This is an automated email from the ASF dual-hosted git repository.
dru pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-python.git
The following commit(s) were added to refs/heads/main by this push:
new 269476e5 ci: pin third-party actions to Apache-approved SHAs (#3172)
269476e5 is described below
commit 269476e5efd53c340dab579858161d6de506f32a
Author: Kevin Liu <[email protected]>
AuthorDate: Fri Mar 20 17:04:25 2026 -0700
ci: pin third-party actions to Apache-approved SHAs (#3172)
---
.github/workflows/nightly-pypi-build.yml | 2 +-
.github/workflows/pypi-build-artifacts.yml | 2 +-
.github/workflows/python-ci-docs.yml | 2 +-
.github/workflows/python-ci.yml | 14 +++++++-------
.github/workflows/python-release-docs.yml | 2 +-
.github/workflows/python-release.yml | 2 +-
.github/workflows/svn-build-artifacts.yml | 2 +-
7 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/nightly-pypi-build.yml
b/.github/workflows/nightly-pypi-build.yml
index 7a69130d..436849f3 100644
--- a/.github/workflows/nightly-pypi-build.yml
+++ b/.github/workflows/nightly-pypi-build.yml
@@ -43,7 +43,7 @@ jobs:
python-version: 3.12
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
- name: Set version
id: set-version
diff --git a/.github/workflows/pypi-build-artifacts.yml
b/.github/workflows/pypi-build-artifacts.yml
index 8b492f66..51633780 100644
--- a/.github/workflows/pypi-build-artifacts.yml
+++ b/.github/workflows/pypi-build-artifacts.yml
@@ -52,7 +52,7 @@ jobs:
3.13
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
- name: Set version with RC
env:
diff --git a/.github/workflows/python-ci-docs.yml
b/.github/workflows/python-ci-docs.yml
index df550611..4821435d 100644
--- a/.github/workflows/python-ci-docs.yml
+++ b/.github/workflows/python-ci-docs.yml
@@ -43,7 +43,7 @@ jobs:
with:
python-version: 3.12
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
- name: Build docs
run: make docs-build
- name: Run linters
diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index 6472fcbc..205f6b30 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -60,7 +60,7 @@ jobs:
with:
python-version: ${{ matrix.python }}
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install system dependencies
@@ -84,7 +84,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install system dependencies
@@ -111,7 +111,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install system dependencies
@@ -138,7 +138,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install system dependencies
@@ -165,7 +165,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install system dependencies
@@ -193,7 +193,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
- name: Install dependencies
@@ -214,7 +214,7 @@ jobs:
with:
python-version: '3.12'
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
enable-cache: true
# Why this exists:
diff --git a/.github/workflows/python-release-docs.yml
b/.github/workflows/python-release-docs.yml
index de9db554..d996efdc 100644
--- a/.github/workflows/python-release-docs.yml
+++ b/.github/workflows/python-release-docs.yml
@@ -40,7 +40,7 @@ jobs:
with:
python-version: 3.12
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
- name: Build docs
run: make docs-build
- name: Copy
diff --git a/.github/workflows/python-release.yml
b/.github/workflows/python-release.yml
index 6be70a07..266aa1e0 100644
--- a/.github/workflows/python-release.yml
+++ b/.github/workflows/python-release.yml
@@ -101,7 +101,7 @@ jobs:
python-version: 3.12
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
- name: Validate current pyiceberg version
env:
diff --git a/.github/workflows/svn-build-artifacts.yml
b/.github/workflows/svn-build-artifacts.yml
index 3d2406ca..6ba16d07 100644
--- a/.github/workflows/svn-build-artifacts.yml
+++ b/.github/workflows/svn-build-artifacts.yml
@@ -52,7 +52,7 @@ jobs:
3.13
- name: Install UV
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
# Publish the source distribution with the version that's in
# the repository, otherwise the tests will fail
