guan404ming opened a new pull request, #19793: URL: https://github.com/apache/tvm/pull/19793
## Why ASF INFRA enforces that external GitHub Actions must be pinned to a commit SHA on the approved allowlist; tag refs like `@v3.0.1` are rejected, failing the workflow with "not allowed in apache/tvm". See the [policy](https://infra.apache.org/github-actions-policy.html) and the [approved allowlist](https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml). ## How - Pin `pre-commit/action` to `2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd` (v3.0.1) - Pin `pypa/cibuildwheel` to `294735312765b09d24a2fbec22660ce817587d55` (v4.1.0) - Pin `pypa/gh-action-pypi-publish` to `ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e` (v1.13.0) - Leave GitHub-owned `actions/*` and the allowlisted `conda-incubator/setup-miniconda@*` pattern untouched -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
