hubcio opened a new pull request, #3653: URL: https://github.com/apache/iggy/pull/3653
ASF removed astral-sh/setup-uv v8.0.0 (cec20831) from the approved_patterns.yml in apache/infrastructure-actions, so every job using the python-maturin composite actions now fails with "action is not allowed in apache/iggy". Dependabot never bumped these two pins because the github-actions ecosystem only scans .github/workflows, not nested composite actions. Pin the newest allowlisted release (v8.3.2) to maximize time before the approval window slides past it again. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
