This is an automated email from the ASF dual-hosted git repository.

tuhaihe pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cloudberry-pxf.git


The following commit(s) were added to refs/heads/main by this push:
     new 9c4d1c73 Update gradle/actions/dependency-submission to v6.1.0
9c4d1c73 is described below

commit 9c4d1c73b01c4fe491a5df2aaedbff89698cbcd7
Author: Dianjin Wang <[email protected]>
AuthorDate: Tue Jun 16 12:06:54 2026 +0800

    Update gradle/actions/dependency-submission to v6.1.0
    
    v5.0.0 is no longer in the Apache infrastructure-actions allowlist
    (actions.yml). Bump to v6.1.0 which is already trusted.
    
    See:
     - 
https://github.com/apache/infrastructure-actions/blob/2b6ec5f38ac73c7c5970f3b4f863e8d15bf12d7d/actions.yml#L424-L438
---
 .github/workflows/dependency-submission.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dependency-submission.yml 
b/.github/workflows/dependency-submission.yml
index f6d7e79b..8e836482 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -41,7 +41,7 @@ jobs:
         working-directory: ./server
         run: make prepare-gradle-wrapper
       - name: Generate and submit dependency graph
-        uses: 
gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2  
# v5.0.0
+        uses: 
gradle/actions/dependency-submission@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e  
# v6.1.0
         with:
           build-root-directory: server
           artifact-retention-days: 5
\ No newline at end of file


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to