This is an automated email from the ASF dual-hosted git repository.
RyanSkraba pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/avro.git
The following commit(s) were added to refs/heads/main by this push:
new 2b5fe02502 AVRO-4348: Use infra-approved action for toolchain (#3953)
2b5fe02502 is described below
commit 2b5fe02502b77fc33c7b2f1a1f8184d46d7700d4
Author: Ryan Skraba <[email protected]>
AuthorDate: Sun Aug 23 13:42:22 2026 +0200
AVRO-4348: Use infra-approved action for toolchain (#3953)
* AVRO-4348: Use infra-approved action for toolchain
* AVRO-4348: Add action to validate allowed-actions
* Add license
---
.claude/settings.local.json | 17 ++++++++++++
.github/workflows/asf-allowlist-check.yml | 44 +++++++++++++++++++++++++++++++
.github/workflows/deploy-docs.yml | 2 +-
3 files changed, 62 insertions(+), 1 deletion(-)
diff --git a/.claude/settings.local.json b/.claude/settings.local.json
new file mode 100644
index 0000000000..b83266d280
--- /dev/null
+++ b/.claude/settings.local.json
@@ -0,0 +1,17 @@
+{
+ "permissions": {
+ "allow": [
+ "Bash(gh release *)",
+ "Bash(git log *)",
+ "Bash(python3 categorize2.py)",
+ "Bash(curl *)",
+ "Bash(sed -i 's/Javascript/JavaScript/g'
doc/content/en/blog/releases/avro-1.12.2-released.md)",
+ "Bash(sed -i 's/Javascript/JavaScript/g'
.claude/skills/avro-release-notes/SKILL.md)",
+ "Bash(gh pr *)",
+ "Bash(git fetch *)",
+ "Bash(gh api *)",
+ "Bash(git ls-remote *)",
+ "Bash(grep -v 'apache-tmp/main$')"
+ ]
+ }
+}
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
new file mode 100644
index 0000000000..8ced25a9de
--- /dev/null
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -0,0 +1,44 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+
+name: "ASF Allowlist Check"
+
+on:
+ workflow_dispatch:
+ pull_request:
+ paths:
+ - ".github/**"
+ push:
+ branches:
+ - main
+ paths:
+ - ".github/**"
+
+permissions:
+ contents: read
+
+jobs:
+ asf-allowlist-check:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ with:
+ persist-credentials: false
+ - uses: apache/infrastructure-actions/allowlist-check@main
diff --git a/.github/workflows/deploy-docs.yml
b/.github/workflows/deploy-docs.yml
index ed20a8287d..818288da5c 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -203,7 +203,7 @@ jobs:
repository: 'apache/avro-rs'
- name: Rust Toolchain
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
# stable
with:
toolchain: stable
