issue does this PR close?
- Closes #23037
## Rationale for this change
The default branch already hardened `.github/workflows/dev.yml` against unpinned-uses (commit SHAs instead of mutable tags), but the `maint-16.x` release branch still uses mutable tags. This backports the same fix.
## What changes are included in this PR?
Pin the following actions to their commit SHA (with the version tag as a comment):
| Action | Previous | Pinned SHA |
|--------|----------|------------|
| `actions/checkout` (rat job) | `@v3` | `f43a0e5ff2bd294095638e18286ca9a3d1956744` |
| `actions/setup-python` (rat job) | `@v4` | `0ae58361cdfd39e2950bed97a1e26aa20c3d8955` |
| `actions/checkout` (prettier job) | `@v3` | `f43a0e5ff2bd294095638e18286ca9a3d1956744` |
| `actions/setup-node` (prettier job) | `@v3` | `3235b876344d2a9aa001b8d1453c930bba69e610` |
## Are these changes tested?
Checked with `actionlint` — no new lint or security findings introduced. The fix matches the pattern already applied on the default branch.
## Are there any user-facing changes?
No — CI workflow only.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [PR] fix: pin action SHAs in dev.yml (backport to maint-16.x) [datafusion]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed pull request #23062: fix: pin action SHAs in dev.yml (backport to maint-16.x)
URL: https://github.com/apache/datafusion/pull/23062
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [PR] fix: pin action SHAs in dev.yml (backport to maint-16.x) [datafusion]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #23062:
URL: https://github.com/apache/datafusion/pull/23062#issuecomment-5389858777
Thank you for your contribution. Unfortunately, this pull request is stale because it has been open 60 days with no activity. Please remove the stale label or comment or this will be closed in 7 days.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org
Re: [PR] fix: pin action SHAs in dev.yml (backport to maint-16.x) [datafusion]
Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on PR #23062:
URL: https://github.com/apache/datafusion/pull/23062#issuecomment-4794302629
I don't think we are actively maintaining the version 16 bracnch, so we likely won't merge this one
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscribe@datafusion.apache.org
For additional commands, e-mail: github-help@datafusion.apache.org