This is an automated email from the ASF dual-hosted git repository.
andygrove pushed a commit to branch branch-54
in repository https://gitbox.apache.org/repos/asf/datafusion-ballista.git
The following commit(s) were added to refs/heads/branch-54 by this push:
new 18566b9c6 ci: install Rust via rustup in wheel build to fix ASF
allowlist startup_failure (#2007)
18566b9c6 is described below
commit 18566b9c692ccb946b36e49590dd774d0a04e4a5
Author: Andy Grove <[email protected]>
AuthorDate: Sun Jul 12 10:54:28 2026 -0600
ci: install Rust via rustup in wheel build to fix ASF allowlist
startup_failure (#2007)
The `dtolnay/rust-toolchain@29eef336...` SHA pinned in #1748 is not on the
ASF INFRA third-party actions allowlist, so the Python Release Build was
rejected at startup (startup_failure) when the 54.0.0-rc1 tag was pushed.
This only surfaced now because the workflow runs solely on `*-rc*` tags and
`python/**` PRs, so no run ever exercised the pin on main.
Replace the `dtolnay/rust-toolchain` action with plain `rustup` shell
commands, matching how rust.yml already installs the toolchain. This removes
the allowlist dependency entirely so a future action bump cannot re-break
the
release build.
---
.github/workflows/build.yml | 25 ++++++++++++++++++++-----
.github/workflows/web-tui.yml | 8 ++++----
2 files changed, 24 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 91a47671a..a2507bc46 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -49,7 +49,10 @@ jobs:
with:
python-version: ${{ matrix.python-version }}
- - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ - name: Setup Rust toolchain
+ run: |
+ rustup toolchain install stable
+ rustup default stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
- name: Install Protoc
@@ -127,7 +130,10 @@ jobs:
with:
python-version: ${{ matrix.python-version }}
- - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ - name: Setup Rust toolchain
+ run: |
+ rustup toolchain install stable
+ rustup default stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
with:
# FIXME: temporary workaround, see:
https://github.com/Swatinem/rust-cache/issues/341
@@ -176,7 +182,10 @@ jobs:
steps:
- uses: actions/[email protected]
- - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ - name: Setup Rust toolchain
+ run: |
+ rustup toolchain install stable
+ rustup default stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
- run: rm LICENSE.txt
@@ -218,7 +227,10 @@ jobs:
steps:
- uses: actions/[email protected]
- - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ - name: Setup Rust toolchain
+ run: |
+ rustup toolchain install stable
+ rustup default stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
- run: rm LICENSE.txt
@@ -260,7 +272,10 @@ jobs:
steps:
- uses: actions/[email protected]
- - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
+ - name: Setup Rust toolchain
+ run: |
+ rustup toolchain install stable
+ rustup default stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
- run: rm LICENSE.txt
diff --git a/.github/workflows/web-tui.yml b/.github/workflows/web-tui.yml
index 4bca1c411..fe2917c6a 100644
--- a/.github/workflows/web-tui.yml
+++ b/.github/workflows/web-tui.yml
@@ -56,10 +56,10 @@ jobs:
fetch-depth: 1
- name: Setup Rust toolchain
- uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
# stable
- with:
- toolchain: "stable"
- targets: "wasm32-unknown-unknown"
+ run: |
+ rustup toolchain install stable
+ rustup default stable
+ rustup target add wasm32-unknown-unknown
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
#2.9.1
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]