yangxk1 commented on PR #933:
URL: 
https://github.com/apache/incubator-graphar/pull/933#issuecomment-4832408711

   Revised approach based on review feedback.
   
   **Previous revision** replaced the action with an inline `twine upload` 
script, based on the premise that `pypa/gh-action-pypi-publish` was banned by 
Apache's allowlist. That premise was wrong.
   
   **Current revision** is a 2-line change pinning the action to the commit 
Apache infra has allowlisted (`ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e` = 
v1.13.0, `keep: true`), matching `apache/thrift` and `apache/mahout`. The 
original failure was caused by referencing `@release/v1` and 
`@release/2473ec6c6aa87f38946284d51289219fd0b87264`, neither of which is the 
allowlisted commit.
   
   This addresses the changes-requested items (no more `python3`, no floating 
`pip install twine`) by removing the inline script entirely.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to