This is an automated email from the ASF dual-hosted git repository.

xushiyan pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hudi-rs.git


The following commit(s) were added to refs/heads/main by this push:
     new d053242  ci: pin third-party actions to Apache-approved SHAs (#550)
d053242 is described below

commit d053242fbd957e2326f13400184af94be2103243
Author: Shiyan Xu <[email protected]>
AuthorDate: Fri Mar 20 18:31:06 2026 -0500

    ci: pin third-party actions to Apache-approved SHAs (#550)
    
    Pin astral-sh/setup-uv and docker/setup-buildx-action to commit SHAs
    from Apache's infrastructure-actions allowlist to fix CI failures.
---
 .github/workflows/ci.yml   | 6 +++---
 .github/workflows/code.yml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7dcd114..f85508a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,13 +106,13 @@ jobs:
           save-if: ${{ github.ref == 'refs/heads/main' || github.event_name == 
'pull_request' }}
         
       - name: install uv and set the python version
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
         with:
           version: "0.7.19"
           python-version: ${{ matrix.python-version }}
           enable-cache: true
           cache-dependency-glob: "python/pyproject.toml"
-          
+
       - name: Setup Python venv and build
         run: |
           make setup-venv
@@ -159,7 +159,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: 
docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
       - name: Pre-pull base images
         run: |
           docker pull quay.io/minio/minio:latest
diff --git a/.github/workflows/code.yml b/.github/workflows/code.yml
index 0b18ce0..a84564e 100644
--- a/.github/workflows/code.yml
+++ b/.github/workflows/code.yml
@@ -36,7 +36,7 @@ jobs:
         uses: apache/skywalking-eyes/[email protected]
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
         with:
           version: "0.7.19"
 

Reply via email to