This is an automated email from the ASF dual-hosted git repository.

jiayu pushed a commit to branch fix/pin-setup-uv-sha
in repository https://gitbox.apache.org/repos/asf/sedona.git

commit ff34d9c759ce48491415590dfdd59be8bffd27c8
Author: Jia Yu <[email protected]>
AuthorDate: Mon Mar 23 02:32:23 2026 -0700

    [CI] Pin astral-sh/setup-uv to ASF-allowed SHA
    
    Pin astral-sh/setup-uv to commit 37802adc (v7.6.0) across all
    workflows to comply with ASF infrastructure action allow list.
    
    Also add .claude/ and python/.venv-test/ to .prettierignore to
    fix pre-commit hook scanning vendored/generated files.
---
 .github/workflows/docs.yml             | 2 +-
 .github/workflows/pyflink.yml          | 2 +-
 .github/workflows/python-extension.yml | 2 +-
 .github/workflows/python-wheel.yml     | 2 +-
 .github/workflows/python.yml           | 2 +-
 .prettierignore                        | 2 ++
 6 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 60495d39b8..2c3032e293 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -71,7 +71,7 @@ jobs:
         with:
           python-version: '3.11'
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # 
v7.6.0
       - name: Sync doc environment
         run: uv sync --group docs
       - run: sudo apt update
diff --git a/.github/workflows/pyflink.yml b/.github/workflows/pyflink.yml
index 9b86d74ab7..13fb2affc8 100644
--- a/.github/workflows/pyflink.yml
+++ b/.github/workflows/pyflink.yml
@@ -64,7 +64,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # 
v7.6.0
       - run: mvn package -pl "org.apache.sedona:sedona-flink-shaded_2.12" -am 
-DskipTests
       - name: Install python package + flink extra
         run: |
diff --git a/.github/workflows/python-extension.yml 
b/.github/workflows/python-extension.yml
index 3399c8afd3..649d962897 100644
--- a/.github/workflows/python-extension.yml
+++ b/.github/workflows/python-extension.yml
@@ -65,7 +65,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # 
v7.6.0
         with:
           version: '0.9.22'
       - name: Install dependencies (dev)
diff --git a/.github/workflows/python-wheel.yml 
b/.github/workflows/python-wheel.yml
index 3684d7873d..9bfc5942e3 100644
--- a/.github/workflows/python-wheel.yml
+++ b/.github/workflows/python-wheel.yml
@@ -94,7 +94,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # 
v7.6.0
 
       - name: Build sdist
         run: cd python && uv build --sdist
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 10989cd364..7369391547 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -90,7 +90,7 @@ jobs:
         with:
           python-version: ${{ matrix.python }}
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # 
v7.6.0
       - name: Cache Maven packages
         uses: actions/cache@v5
         with:
diff --git a/.prettierignore b/.prettierignore
index fe267f54aa..92ed75d4ea 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -23,3 +23,5 @@ site/
 target/
 binder/Pipfile.lock
 docs-overrides/main.html
+.claude/
+python/.venv-test/

Reply via email to