You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fluss.apache.org by le...@apache.org on 2026/03/28 20:55:44 UTC
(fluss-rust) 01/01: ci: pin astral-sh/setup-uv to SHA for ASF allowlist compliance
This is an automated email from the ASF dual-hosted git repository.
leekei pushed a commit to branch fix/pin-setup-uv-sha
in repository https://gitbox.apache.org/repos/asf/fluss-rust.git
commit 4f47baf039e028528973d147677f85f2ec433a78
Author: Keith Lee <le...@apache.org>
AuthorDate: Sat Mar 28 20:55:34 2026 +0000
ci: pin astral-sh/setup-uv to SHA for ASF allowlist compliance
Pin astral-sh/setup-uv from @v4 to specific commit SHA
(e06108dd0aef18192324c70427afc47652e63a82, v7.5.0) to comply with
the ASF GitHub Actions allowlist policy.
Closes #453
---
.github/workflows/build_and_test_python.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/build_and_test_python.yml b/.github/workflows/build_and_test_python.yml
index efb5caa..26f8d43 100644
--- a/.github/workflows/build_and_test_python.yml
+++ b/.github/workflows/build_and_test_python.yml
@@ -53,7 +53,7 @@ jobs:
python-version: ${{ matrix.python }}
- name: Install uv
- uses: astral-sh/setup-uv@v4
+ uses: astral-sh/setup-uv@e06108dd0aef18192324c70427afc47652e63a82 # v7.5.0
- name: Install protoc
run: sudo apt-get update && sudo apt-get install -y protobuf-compiler