sadpandajoe commented on code in PR #45805:
URL: https://github.com/apache/superset/pull/45805#discussion_r4398153877
##########
.github/workflows/bump-python-package.yml:
##########
@@ -48,7 +48,7 @@ jobs:
python-version: "3.11"
- name: Install uv
- uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 #
v10.3.0
+ uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa #
v10.3.1
Review Comment:
This pins `astral-sh/setup-uv` to `18d369b…`, which is not on the ASF
allowlist, so `asf-allowlist-check` fails on this PR and the same ref would be
rejected when `bump-python-package` runs. Has this SHA been submitted to
`apache/infrastructure-actions` for allowlisting, or should the pin stay on an
already-approved ref until it is?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
