potiuk opened a new pull request, #69630: URL: https://github.com/apache/airflow/pull/69630
PRs targeting `chart/v1-2x-test` failed to run any CI — every workflow run ended in `startup_failure` and the PR showed only branch-independent bot checks (`Mergeable`/`WIP`), so a change could sit with no tests, static checks, or CodeQL (e.g. #69579). **Root cause:** the branch pinned `aws-actions/configure-aws-credentials@8df5847… (v6.0.0)`, a version no longer on the ASF Actions allowlist. GitHub refuses to start a workflow that references a non-allowlisted action, and a `startup_failure` emits no check runs — which is why the failure was invisible on the PR. `main` already runs the allowlisted `v6.2.1`, which is why `main` PRs are unaffected. **This PR:** - Bumps the 16 stale action pins on this branch to the allowlisted revisions already used on `main` (`configure-aws-credentials` → v6.2.1, `actions/checkout` → v7.0.0, `actions/upload-artifact` → v7.0.1, `github/codeql-action` → v4.36.2, `astral-sh/setup-uv` → v8.2.0, `slackapi/slack-github-action` → v3.0.3, `pnpm/action-setup` → v6.0.9, `actions/setup-node`/`setup-go`/`setup-java`, `actions/stale`, `actions/github-script`, `apache/infrastructure-actions/stash`). - Adds the **ASF Allowlist Check** workflow (ported from `main`) so future drift onto a non-allowlisted action is caught here instead of silently breaking CI. `chart/v1-2x-stable` carries the same stale pins and needs the same fix as a follow-up. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 4.8) Generated-by: Claude Code (Opus 4.8) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
