This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch 1.4.x
in repository https://gitbox.apache.org/repos/asf/pekko-connectors.git
The following commit(s) were added to refs/heads/1.4.x by this push:
new 3ada42c7b CI: update action SHA pins on 1.4.x to allowlisted versions
(#1884)
3ada42c7b is described below
commit 3ada42c7b03090a77c4880b95d5f19e0c8119bef
Author: PJ Fanning <[email protected]>
AuthorDate: Sat Sep 5 16:11:42 2026 +0100
CI: update action SHA pins on 1.4.x to allowlisted versions (#1884)
* CI: update action SHA pins on 1.4.x to allowlisted versions
Motivation:
Every fresh CI and Headers run for 1.4.x-targeted PRs now fails with
startup_failure and zero jobs. The run banner states the cause: the ASF
org enforces an allowlist of actions by exact SHA, and the old pins used
on this branch - sbt/setup-sbt@1cad58d5 (v1.1.18) and
coursier/cache-action@e47d7d35 (v6.4.7) - are no longer on it. main's
workflows pin newer SHAs of the same actions and run fine. Re-runs of
runs created before the allowlist change still execute, which masked
the breakage until a new PR (#1883) was opened against 1.4.x.
Modification:
Update the sbt/setup-sbt pin to c7d2d625 (v1.5.8) and the
coursier/cache-action pin to 95e5b102 (v6.4.7), the allowlisted SHAs
already used on main, in check-build-test.yml and headers.yml. No other
workflow on this branch that triggers from 1.4.x uses a disallowed
action (dependency-graph.yml also carries an old pin but only triggers
on push to the default branch, so it never runs from 1.4.x).
Result:
CI and Headers workflows start again for 1.4.x-targeted PRs, including
this one, whose own run exercises the updated files via the merge
commit.
Tests:
- This PR's own CI run is the verification: pull_request runs take
workflow definitions from the merge commit, so its jobs starting at
all proves the fix.
References:
None - unblocks CI for 1.4.x PRs such as #1883
* Update Coursier cache action version to v8.1.1
* Update Coursier cache action version
Updated Coursier cache action version from v6.4.7 to v8.1.1.
---
.github/workflows/check-build-test.yml | 12 ++++++------
.github/workflows/headers.yml | 4 ++--
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/check-build-test.yml
b/.github/workflows/check-build-test.yml
index aae5027a2..43a9edeba 100644
--- a/.github/workflows/check-build-test.yml
+++ b/.github/workflows/check-build-test.yml
@@ -45,10 +45,10 @@ jobs:
java-version: 8
- name: Install sbt
- uses: sbt/setup-sbt@1cad58d595b729a71ca2254cdf5b43dd6f42d4bb # v1.1.18
+ uses: sbt/setup-sbt@c7d2d6258b4bd0d3ec5129e6b3453199d3c79729 # v1.5.8
- name: Cache Coursier cache
- uses: coursier/cache-action@e47d7d35a0d3a2c7f649ca5c63dfc2bbfaa002e7 #
v6.4.7
+ uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
- name: "Code style, compile tests, MiMa. Run locally with: sbt
\"javafmtCheckAll; +Test/compile; +mimaReportBinaryIssues\""
run: sbt "javafmtCheckAll; +Test/compile; +mimaReportBinaryIssues"
@@ -77,10 +77,10 @@ jobs:
java-version: 11
- name: Install sbt
- uses: sbt/setup-sbt@1cad58d595b729a71ca2254cdf5b43dd6f42d4bb # v1.1.18
+ uses: sbt/setup-sbt@c7d2d6258b4bd0d3ec5129e6b3453199d3c79729 # v1.5.8
- name: Cache Coursier cache
- uses: coursier/cache-action@e47d7d35a0d3a2c7f649ca5c63dfc2bbfaa002e7 #
v6.4.7
+ uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
- name: "Create all API docs and create site with Paradox"
run: sbt docs/makeSite
@@ -165,10 +165,10 @@ jobs:
java-version: 8
- name: Install sbt
- uses: sbt/setup-sbt@1cad58d595b729a71ca2254cdf5b43dd6f42d4bb # v1.1.18
+ uses: sbt/setup-sbt@c7d2d6258b4bd0d3ec5129e6b3453199d3c79729 # v1.5.8
- name: Cache Coursier cache
- uses: coursier/cache-action@e47d7d35a0d3a2c7f649ca5c63dfc2bbfaa002e7 #
v6.4.7
+ uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v6.4.7
- name: ${{ matrix.connector }}
env:
diff --git a/.github/workflows/headers.yml b/.github/workflows/headers.yml
index e5f16357d..cb268fbd3 100644
--- a/.github/workflows/headers.yml
+++ b/.github/workflows/headers.yml
@@ -40,10 +40,10 @@ jobs:
java-version: 8
- name: Install sbt
- uses: sbt/setup-sbt@1cad58d595b729a71ca2254cdf5b43dd6f42d4bb # v1.1.18
+ uses: sbt/setup-sbt@c7d2d6258b4bd0d3ec5129e6b3453199d3c79729 # v1.5.8
- name: Cache Coursier cache
- uses: coursier/cache-action@e47d7d35a0d3a2c7f649ca5c63dfc2bbfaa002e7 #
v6.4.7
+ uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
- name: Check headers
run: |-
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
