kz930 opened a new issue, #9044: URL: https://github.com/apache/texera/issues/9044
### What happened? Every build job (amber, amber-integration, platform, platform-integration) fails before its first step with: ``` The action carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe is not allowed in apache/texera because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ... ``` No workflow in the repo names this action. It comes in through `sbt/setup-sbt@8feba82` (v1.5.7), pinned since #7710. That version's "Verify the sbt distribution signature" step uses `carabiner-dev/actions/ampel/verify@36a39ef` (v1.2.6), which in turn uses `install/ampel-bootstrap@619a474`. The step is marked monitor-only (`fail: false`), but GitHub resolves every referenced action when the job starts, so the allowlist check fails the job before anything runs. The pin has not changed since August, so the allowlist must have changed on the ASF side. Runs that skip the build jobs still pass (the merge-group run for #9020 did), which hides the problem on docs-only or frontend-only changes. It also removes PRs from the merge queue. #8346 and #8366 were taken out on 2026-10-19 for this reason. ### How to reproduce? 1. Open or update any PR that touches Scala code, or push to main. 2. The build jobs fail during "Prepare all required actions" with the error above. For example, main's push run 39342961803, and the merge-group run 39337014116 for #8366. ### Version/Branch 1.4.0-incubating-SNAPSHOT (main) ### Commit Hash (Optional) a46ddc6eb ### What browsers are you seeing the problem on? _No response_ ### Relevant log output ```shell ##[error]The action carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe is not allowed in apache/texera because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ... ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
