diqiu50 opened a new pull request, #12899: URL: https://github.com/apache/gravitino/pull/12899
### What changes were proposed in this pull request? Pin `pnpm/action-setup` in `web-ui-tests.yml` to the ASF-allowlisted commit SHA for `v6.0.10`, instead of the moving `v4` tag. ### Why are the changes needed? `apache/infrastructure-actions` tightened its allowlist for `pnpm/action-setup` from a wildcard (`'*': keep: true`) to a single pinned SHA (`0977fd99725f1db4007ccb2928dbb4e90d06cc86`, tag `v6.0.10`): https://github.com/apache/infrastructure-actions/commit/db9062086b9700ef67cbfa5c2eb2e2a67d4a1c9. As a result, `asf-allowlist-check` now fails on any workflow run that still references `pnpm/action-setup@v4`. `v6.0.10`'s `action.yml` keeps the same `version` input used here, so this is a drop-in replacement. Fix: #12709, #12554, #12570 CI failures observed on cherry-pick PRs targeting branch-1.3. ### Does this PR introduce any user-facing change? No. ### How was this patch tested? N/A — CI-only change. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01SpCQ2tawE67Ur1X4nyKsV1 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
