This is an automated email from the ASF dual-hosted git repository.

leekei pushed a commit to branch fix/pin-setup-uv-sha
in repository https://gitbox.apache.org/repos/asf/fluss-rust.git

commit 4f47baf039e028528973d147677f85f2ec433a78
Author: Keith Lee <[email protected]>
AuthorDate: Sat Mar 28 20:55:34 2026 +0000

    ci: pin astral-sh/setup-uv to SHA for ASF allowlist compliance
    
    Pin astral-sh/setup-uv from @v4 to specific commit SHA
    (e06108dd0aef18192324c70427afc47652e63a82, v7.5.0) to comply with
    the ASF GitHub Actions allowlist policy.
    
    Closes #453
---
 .github/workflows/build_and_test_python.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build_and_test_python.yml 
b/.github/workflows/build_and_test_python.yml
index efb5caa..26f8d43 100644
--- a/.github/workflows/build_and_test_python.yml
+++ b/.github/workflows/build_and_test_python.yml
@@ -53,7 +53,7 @@ jobs:
           python-version: ${{ matrix.python }}
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@e06108dd0aef18192324c70427afc47652e63a82 # 
v7.5.0
 
       - name: Install protoc
         run: sudo apt-get update && sudo apt-get install -y protobuf-compiler

Reply via email to