This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/release/v1.2/pr-7581-33d5f1bfe3976568cfad7922d1b8be5c6cd1b274 in repository https://gitbox.apache.org/repos/asf/texera.git
commit aeb054eb107f57aa0e5103bf305650be8a222a40 Author: Xuan Gu <[email protected]> AuthorDate: Wed Aug 12 20:09:21 2026 +0000 fix(deps, ci, v1.2): refresh expired and expiring action pins (#7581) ### What changes were proposed in this PR? CI on `release/v1.2` fails at workflow parse because the branch pins `coursier/cache-action` v8.1.0, whose ASF actions-allowlist entry expired on 2026-08-05 (v8.1.1 was approved in July with a one-month grace for the old SHA). The docker action pins on the branch have allowlist expiry dates of Aug 16/19, so they are bumped in the same pass instead of waiting for the next breakage. All five pins move to the SHAs `main` already uses (allowlisted, exercised on `main` daily): | Action | v1.2 pin | New pin (= main) | | --- | --- | --- | | coursier/cache-action | v8.1.0 (expired Aug 5) | v8.1.1 | | docker/build-push-action | v7.1.0 (expires Aug 16) | v7.3.0 | | docker/login-action | v4.1.0 (expires Aug 16) | v4.4.0 | | docker/setup-buildx-action | v4.0.0 (expires Aug 16) | v4.2.0 | | docker/setup-qemu-action | v4.0.0 (expires Aug 19) | v4.2.0 | Only `uses:` lines change; no job logic is touched. ### Any related issues, documentation, discussions? Fixes #7572. ### How was this PR tested? YAML validated; every new SHA checked against the current `apache/infrastructure-actions` allowlist (`actions.yml`): the coursier/build-push/buildx/qemu entries carry no expiry, and login-action matches `main`'s Oct 16 lease. The coursier bump is exercised by this PR's own sbt CI legs; the docker pins are the same SHAs `main`'s daily image publishing runs. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude Code (Opus 4.8) Co-authored-by: Claude Opus 4.8 <[email protected]> --- .github/workflows/build-and-push-images.yml | 28 ++++++++++++++-------------- .github/workflows/build.yml | 6 +++--- 2 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/build-and-push-images.yml b/.github/workflows/build-and-push-images.yml index e70cd8c3e7..aa8335cfc1 100644 --- a/.github/workflows/build-and-push-images.yml +++ b/.github/workflows/build-and-push-images.yml @@ -128,7 +128,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -330,7 +330,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -349,11 +349,11 @@ jobs: df -h - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -361,13 +361,13 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Build and push AMD64 image - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} @@ -410,7 +410,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -430,16 +430,16 @@ jobs: # Set up QEMU for ARM64 emulation - name: Set up QEMU - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 with: platforms: linux/arm64 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -447,13 +447,13 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Build and push ARM64 image - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} @@ -481,7 +481,7 @@ jobs: steps: - name: Log in to GitHub Container Registry if: startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -489,7 +489,7 @@ jobs: - name: Log in to Docker Hub if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry, 'ghcr.io/') }} - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 4ded8154d3..788a884106 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -217,7 +217,7 @@ jobs: PGPASSWORD: postgres - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' - name: Lint and build amber distributable bundle @@ -392,7 +392,7 @@ jobs: PGPASSWORD: postgres - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' - name: Create texera_db_for_test_cases @@ -586,7 +586,7 @@ jobs: java-version: 17 - name: Setup sbt launcher uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2 - - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 + - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' - name: Create Databases
