I'm thinking of using the Boring Cyborg app [1] to replace labeling in
arrow-rs, as Airflow does [2]. Would we like to enable this for all arrow
repos? In addition to labeling by changed files, it can add reviewers based
on labels and send a comment on first PR, among other features.

If we're interested in this I can sen an infra ticket to enable for the
arrow repos.

Cheers, Jeffrey

[1]: https://github.com/kaxil/boring-cyborg
[2]:
https://github.com/apache/airflow/blob/3204b6ebebbd83d69e1203a52a78e85692d2cf5f/.github/boring-cyborg.yml

On Wed, 4 Nov 2026 at 21:18, Raúl Cumplido via dev <[email protected]>
wrote:

> Thanks Jeffrey for the ping to action.
>
> I have started moving things on the apache/arrow repo here [1]
> collecting the workflows that need migration and possible paths to
> action.
>
> Regards,
> Raúl
>
> [1] https://github.com/apache/arrow/issues/55392
>
> El mié, 4 nov 2026 a las 7:01, Jeffrey Vo
> (<[email protected]>) escribió:
> >
> > Hi all,
> >
> > Just want to raise awareness that the "pull_request_target" event trigger
> > for GitHub actions is slated to be restricted from December 2, with two
> > brownouts scheduled on November 9 and November 16 [1].
> >
> > I already raised an issue for arrow-rs [2], and DataFusion and its
> related
> > projects are working on remediating this [3].
> >
> > From a Codex scan, these arrow repos seem to still use this trigger, so
> > would recommend action to move away from using this trigger to avoid CI
> > disruption:
> >
> > - arrow
> > - arrow-java
> > - arrow-site
> > - arrow-erlang
> >
> > Cheers, Jeffrey
> >
> > [1]:
> >
> https://github.blog/changelog/2026-11-02-pull_request_target-blocked-by-default-december-2/
> > [2]: https://github.com/apache/arrow-rs/issues/11615
> > [3]: https://github.com/apache/datafusion/issues/26406
>

Reply via email to