This is an automated email from the ASF dual-hosted git repository.
tuhaihe pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cloudberry-pxf.git
The following commit(s) were added to refs/heads/main by this push:
new 9c4d1c73 Update gradle/actions/dependency-submission to v6.1.0
9c4d1c73 is described below
commit 9c4d1c73b01c4fe491a5df2aaedbff89698cbcd7
Author: Dianjin Wang <[email protected]>
AuthorDate: Tue Jun 16 12:06:54 2026 +0800
Update gradle/actions/dependency-submission to v6.1.0
v5.0.0 is no longer in the Apache infrastructure-actions allowlist
(actions.yml). Bump to v6.1.0 which is already trusted.
See:
-
https://github.com/apache/infrastructure-actions/blob/2b6ec5f38ac73c7c5970f3b4f863e8d15bf12d7d/actions.yml#L424-L438
---
.github/workflows/dependency-submission.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/dependency-submission.yml
b/.github/workflows/dependency-submission.yml
index f6d7e79b..8e836482 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -41,7 +41,7 @@ jobs:
working-directory: ./server
run: make prepare-gradle-wrapper
- name: Generate and submit dependency graph
- uses:
gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2
# v5.0.0
+ uses:
gradle/actions/dependency-submission@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e
# v6.1.0
with:
build-root-directory: server
artifact-retention-days: 5
\ No newline at end of file
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]