david-streamlio opened a new pull request, #37: URL: https://github.com/apache/pulsar-connectors/pull/37
### Motivation All CI runs in this repository currently fail at the "Setup Gradle" step with: ``` Error: The action gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f is not allowed in apache/pulsar-connectors because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ... ``` The pinned SHA (v6.0.1) was removed from the ASF GitHub Actions allowlist, so every workflow that uses the `.github/actions/setup-gradle` composite action fails before any build step runs (see e.g. the run on #31: https://github.com/apache/pulsar-connectors/actions/runs/28885273489). This is the same breakage already fixed in apache/pulsar by apache/pulsar#26156 — this repository carries its own copy of the composite action, which was still pinned to the revoked SHA. ### Modifications Bump both `gradle/actions/setup-gradle` pins in `.github/actions/setup-gradle/action.yml` from `39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f` (v6.0.1) to `3f131e8634966bd73d06cc69884922b02e6faf92` (v6.2.0), which matches the current ASF allowlist (`approved_patterns.yml` in infrastructure-actions-allow-list) — verified by the merged apache/pulsar fix passing CI with this SHA. ### Verification CI on this PR itself demonstrates the fix: the "Build and License check" job gets past the Setup Gradle step again. ### Documentation - [x] `doc-not-needed` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
