This is an automated email from the ASF dual-hosted git repository.
liurenjie1024 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-rust.git
The following commit(s) were added to refs/heads/main by this push:
new 99dbb168e ci: pin third-party actions to Apache-approved SHAs (#2266)
99dbb168e is described below
commit 99dbb168eccfb42d67d3b302fbae532ab1acc21e
Author: Kevin Liu <[email protected]>
AuthorDate: Sun Mar 22 18:18:21 2026 -0700
ci: pin third-party actions to Apache-approved SHAs (#2266)
## Which issue does this PR close?
<!--
We generally require a GitHub issue to be filed for all bug fixes and
enhancements and this helps us generate change logs for our releases.
You can link an issue to this PR using the GitHub syntax. For example
`Closes #123` indicates that this PR will close issue #123.
-->
- Closes #.
## What changes are included in this PR?
Pin `astral-sh/setup-uv` to commit SHAs from Apache's
[infrastructure-actions
allowlist](https://github.com/apache/infrastructure-actions/blob/07f5f9d2b05fe0ec9886e3ef0a9d79797817f0cb/approved_patterns.yml#L9)
Fixes https://github.com/apache/infrastructure-actions/issues/550
<!--
Provide a summary of the modifications in this PR. List the main changes
such as new features, bug fixes, refactoring, or any other updates.
-->
## Are these changes tested?
<!--
Specify what test covers (unit test, integration test, etc.).
If tests are not included in your PR, please explain why (for example,
are they covered by existing tests)?
-->
---
.github/workflows/bindings_python_ci.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/bindings_python_ci.yml
b/.github/workflows/bindings_python_ci.yml
index 78e1a9615..1177073f1 100644
--- a/.github/workflows/bindings_python_ci.yml
+++ b/.github/workflows/bindings_python_ci.yml
@@ -59,7 +59,7 @@ jobs:
runs-on: ubuntu-slim
steps:
- uses: actions/checkout@v6
- - uses: astral-sh/setup-uv@v7
+ - uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
version: "0.9.3"
enable-cache: true
@@ -94,7 +94,7 @@ jobs:
working-directory: "bindings/python"
command: build
args: --out dist
- - uses: astral-sh/setup-uv@v7
+ - uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
with:
version: "0.9.3"
enable-cache: true
