This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow-site-archive.git
The following commit(s) were added to refs/heads/main by this push:
new 55883bad21f Upgrade GitHub Actions and pre-commit hooks to latest
versions (#44)
55883bad21f is described below
commit 55883bad21fb56ecf30d94b9e895e83c90f2f1ee
Author: Jarek Potiuk <[email protected]>
AuthorDate: Sun Aug 9 10:27:33 2026 +0800
Upgrade GitHub Actions and pre-commit hooks to latest versions (#44)
Bumps all pinned actions and pre-commit hooks to the newest releases
that are outside the 7-day cooldown window configured in dependabot.yml:
* actions/checkout: v6.0.2 -> v7.0.1
* aws-actions/configure-aws-credentials: v6.1.0 -> v6.2.3
* apache/infrastructure-actions/allowlist-check: main pin refreshed
* zizmor-pre-commit: v1.24.1 -> v1.29.0
The checkout v7 breaking change (blocking fork PR checkout for
pull_request_target and workflow_run) does not affect us - none of the
workflows here use either trigger.
Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
---
.github/workflows/asf-allowlist-check.yml | 4 ++--
.github/workflows/build.yml | 2 +-
.github/workflows/github-to-s3.yml | 10 +++++-----
.github/workflows/s3-to-github.yml | 8 ++++----
.pre-commit-config.yaml | 2 +-
5 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 4066ccea383..1dcadde378a 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -29,7 +29,7 @@ jobs:
asf-allowlist-check:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses:
apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8
# main
+ - uses:
apache/infrastructure-actions/allowlist-check@0c35f063785c661e4280c480c0f99a53b5516db9
# main
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9d4ed58bbed..09730f6592e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
- name: "Install uv"
run: curl -LsSf https://astral.sh/uv/install.sh | sh
- name: "Checkout ${{ github.ref }} ( ${{ github.sha }} ) for scripts"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
# Checkout only workflow and scripts directory to run scripts from
with:
sparse-checkout: |
diff --git a/.github/workflows/github-to-s3.yml
b/.github/workflows/github-to-s3.yml
index dd1765865f7..91f560748d1 100644
--- a/.github/workflows/github-to-s3.yml
+++ b/.github/workflows/github-to-s3.yml
@@ -94,7 +94,7 @@ jobs:
fi
echo "commit-ref=${COMMIT_REFERENCE}" >> ${GITHUB_OUTPUT}
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
# Checkout only workflow and scripts directory to run scripts from
with:
sparse-checkout: |
@@ -111,7 +111,7 @@ jobs:
rm -rf /tmp/aws/
- name: Configure AWS credentials
- uses:
aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37
# v6.1.0
+ uses:
aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c
# v6.2.3
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -125,7 +125,7 @@ jobs:
sudo rm -rf "$AGENT_TOOLSDIRECTORY"
- name: "Checkout ${{ github.ref }} ( ${{ github.sha }} ) for scripts"
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
# Checkout only workflow and scripts directory to run scripts from
with:
sparse-checkout: |
@@ -173,7 +173,7 @@ jobs:
- name: >
Checkout (${{ steps.parameters.outputs.commit-ref }}) to
/mnt/cloned-airflow-site-archive
with docs packages: ${{
steps.docs-packages-processed.outputs.docs-packages-processed }}
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: ./cloned-airflow-site-archive
fetch-depth: 2
@@ -184,7 +184,7 @@ jobs:
if: steps.docs-packages-processed.outputs.docs-packages-processed !=
'all'
- name: >
Checkout (${{ steps.parameters.outputs.commit-ref }}) to
/mnt/cloned-airflow-site-archive (all packages)
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: ./cloned-airflow-site-archive
fetch-depth: 2
diff --git a/.github/workflows/s3-to-github.yml
b/.github/workflows/s3-to-github.yml
index 986b482d466..553b5c647e7 100644
--- a/.github/workflows/s3-to-github.yml
+++ b/.github/workflows/s3-to-github.yml
@@ -101,7 +101,7 @@ jobs:
rm -rf /tmp/aws/
- name: Configure AWS credentials
- uses:
aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37
# v6.1.0
+ uses:
aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c
# v6.2.3
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -148,7 +148,7 @@ jobs:
- name: >
Checkout (${{ inputs.commit-sha || github.sha }}) to
/mnt/cloned-airflow-site-archive
with docs: ${{
steps.docs-packages-processed.outputs.docs-packages-processed }}
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: ./cloned-airflow-site-archive
fetch-depth: 1
@@ -159,7 +159,7 @@ jobs:
- name: >
Checkout (${{ inputs.commit-sha || github.sha }}) to
/mnt/cloned-airflow-site-archive (whole repo)
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
path: ./cloned-airflow-site-archive
fetch-depth: 1
@@ -193,7 +193,7 @@ jobs:
working-directory: /mnt/cloned-airflow-site-archive
if: inputs.sync-registry == true
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
# Checkout airflow to run breeze
with:
repository: 'apache/airflow'
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 465c1c0a515..295e378257c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -26,7 +26,7 @@ repos:
- id: check-hooks-apply
- id: check-useless-excludes
- repo: https://github.com/woodruffw/zizmor-pre-commit
- rev: a4727cbbcd26d7098e96b9cb738169b59711ae51 # frozen: v1.24.1
+ rev: 451b56af716f9f0d0c2b816503a3fd0cf8b036fa # frozen: v1.29.0
hooks:
- id: zizmor
name: Run zizmor to check for github workflow syntax errors
