This is an automated email from the ASF dual-hosted git repository.

gnodet pushed a commit to branch fix/graalvm-ci-hash-pin-1.x
in repository https://gitbox.apache.org/repos/asf/maven-mvnd.git

commit fde86e6ff56747c59ec1e5fe09b7c6cdbdb03dc6
Author: Guillaume Nodet <[email protected]>
AuthorDate: Mon May 18 15:44:27 2026 +0200

    Pin graalvm/setup-graalvm to ASF-allowed hash and bump Java to 25
    
    ASF policy requires GitHub Actions to use commit hashes instead of tags
    for third-party actions. The graalvm/setup-graalvm@v1 tag reference was
    blocked, causing CI startup failures.
    
    Additionally, native-maven-plugin 1.1.0 (upgraded via dependabot while
    CI was down) downloads reachability metadata with a schema that GraalVM
    for JDK 22 does not support. Bumping to JDK 25 resolves this.
    
    Also fix release.yaml source job: remove undefined GRAALVM_VERSION
    reference and add missing distribution parameter.
    
    Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
---
 .github/workflows/early-access.yaml | 4 ++--
 .github/workflows/release.yaml      | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/early-access.yaml 
b/.github/workflows/early-access.yaml
index 7a81b274..954f1072 100644
--- a/.github/workflows/early-access.yaml
+++ b/.github/workflows/early-access.yaml
@@ -26,7 +26,7 @@ on:
   pull_request:
 
 env:
-  JAVA_VERSION: '22'
+  JAVA_VERSION: '25'
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -93,7 +93,7 @@ jobs:
           echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q 
-DforceStdout)" >> $GITHUB_ENV
 
       - name: 'Set up GraalVM'
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # 
v1.5.3
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: 'graalvm'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index eb190229..3db6ffc6 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -26,7 +26,7 @@ on:
       - '*'
 
 env:
-  JAVA_VERSION: '22'
+  JAVA_VERSION: '25'
 
 jobs:
   build:
@@ -65,7 +65,7 @@ jobs:
           echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q 
-DforceStdout)" >> $GITHUB_ENV
 
       - name: 'Set up GraalVM'
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # 
v1.5.3
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: 'graalvm'
@@ -175,10 +175,10 @@ jobs:
           echo "VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q 
-DforceStdout)" >> $GITHUB_ENV
 
       - name: 'Set up GraalVM'
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@bef4b0e916c7dd079bf60fb95d49139f67e32c5f # 
v1.5.3
         with:
-          version: ${{ env.GRAALVM_VERSION }}
           java-version: ${{ env.JAVA_VERSION }}
+          distribution: 'graalvm'
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 'Build source distribution'

Reply via email to