Hi Yong, Thanks for the analysis.
Since gradle action v6 had some licencing concern, I hope Robert can review this and advise whether that concerns is still a problem with moving forward to v6. Cheers, Dmitri. On Mon, Jun 22, 2026 at 2:15 PM Yong Zheng <[email protected]> wrote: > Hello team, > > The current CI is broken for all due to issue on setup-gradle. This > appears to be related to #4518 and #4512 where none of the hash for v5 is > on allowed list for ASF. If we need to use v5, we would need some help from > ASF infra to allow that: > > ``` > curl -s > https://raw.githubusercontent.com/apache/infrastructure-actions/main/approved_patterns.yml > | grep "gradle/actions/setup-gradle" > - gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f > - gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e > - gradle/actions/setup-gradle@5e2ebd065dc2488b7a6ad670704656cbbe1e8f60 > - gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 > ``` > And we are on the following version: > > ``` > uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c > # v5 > ``` > > Should we proceed to v6 or ask infra to add v5 back? > > Thanks, > Yong Zheng >
