This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 4969b1aeda4 Bump the github-actions-updates group with 10 updates
(#74880)
4969b1aeda4 is described below
commit 4969b1aeda485ab6e1e2c43eaa605cb93d38135c
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Oct 18 20:11:01 2026 +0200
Bump the github-actions-updates group with 10 updates (#74880)
* Bump the github-actions-updates group with 10 updates
Bumps the github-actions-updates group with 10 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` |
`7.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) |
`7.0.1` | `7.0.2` |
|
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
| `1.0.0` | `1.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact)
| `8.0.1` | `8.0.2` |
|
[apache/infrastructure-actions/stash/restore](https://github.com/apache/infrastructure-actions)
| `1.0.0` | `1.0.1` |
|
[apache/infrastructure-actions/stash/save](https://github.com/apache/infrastructure-actions)
| `1.0.0` | `1.0.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` |
`10.3.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.38.2` | `4.38.3` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action)
| `4.38.2` | `4.38.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.38.2` | `4.38.3` |
Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
-
[Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1)
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
-
[Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)
Updates `apache/infrastructure-actions/allowlist-check` from 1.0.0 to 1.0.1
-
[Commits](https://github.com/apache/infrastructure-actions/compare/61dcea11f19e2bbe1263f14d72235e8da17d3ad0...f1a487181effd0b216892001abdfb524442bb24d)
Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
-
[Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333)
Updates `apache/infrastructure-actions/stash/restore` from 1.0.0 to 1.0.1
-
[Commits](https://github.com/apache/infrastructure-actions/compare/61dcea11f19e2bbe1263f14d72235e8da17d3ad0...f1a487181effd0b216892001abdfb524442bb24d)
Updates `apache/infrastructure-actions/stash/save` from 1.0.0 to 1.0.1
-
[Commits](https://github.com/apache/infrastructure-actions/compare/61dcea11f19e2bbe1263f14d72235e8da17d3ad0...f1a487181effd0b216892001abdfb524442bb24d)
Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
-
[Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884)
Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/autobuild` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: 1.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: actions/download-artifact
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: apache/infrastructure-actions/stash/restore
dependency-version: 1.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: apache/infrastructure-actions/stash/save
dependency-version: 1.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/init
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
* Pin stash/restore and allowlist-check to their own v1.0.1 tag commits
Dependabot pinned all apache/infrastructure-actions sub-actions to the
save/v1.0.1 commit, so the restore and allowlist-check pins no longer matched
their version comments.
Generated-by: Claude Opus 5
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jarek Potiuk <[email protected]>
---
.github/workflows/airflow-e2e-tests.yml | 4 ++--
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/basic-tests.yml | 2 +-
.github/workflows/ci-amd.yml | 12 ++++++------
.github/workflows/ci-arm.yml | 12 ++++++------
.github/workflows/ci-duration-monitor.yml | 2 +-
.github/workflows/ci-image-build.yml | 16 ++++++++--------
.github/workflows/ci-image-checks.yml | 10 +++++-----
.github/workflows/ci-notification.yml | 4 ++--
.github/workflows/codeql-analysis.yml | 6 +++---
.github/workflows/e2e-flaky-tests-report.yml | 2 +-
.github/workflows/finalize-tests.yml | 2 +-
.github/workflows/generate-constraints.yml | 2 +-
.github/workflows/helm-tests.yml | 2 +-
.github/workflows/k8s-tests.yml | 6 +++---
.github/workflows/notify-uv-lock-conflicts.yml | 2 +-
.github/workflows/openlineage-e2e-compat-tests.yml | 2 +-
.github/workflows/prod-image-build.yml | 8 ++++----
.github/workflows/publish-docs-to-s3.yml | 20 ++++++++++----------
.github/workflows/push-image-cache.yml | 2 +-
.github/workflows/registry-backfill.yml | 2 +-
.github/workflows/registry-build.yml | 4 ++--
.github/workflows/registry-tests.yml | 2 +-
.github/workflows/release-constraints.yml | 2 +-
.github/workflows/release_single_dockerhub_image.yml | 4 ++--
.../workflows/scheduled-verify-release-calendar.yml | 2 +-
.github/workflows/ts-sdk-release.yml | 8 ++++----
.github/workflows/ui-e2e-tests.yml | 6 +++---
.../workflows/update-constraints-on-push-stable.yml | 2 +-
.github/workflows/update-constraints-on-push.yml | 2 +-
30 files changed, 76 insertions(+), 76 deletions(-)
diff --git a/.github/workflows/airflow-e2e-tests.yml
b/.github/workflows/airflow-e2e-tests.yml
index eea84eb86b5..62e4bc598e2 100644
--- a/.github/workflows/airflow-e2e-tests.yml
+++ b/.github/workflows/airflow-e2e-tests.yml
@@ -181,7 +181,7 @@ jobs:
run_install: false
- name: "Setup Node for the TypeScript SDK build"
if: inputs.e2e_test_mode == 'ts_sdk'
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 22
cache: 'pnpm'
@@ -219,7 +219,7 @@ jobs:
cd ./airflow-e2e-tests && zip -r logs.zip logs
if: always()
- name: "Upload logs"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "e2e-test-logs-${{ inputs.e2e_test_mode }}"
path: './airflow-e2e-tests/logs.zip'
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 058c5aca453..0f66354083f 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -32,4 +32,4 @@ jobs:
with:
persist-credentials: false
# yamllint disable-line rule:line-length
- - uses:
apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# allowlist-check/v1.0.0
+ - uses:
apache/infrastructure-actions/allowlist-check@df54e48ff76152790f317934c691cfa7fd7a1a46
# allowlist-check/v1.0.1
diff --git a/.github/workflows/basic-tests.yml
b/.github/workflows/basic-tests.yml
index f8f75cc0132..940d158ea39 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -203,7 +203,7 @@ jobs:
version: 9
run_install: false
- name: "Setup node"
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 24
cache: 'pnpm'
diff --git a/.github/workflows/ci-amd.yml b/.github/workflows/ci-amd.yml
index bbd4a7bae76..82faa9b3cfe 100644
--- a/.github/workflows/ci-amd.yml
+++ b/.github/workflows/ci-amd.yml
@@ -1050,7 +1050,7 @@ jobs:
run_install: false
# keep this in sync with the Node version in ts-sdk-release.yml
- name: Setup node
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: "24.19.0"
cache: 'pnpm'
@@ -1118,7 +1118,7 @@ jobs:
- name: "Build Java SDK Javadoc"
run: breeze build-docs --sdk-docs-only --sdk=java
- name: "Upload Javadoc artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: java-sdk-docs
path: generated/_build/docs/java-sdk/
@@ -1150,7 +1150,7 @@ jobs:
- name: "Build TypeScript SDK API reference"
run: breeze build-docs --sdk-docs-only --sdk=typescript
- name: "Upload TypeScript SDK docs artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: ts-sdk-docs
path: generated/_build/docs/ts-sdk/
@@ -1301,7 +1301,7 @@ jobs:
CURRENT_FAILURES: "${{ steps.get-failures.outputs.failed-jobs }}"
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: "Upload notification state"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "slack-state-tests-${{ github.ref_name }}-amd"
path: ./slack-state/
@@ -1388,7 +1388,7 @@ jobs:
shell: bash
run: ./scripts/tools/free_up_disk_space.sh
- name: "Download all test warning artifacts from the current build"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
path: ./artifacts
pattern: test-warnings-*
@@ -1402,7 +1402,7 @@ jobs:
--pattern "**/warnings-*.txt" \
--output ./files
- name: "Upload artifact for summarized warnings"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "test-summarized-warnings"
path: ./files/warn-summary-*.txt
diff --git a/.github/workflows/ci-arm.yml b/.github/workflows/ci-arm.yml
index 86f748b347e..6f5eb5eb27e 100644
--- a/.github/workflows/ci-arm.yml
+++ b/.github/workflows/ci-arm.yml
@@ -1039,7 +1039,7 @@ jobs:
run_install: false
# keep this in sync with the Node version in ts-sdk-release.yml
- name: Setup node
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: "24.19.0"
cache: 'pnpm'
@@ -1107,7 +1107,7 @@ jobs:
- name: "Build Java SDK Javadoc"
run: breeze build-docs --sdk-docs-only --sdk=java
- name: "Upload Javadoc artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: java-sdk-docs
path: generated/_build/docs/java-sdk/
@@ -1139,7 +1139,7 @@ jobs:
- name: "Build TypeScript SDK API reference"
run: breeze build-docs --sdk-docs-only --sdk=typescript
- name: "Upload TypeScript SDK docs artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: ts-sdk-docs
path: generated/_build/docs/ts-sdk/
@@ -1290,7 +1290,7 @@ jobs:
CURRENT_FAILURES: "${{ steps.get-failures.outputs.failed-jobs }}"
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: "Upload notification state"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "slack-state-tests-${{ github.ref_name }}-arm"
path: ./slack-state/
@@ -1377,7 +1377,7 @@ jobs:
shell: bash
run: ./scripts/tools/free_up_disk_space.sh
- name: "Download all test warning artifacts from the current build"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
path: ./artifacts
pattern: test-warnings-*
@@ -1391,7 +1391,7 @@ jobs:
--pattern "**/warnings-*.txt" \
--output ./files
- name: "Upload artifact for summarized warnings"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "test-summarized-warnings"
path: ./files/warn-summary-*.txt
diff --git a/.github/workflows/ci-duration-monitor.yml
b/.github/workflows/ci-duration-monitor.yml
index 52f2d06c2fb..5c19ba20e4f 100644
--- a/.github/workflows/ci-duration-monitor.yml
+++ b/.github/workflows/ci-duration-monitor.yml
@@ -74,7 +74,7 @@ jobs:
payload-file-path: "slack-message.json"
- name: "Upload duration analysis"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "ci-duration-analysis"
path: slack-message.json
diff --git a/.github/workflows/ci-image-build.yml
b/.github/workflows/ci-image-build.yml
index 1541337bc5c..31241dd059d 100644
--- a/.github/workflows/ci-image-build.yml
+++ b/.github/workflows/ci-image-build.yml
@@ -168,7 +168,7 @@ jobs:
Restore the commit the CI image stashed for ref ${{
inputs.image-stash-ref }}
was built from
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
key: "ci-image-commit-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
-${{ inputs.image-stash-ref }}"
@@ -202,7 +202,7 @@ jobs:
Restore CI docker image built for ref ${{ inputs.image-stash-ref }}
${{ inputs.platform }}:${{ env.PYTHON_MAJOR_MINOR_VERSION }}
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
key: "ci-image-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
-${{ inputs.image-stash-ref }}"
@@ -218,7 +218,7 @@ jobs:
Restore ci-cache mount image ${{ inputs.platform }}:${{
env.PYTHON_MAJOR_MINOR_VERSION }}
${{ inputs.image-stash-ref != '' && format('for ref {0}',
inputs.image-stash-ref) || '' }}
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
key: "ci-cache-mount-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
${{ inputs.image-stash-ref != '' && format('-{0}',
inputs.image-stash-ref) || '' }}"
@@ -246,7 +246,7 @@ jobs:
if: steps.restore-cache-mount.outputs.stash-hit == 'true'
- name: "Restore CI docker image ${{ inputs.platform }}:${{
env.PYTHON_MAJOR_MINOR_VERSION }}"
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
key: "ci-image-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}"
path: "/mnt/"
@@ -337,7 +337,7 @@ jobs:
shell: bash
if: inputs.upload-image-artifact == 'true' &&
steps.stashed-image.outputs.reusable != 'true'
- name: "Stash CI docker image ${{ env.PYTHON_MAJOR_MINOR_VERSION }}"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
key: ci-image-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}
path: "/mnt/ci-image-save-*-${{ env.PYTHON_MAJOR_MINOR_VERSION
}}.tar"
@@ -351,7 +351,7 @@ jobs:
# what a later publish of that same ref reads - hence a retention that
outlives the shared
# one, the same ref being rebuilt three days apart at the very least.
- name: "Stash CI docker image built for ref ${{ inputs.image-stash-ref
}}"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
key: "ci-image-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
-${{ inputs.image-stash-ref }}"
@@ -365,7 +365,7 @@ jobs:
# Saved last and with the image's retention, so that finding this commit
is enough to
# know the image it describes is there to be restored.
- name: "Stash the commit the CI image for ref ${{
inputs.image-stash-ref }} was built from"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
key: "ci-image-commit-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
-${{ inputs.image-stash-ref }}"
@@ -387,7 +387,7 @@ jobs:
- name: >
Stash cache mount ${{ inputs.platform }}:${{
env.PYTHON_MAJOR_MINOR_VERSION }}
${{ inputs.image-stash-ref != '' && format('for ref {0}',
inputs.image-stash-ref) || '' }}
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
key: "ci-cache-mount-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}\
${{ inputs.image-stash-ref != '' && format('-{0}',
inputs.image-stash-ref) || '' }}"
diff --git a/.github/workflows/ci-image-checks.yml
b/.github/workflows/ci-image-checks.yml
index 7de37750488..cfa36084d46 100644
--- a/.github/workflows/ci-image-checks.yml
+++ b/.github/workflows/ci-image-checks.yml
@@ -202,7 +202,7 @@ jobs:
make-mnt-writeable-and-cleanup: true
- name: "Restore docs inventory cache"
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
path: ./generated/_inventory_cache/
key: cache-docs-inventory-v1
@@ -259,7 +259,7 @@ jobs:
if: >-
always() &&
inputs.canary-run == 'true'
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
# yamllint disable-line rule:line-length
name: "slack-state-inventory-${{ inputs.branch }}-${{
contains(inputs.platform, 'arm') && 'arm' || 'amd' }}"
@@ -312,7 +312,7 @@ jobs:
env:
SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
- name: "Save docs inventory cache"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
path: ./generated/_inventory_cache/
key: cache-docs-inventory-v1
@@ -320,7 +320,7 @@ jobs:
retention-days: '2'
if: steps.restore-docs-inventory-cache.outputs.stash-hit != 'true'
- name: "Upload build docs"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: airflow-docs
path: './generated/_build'
@@ -361,7 +361,7 @@ jobs:
use-uv: ${{ inputs.use-uv }}
make-mnt-writeable-and-cleanup: true
- name: "Download docs prepared as artifacts"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: airflow-docs
path: './generated/_build'
diff --git a/.github/workflows/ci-notification.yml
b/.github/workflows/ci-notification.yml
index 33d2b0a69a2..f5743d0d6eb 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -48,7 +48,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 #
v10.3.0
with:
version-file: uv.lock
@@ -73,7 +73,7 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: "Upload notification state"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "slack-state-ci-${{ matrix.branch }}-${{ matrix.workflow-id }}"
path: ./slack-state/
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 0b376d3377c..c1b8f8c6018 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -136,13 +136,13 @@ jobs:
java-version: '11'
- name: Initialize CodeQL
- uses:
github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
with:
languages: ${{ matrix.language }}
- name: Autobuild
if: matrix.language != 'java'
- uses:
github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #
v4.38.2
+ uses:
github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d #
v4.38.3
- name: Build Java SDK
if: matrix.language == 'java'
@@ -150,7 +150,7 @@ jobs:
run: ./gradlew classes testClasses
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/e2e-flaky-tests-report.yml
b/.github/workflows/e2e-flaky-tests-report.yml
index 712dd81da39..f0fb712a0ea 100644
--- a/.github/workflows/e2e-flaky-tests-report.yml
+++ b/.github/workflows/e2e-flaky-tests-report.yml
@@ -62,7 +62,7 @@ jobs:
payload-file-path: "slack-message.json"
- name: "Upload analysis results"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "e2e-flaky-test-analysis"
path: slack-message.json
diff --git a/.github/workflows/finalize-tests.yml
b/.github/workflows/finalize-tests.yml
index 8165c981cb8..043aa8f0ebf 100644
--- a/.github/workflows/finalize-tests.yml
+++ b/.github/workflows/finalize-tests.yml
@@ -114,7 +114,7 @@ jobs:
persist-credentials: true
fetch-depth: 0
- name: "Download constraints from the constraints generated by build CI
image"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: constraints-*
path: ./files
diff --git a/.github/workflows/generate-constraints.yml
b/.github/workflows/generate-constraints.yml
index 6fe4e5be2ce..9846e44ce71 100644
--- a/.github/workflows/generate-constraints.yml
+++ b/.github/workflows/generate-constraints.yml
@@ -192,7 +192,7 @@ jobs:
token: ${{ secrets.SLACK_BOT_TOKEN }}
payload-file-path: ${{ steps.downgrade-alert.outputs.message-file }}
- name: "Upload constraint artifacts"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: constraints-${{ matrix.python-version }}
path: ./files/constraints-${{ matrix.python-version
}}/constraints-*.txt
diff --git a/.github/workflows/helm-tests.yml b/.github/workflows/helm-tests.yml
index 01060f8fbfd..7e779afcc2a 100644
--- a/.github/workflows/helm-tests.yml
+++ b/.github/workflows/helm-tests.yml
@@ -148,7 +148,7 @@ jobs:
breeze release-management generate-issue-content-helm-chart
--limit-pr-count 2
--previous-release helm-chart/1.15.0 --current-release
helm-chart/1.16.0 --verbose
- name: "Upload Helm artifacts"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: Helm artifacts
path: ./dist/airflow-*
diff --git a/.github/workflows/k8s-tests.yml b/.github/workflows/k8s-tests.yml
index e4e3a6147ae..7f34b986197 100644
--- a/.github/workflows/k8s-tests.yml
+++ b/.github/workflows/k8s-tests.yml
@@ -128,7 +128,7 @@ jobs:
- name: "\
Upload KinD logs ${{ matrix.executor }}-${{ matrix.kubernetes-combo
}}-\
${{ matrix.use-standard-naming }}"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "\
kind-logs-${{ matrix.kubernetes-combo }}-${{ matrix.executor }}-\
@@ -223,7 +223,7 @@ jobs:
package_json_file: ts-sdk/package.json
run_install: false
- name: "Setup Node for the lang-SDK TypeScript build"
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 22
cache: 'pnpm'
@@ -251,7 +251,7 @@ jobs:
done
if: failure() || cancelled() || inputs.include-success-outputs ==
'true'
- name: "Upload KinD logs lang-sdk-${{ inputs.lang-sdk-kubernetes-combo
}}"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "kind-logs-lang-sdk-${{ inputs.lang-sdk-kubernetes-combo }}"
path: /tmp/kind_logs_*
diff --git a/.github/workflows/notify-uv-lock-conflicts.yml
b/.github/workflows/notify-uv-lock-conflicts.yml
index e5065bc20f2..6bf6b390425 100644
--- a/.github/workflows/notify-uv-lock-conflicts.yml
+++ b/.github/workflows/notify-uv-lock-conflicts.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 #
v10.3.0
with:
version-file: uv.lock
- name: "Notify open PRs"
diff --git a/.github/workflows/openlineage-e2e-compat-tests.yml
b/.github/workflows/openlineage-e2e-compat-tests.yml
index 38795399007..4b9cb6d4408 100644
--- a/.github/workflows/openlineage-e2e-compat-tests.yml
+++ b/.github/workflows/openlineage-e2e-compat-tests.yml
@@ -97,7 +97,7 @@ jobs:
cd ./airflow-e2e-tests && zip -r logs.zip logs
- name: "Upload logs"
if: ${{ always() && !startsWith(inputs.airflow-version, '2.') }}
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "openlineage-e2e-compat-logs-${{ inputs.airflow-version }}"
path: './airflow-e2e-tests/logs.zip'
diff --git a/.github/workflows/prod-image-build.yml
b/.github/workflows/prod-image-build.yml
index b171215f629..447eb50a525 100644
--- a/.github/workflows/prod-image-build.yml
+++ b/.github/workflows/prod-image-build.yml
@@ -180,7 +180,7 @@ jobs:
breeze release-management prepare-airflow-ctl-distributions
--distribution-format wheel
if: inputs.upload-package-artifact == 'true'
- name: "Upload prepared packages as artifacts"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: prod-packages
path: ./dist
@@ -231,12 +231,12 @@ jobs:
shell: bash
run: rm -fv ./dist/* ./docker-context-files/*
- name: "Download packages prepared as artifacts"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: prod-packages
path: ./docker-context-files
- name: "Download constraints"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: constraints-${{ matrix.python-version }}
path: ./docker-context-files/constraints-${{ matrix.python-version }}
@@ -284,7 +284,7 @@ jobs:
breeze prod-image save --platform "${PLATFORM}" --image-file-dir
"/mnt"
if: inputs.upload-image-artifact == 'true'
- name: "Stash PROD docker image ${{ env.PYTHON_MAJOR_MINOR_VERSION }}"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
with:
key: prod-image-save-v3-${{ inputs.platform }}-${{
env.PYTHON_MAJOR_MINOR_VERSION }}
path: "/mnt/prod-image-save-*-${{ env.PYTHON_MAJOR_MINOR_VERSION
}}.tar"
diff --git a/.github/workflows/publish-docs-to-s3.yml
b/.github/workflows/publish-docs-to-s3.yml
index 3d57c2074f9..84d5292d0df 100644
--- a/.github/workflows/publish-docs-to-s3.yml
+++ b/.github/workflows/publish-docs-to-s3.yml
@@ -347,7 +347,7 @@ jobs:
secrets.CONSTRAINTS_GITHUB_REPOSITORY || 'apache/airflow' }}
- name: "Restore docs inventory cache"
# yamllint disable-line rule:line-length
- uses:
apache/infrastructure-actions/stash/restore@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# restore/v1.0.0
+ uses:
apache/infrastructure-actions/stash/restore@c968777141a2afc98d1a09c9f6979455bfebaae3
# restore/v1.0.1
with:
path: ./generated/_inventory_cache/
key: cache-docs-inventory-v1
@@ -383,7 +383,7 @@ jobs:
breeze build-docs ${SPHINX_INCLUDE_DOCS} ${DOCS_ONLY}
${FAIL_ON_INVENTORIES}
fi
- name: "Save docs inventory cache"
- uses:
apache/infrastructure-actions/stash/save@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# save/v1.0.0
+ uses:
apache/infrastructure-actions/stash/save@f1a487181effd0b216892001abdfb524442bb24d
# save/v1.0.1
if: >-
steps.restore-docs-inventory-cache.outputs.stash-hit != 'true' &&
steps.build-sphinx-docs.outputs.sphinx-build-skipped != 'true'
@@ -411,7 +411,7 @@ jobs:
cp files/supervisor-schema.json schemas/supervisor-schema.json
- name: "Upload schema artifacts"
if: needs.build-info.outputs.publish-execution-api-schema == 'true' ||
needs.build-info.outputs.publish-supervisor-schema == 'true'
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: airflow-schemas
path: schemas/
@@ -432,7 +432,7 @@ jobs:
exit 1
fi
- name: "Upload build docs"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: airflow-docs
path: /mnt/_build
@@ -490,7 +490,7 @@ jobs:
run: breeze build-docs --sdk-docs-only --sdk=java
- name: "Upload Java SDK docs"
if: steps.sdk-present.outputs.exists == 'true'
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: java-sdk-docs
path: generated/_build/docs/java-sdk/
@@ -555,7 +555,7 @@ jobs:
run: breeze build-docs --sdk-docs-only --sdk=typescript
- name: "Upload TypeScript SDK docs"
if: steps.sdk-present.outputs.exists == 'true'
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: ts-sdk-docs
path: generated/_build/docs/ts-sdk/
@@ -605,7 +605,7 @@ jobs:
- name: "Install Breeze"
uses: ./.github/actions/breeze
- name: "Download docs prepared as artifacts"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: airflow-docs
path: /mnt/_build
@@ -613,13 +613,13 @@ jobs:
run: mv /mnt/_build generated/_build
- name: "Download Java SDK docs artifact"
if: needs.build-java-sdk-docs.outputs.built == 'true'
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: java-sdk-docs
path: generated/_build/docs/java-sdk
- name: "Download TypeScript SDK docs artifact"
if: needs.build-ts-sdk-docs.outputs.built == 'true'
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: ts-sdk-docs
path: generated/_build/docs/ts-sdk
@@ -697,7 +697,7 @@ jobs:
--exclude-docs "${EXCLUDE_DOCS}" --overwrite
${SKIP_WRITE_TO_STABLE_FOLDER}
- name: "Download schema artifacts"
if: needs.build-info.outputs.publish-execution-api-schema == 'true' ||
needs.build-info.outputs.publish-supervisor-schema == 'true'
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: airflow-schemas
path: schemas
diff --git a/.github/workflows/push-image-cache.yml
b/.github/workflows/push-image-cache.yml
index 575eb546aec..763f0b9c219 100644
--- a/.github/workflows/push-image-cache.yml
+++ b/.github/workflows/push-image-cache.yml
@@ -194,7 +194,7 @@ jobs:
- name: "Cleanup dist and context file"
run: rm -fv ./dist/* ./docker-context-files/*
- name: "Download packages prepared as artifacts"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: prod-packages
path: ./docker-context-files
diff --git a/.github/workflows/registry-backfill.yml
b/.github/workflows/registry-backfill.yml
index 0181c1d8a08..e47631e2d19 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -223,7 +223,7 @@ jobs:
version: 10
- name: "Setup Node.js"
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 24
cache: 'pnpm'
diff --git a/.github/workflows/registry-build.yml
b/.github/workflows/registry-build.yml
index 241a8659ab0..afc3fa59ae3 100644
--- a/.github/workflows/registry-build.yml
+++ b/.github/workflows/registry-build.yml
@@ -282,7 +282,7 @@ jobs:
version: 10
- name: "Setup Node.js"
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 24
cache: 'pnpm'
@@ -299,7 +299,7 @@ jobs:
run: pnpm build
- name: "Upload registry artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: registry-site
path: registry/_site
diff --git a/.github/workflows/registry-tests.yml
b/.github/workflows/registry-tests.yml
index 27fb9e35c6e..8c6e1ac3972 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -56,7 +56,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 #
v10.3.0
with:
python-version: "3.12"
diff --git a/.github/workflows/release-constraints.yml
b/.github/workflows/release-constraints.yml
index 9c10f291f86..c2e61fc9090 100644
--- a/.github/workflows/release-constraints.yml
+++ b/.github/workflows/release-constraints.yml
@@ -227,7 +227,7 @@ jobs:
persist-credentials: true
fetch-depth: 0
- name: "Download constraints from the generate-constraints job"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: constraints-*
path: ./files
diff --git a/.github/workflows/release_single_dockerhub_image.yml
b/.github/workflows/release_single_dockerhub_image.yml
index 19315247a4c..adc58f8dc60 100644
--- a/.github/workflows/release_single_dockerhub_image.yml
+++ b/.github/workflows/release_single_dockerhub_image.yml
@@ -145,7 +145,7 @@ jobs:
shell: bash
run: find ./dist -name '*.json'
- name: "Upload metadata artifact ${{ env.ARTIFACT_NAME }}"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: ${{ env.ARTIFACT_NAME }}
path: ./dist/metadata-*
@@ -190,7 +190,7 @@ jobs:
ACTOR: ${{ github.actor }}
run: echo "${GITHUB_TOKEN}" | docker login ghcr.io -u ${ACTOR}
--password-stdin
- name: "Download metadata artifacts"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
path: ./dist
pattern: metadata-${{ inputs.pythonVersion }}-*
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml
b/.github/workflows/scheduled-verify-release-calendar.yml
index f78eb566e4a..537d573b2b9 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -35,7 +35,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
+ uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 #
v10.3.0
with:
version-file: uv.lock
- name: "Verify release calendar"
diff --git a/.github/workflows/ts-sdk-release.yml
b/.github/workflows/ts-sdk-release.yml
index 57debc133d9..0019a0ba03e 100644
--- a/.github/workflows/ts-sdk-release.yml
+++ b/.github/workflows/ts-sdk-release.yml
@@ -59,7 +59,7 @@ jobs:
fetch-depth: 0
persist-credentials: false
- name: Set up Node.js
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: "24.19.0"
registry-url: "https://registry.npmjs.org";
@@ -143,7 +143,7 @@ jobs:
echo "artifact_name=ts-sdk-package-${VERSION}" >> "${GITHUB_OUTPUT}"
echo "sha256=$(sha256sum "${artifact_path}" | awk '{print $1}')" >>
"${GITHUB_OUTPUT}"
- name: Upload package tarball
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: ${{ steps.package.outputs.artifact_name }}
path: ${{ runner.temp }}/ts-sdk-package/${{
steps.release.outputs.package_file }}
@@ -161,7 +161,7 @@ jobs:
id-token: write
steps:
- name: Set up Node.js
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: "24.19.0"
registry-url: "https://registry.npmjs.org";
@@ -181,7 +181,7 @@ jobs:
}
'
- name: Download verified package tarball
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: ${{ needs.build.outputs.artifact_name }}
path: ${{ runner.temp }}/ts-sdk-package
diff --git a/.github/workflows/ui-e2e-tests.yml
b/.github/workflows/ui-e2e-tests.yml
index 519f0f11746..8b8ad21e4bf 100644
--- a/.github/workflows/ui-e2e-tests.yml
+++ b/.github/workflows/ui-e2e-tests.yml
@@ -126,7 +126,7 @@ jobs:
version: 9
run_install: false
- name: "Setup node"
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
+ uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 #
v7.1.0
with:
node-version: 24
cache: 'pnpm'
@@ -159,7 +159,7 @@ jobs:
env:
DOCKER_IMAGE: "${{ inputs.docker-image-tag || '' }}"
- name: "Upload test results"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "playwright-report-${{ env.BROWSER }}"
path: |
@@ -178,7 +178,7 @@ jobs:
RUN_ATTEMPT: "${{ github.run_attempt }}"
if: always()
- name: "Upload E2E test report"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
with:
name: "e2e-test-report-${{ env.BROWSER }}"
path: e2e-test-report/
diff --git a/.github/workflows/update-constraints-on-push-stable.yml
b/.github/workflows/update-constraints-on-push-stable.yml
index c194c120a9a..744ee4bc93f 100644
--- a/.github/workflows/update-constraints-on-push-stable.yml
+++ b/.github/workflows/update-constraints-on-push-stable.yml
@@ -143,7 +143,7 @@ jobs:
persist-credentials: true
fetch-depth: 0
- name: "Download constraints from the generate-constraints job"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: constraints-*
path: ./files
diff --git a/.github/workflows/update-constraints-on-push.yml
b/.github/workflows/update-constraints-on-push.yml
index 9e753a6527a..ba55e09d9eb 100644
--- a/.github/workflows/update-constraints-on-push.yml
+++ b/.github/workflows/update-constraints-on-push.yml
@@ -218,7 +218,7 @@ jobs:
persist-credentials: true
fetch-depth: 0
- name: "Download constraints from the generate-constraints job"
- uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+ uses:
actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: constraints-*
path: ./files
