400Ping opened a new pull request, #1495: URL: https://github.com/apache/mahout/pull/1495
### Related Issues ### Changes - [ ] Bug fix - [ ] New feature - [ ] Refactoring - [ ] Documentation - [ ] Test - [x] CI/CD pipeline - [ ] Other ### Why Several workflows have been failing on `main` with `startup_failure` (0s, no job runs) because the pinned action SHAs are no longer in the ASF GitHub Actions allowlist. ASF tracks each approved SHA with an `expires_at` in [apache/infrastructure-actions `actions.yml`](https://github.com/apache/infrastructure-actions/blob/main/actions.yml), and ours have expired: | Workflow | Blocked action | Failing since | |---|---|---| | Python Testing | `dtolnay/rust-toolchain@29eef336` | 2026-07-10 | | CI for Jupyter Notebooks | `astral-sh/setup-uv@08807647` (v8.1.0) | late Aug 2026 | | Deploy Website | `astral-sh/setup-uv@08807647` (v8.1.0) | 2026-09-16 (#1492) | | Website Build (PR check) | `astral-sh/setup-uv@08807647` (v8.1.0) | same | | Release | `dtolnay/rust-toolchain@29eef336` | would fail on next release | Error as reported by GitHub: > The action astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b is not allowed in apache/mahout because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ... Because of this, Python and notebook tests have not run in CI for any PR, and the website has not been deployed since #1492 (so #1493 is not live yet). ### How Bumped the two pins to SHAs currently on the ASF allowlist. No other changes. - `astral-sh/setup-uv`: `08807647` (v8.1.0) → `bec219d24cd3e171d82865faccec33120bb574f4` (v10.1.0, no `expires_at` in the allowlist) - `.github/workflows/website.yml` - `.github/workflows/website-build.yml` - `.github/workflows/notebook-testing.yml` - `dtolnay/rust-toolchain`: `29eef336` → `4cda84d5c5c54efe2404f9d843567869ab1699d4` (the only SHA ASF allows for this action, marked `keep: true`; still the `stable` toolchain) - `.github/workflows/python-testing.yml` - `.github/workflows/release.yml` Verified that both new SHAs match the upstream tag / commit, and that every remaining third-party action in `.github/workflows/` is on the ASF approved list. `github/issue-labeler` is not listed but is GitHub-owned and therefore allowed by the org policy (Issue Labeler runs have been green throughout). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
