This is an automated email from the ASF dual-hosted git repository. potiuk pushed a commit to branch upgrade-actions-and-pre-commit-hooks in repository https://gitbox.apache.org/repos/asf/airflow-site-archive.git
commit 83f979591601726fd080cd237db974e1034dafcd Author: Jarek Potiuk <[email protected]> AuthorDate: Sun Aug 9 10:22:46 2026 +0800 Upgrade GitHub Actions and pre-commit hooks to latest versions Bumps all pinned actions and pre-commit hooks to the newest releases that are outside the 7-day cooldown window configured in dependabot.yml: * actions/checkout: v6.0.2 -> v7.0.1 * aws-actions/configure-aws-credentials: v6.1.0 -> v6.2.3 * apache/infrastructure-actions/allowlist-check: main pin refreshed * zizmor-pre-commit: v1.24.1 -> v1.29.0 The checkout v7 breaking change (blocking fork PR checkout for pull_request_target and workflow_run) does not affect us - none of the workflows here use either trigger. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> --- .github/workflows/asf-allowlist-check.yml | 4 ++-- .github/workflows/build.yml | 2 +- .github/workflows/github-to-s3.yml | 10 +++++----- .github/workflows/s3-to-github.yml | 8 ++++---- .pre-commit-config.yaml | 2 +- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml index 4066ccea383..1dcadde378a 100644 --- a/.github/workflows/asf-allowlist-check.yml +++ b/.github/workflows/asf-allowlist-check.yml @@ -29,7 +29,7 @@ jobs: asf-allowlist-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 # main + - uses: apache/infrastructure-actions/allowlist-check@0c35f063785c661e4280c480c0f99a53b5516db9 # main diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 9d4ed58bbed..09730f6592e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -23,7 +23,7 @@ jobs: - name: "Install uv" run: curl -LsSf https://astral.sh/uv/install.sh | sh - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} ) for scripts" - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Checkout only workflow and scripts directory to run scripts from with: sparse-checkout: | diff --git a/.github/workflows/github-to-s3.yml b/.github/workflows/github-to-s3.yml index dd1765865f7..91f560748d1 100644 --- a/.github/workflows/github-to-s3.yml +++ b/.github/workflows/github-to-s3.yml @@ -94,7 +94,7 @@ jobs: fi echo "commit-ref=${COMMIT_REFERENCE}" >> ${GITHUB_OUTPUT} - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Checkout only workflow and scripts directory to run scripts from with: sparse-checkout: | @@ -111,7 +111,7 @@ jobs: rm -rf /tmp/aws/ - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }} @@ -125,7 +125,7 @@ jobs: sudo rm -rf "$AGENT_TOOLSDIRECTORY" - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} ) for scripts" - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Checkout only workflow and scripts directory to run scripts from with: sparse-checkout: | @@ -173,7 +173,7 @@ jobs: - name: > Checkout (${{ steps.parameters.outputs.commit-ref }}) to /mnt/cloned-airflow-site-archive with docs packages: ${{ steps.docs-packages-processed.outputs.docs-packages-processed }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: ./cloned-airflow-site-archive fetch-depth: 2 @@ -184,7 +184,7 @@ jobs: if: steps.docs-packages-processed.outputs.docs-packages-processed != 'all' - name: > Checkout (${{ steps.parameters.outputs.commit-ref }}) to /mnt/cloned-airflow-site-archive (all packages) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: ./cloned-airflow-site-archive fetch-depth: 2 diff --git a/.github/workflows/s3-to-github.yml b/.github/workflows/s3-to-github.yml index 986b482d466..553b5c647e7 100644 --- a/.github/workflows/s3-to-github.yml +++ b/.github/workflows/s3-to-github.yml @@ -101,7 +101,7 @@ jobs: rm -rf /tmp/aws/ - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }} @@ -148,7 +148,7 @@ jobs: - name: > Checkout (${{ inputs.commit-sha || github.sha }}) to /mnt/cloned-airflow-site-archive with docs: ${{ steps.docs-packages-processed.outputs.docs-packages-processed }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: ./cloned-airflow-site-archive fetch-depth: 1 @@ -159,7 +159,7 @@ jobs: - name: > Checkout (${{ inputs.commit-sha || github.sha }}) to /mnt/cloned-airflow-site-archive (whole repo) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: ./cloned-airflow-site-archive fetch-depth: 1 @@ -193,7 +193,7 @@ jobs: working-directory: /mnt/cloned-airflow-site-archive if: inputs.sync-registry == true - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Checkout airflow to run breeze with: repository: 'apache/airflow' diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 465c1c0a515..295e378257c 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -26,7 +26,7 @@ repos: - id: check-hooks-apply - id: check-useless-excludes - repo: https://github.com/woodruffw/zizmor-pre-commit - rev: a4727cbbcd26d7098e96b9cb738169b59711ae51 # frozen: v1.24.1 + rev: 451b56af716f9f0d0c2b816503a3fd0cf8b036fa # frozen: v1.29.0 hooks: - id: zizmor name: Run zizmor to check for github workflow syntax errors
