This is an automated email from the ASF dual-hosted git repository.
epugh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-mcp.git
The following commit(s) were added to refs/heads/main by this push:
new 3e3055be ci(native): provision GraalVM with actions/setup-java instead
of graalvm/setup-graalvm (#238)
3e3055be is described below
commit 3e3055be3aeb2145b051ad6b047b477a57e7aa84
Author: Aditya Parikh <[email protected]>
AuthorDate: Tue Oct 6 14:44:28 2026 -0400
ci(native): provision GraalVM with actions/setup-java instead of
graalvm/setup-graalvm (#238)
* ci(native): provision GraalVM with actions/setup-java instead of
graalvm/setup-graalvm
The ASF Actions allow-list removed graalvm/setup-graalvm@329c42c (v1.5.4)
on 2026-09-13, so every Native Image run since has ended in
startup_failure, and the release workflow's native-image job would fail
the same way. actions/setup-java supports distribution: graalvm and, being
GitHub-owned, passes the allow-list by pattern, so the pin can no longer
expire out from under us.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Signed-off-by: Aditya Parikh <[email protected]>
* ci(native): pin actions/setup-java to a commit SHA
Reference actions/setup-java by full commit SHA with the release tag as
a trailing comment, matching the existing actions/upload-artifact pins,
so the workflow runs exactly the reviewed code.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Signed-off-by: Aditya Parikh <[email protected]>
---------
Signed-off-by: Aditya Parikh <[email protected]>
Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]>
---
.github/workflows/native.yml | 13 +++++++------
.github/workflows/release-publish.yml | 4 ++--
dev-docs/DEVELOPMENT.md | 2 +-
3 files changed, 10 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/native.yml b/.github/workflows/native.yml
index b9ff829f..7c95336c 100644
--- a/.github/workflows/native.yml
+++ b/.github/workflows/native.yml
@@ -58,11 +58,14 @@ jobs:
uses: actions/checkout@v4
- name: Set up GraalVM JDK 25
- uses:
graalvm/setup-graalvm@329c42c5f4c343bceb505f0b28cc8499bc2bf174 # v1.5.4
(ASF-allow-listed, no expiry)
+ # actions/setup-java rather than graalvm/setup-graalvm:
GitHub-owned
+ # actions pass the ASF allow-list by pattern, while third-party
+ # action SHAs expire (v1.5.4 was dropped on 2026-09-13, which
made
+ # every run of this workflow a startup_failure).
+ uses:
actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1
with:
java-version: '25'
distribution: 'graalvm'
- github-token: ${{ secrets.GITHUB_TOKEN }}
cache: 'gradle'
- name: Grant execute permission for gradlew
@@ -88,11 +91,10 @@ jobs:
uses: actions/checkout@v4
- name: Set up GraalVM JDK 25
- uses:
graalvm/setup-graalvm@329c42c5f4c343bceb505f0b28cc8499bc2bf174 # v1.5.4
(ASF-allow-listed, no expiry)
+ uses:
actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1
with:
java-version: '25'
distribution: 'graalvm'
- github-token: ${{ secrets.GITHUB_TOKEN }}
cache: 'gradle'
- name: Grant execute permission for gradlew
@@ -122,11 +124,10 @@ jobs:
uses: actions/checkout@v4
- name: Set up GraalVM JDK 25
- uses:
graalvm/setup-graalvm@329c42c5f4c343bceb505f0b28cc8499bc2bf174 # v1.5.4
(ASF-allow-listed, no expiry)
+ uses:
actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1
with:
java-version: '25'
distribution: 'graalvm'
- github-token: ${{ secrets.GITHUB_TOKEN }}
cache: 'gradle'
- name: Grant execute permission for scripts
diff --git a/.github/workflows/release-publish.yml
b/.github/workflows/release-publish.yml
index f8352746..f52f7717 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -388,11 +388,11 @@ jobs:
ref: "v${{ inputs.release_version }}-${{ inputs.release_candidate }}"
- name: Set up GraalVM JDK 25
- uses: graalvm/setup-graalvm@329c42c5f4c343bceb505f0b28cc8499bc2bf174 #
v1.5.4 (ASF-allow-listed, no expiry)
+ # GitHub-owned action; see native.yml for why not
graalvm/setup-graalvm.
+ uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 #
v4.9.1
with:
java-version: '25'
distribution: 'graalvm'
- github-token: ${{ secrets.GITHUB_TOKEN }}
cache: 'gradle'
- name: Update version in build.gradle.kts
diff --git a/dev-docs/DEVELOPMENT.md b/dev-docs/DEVELOPMENT.md
index 2bd6eb92..886a2fc7 100644
--- a/dev-docs/DEVELOPMENT.md
+++ b/dev-docs/DEVELOPMENT.md
@@ -355,7 +355,7 @@ sdk install java 25.0.2-graalce
```
or download from <https://www.graalvm.org>. CI provisions it with
-`graalvm/setup-graalvm`.
+`actions/setup-java` (`distribution: graalvm`).
**Build and test.**
