This is an automated email from the ASF dual-hosted git repository.
jiayu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sedona.git
The following commit(s) were added to refs/heads/master by this push:
new b1c2ade358 [CI] Pin docker/setup-qemu-action and pypa/cibuildwheel to
ASF-allowed SHAs (#2780)
b1c2ade358 is described below
commit b1c2ade35874279c55455daff4554b3de71d5f19
Author: Jia Yu <[email protected]>
AuthorDate: Tue Mar 24 00:10:54 2026 -0700
[CI] Pin docker/setup-qemu-action and pypa/cibuildwheel to ASF-allowed SHAs
(#2780)
---
.github/workflows/python-wheel.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/python-wheel.yml
b/.github/workflows/python-wheel.yml
index 9bfc5942e3..c84fd5c2ba 100644
--- a/.github/workflows/python-wheel.yml
+++ b/.github/workflows/python-wheel.yml
@@ -65,14 +65,14 @@ jobs:
persist-credentials: false
- name: Set up QEMU
if: runner.os == 'Linux'
- uses: docker/setup-qemu-action@v4
+ uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
with:
# temporarily pin to qemu@v8 to workaround non-determininstic gcc
segfaults
# https://github.com/docker/setup-qemu-action/issues/188
image: tonistiigi/binfmt:qemu-v8.1.5
platforms: all
- name: Build wheels
- uses: pypa/[email protected]
+ uses: pypa/cibuildwheel@ee02a1537ce3071a004a6b08c41e72f0fdc42d9a #
v3.4.0
env:
CIBW_SKIP: 'pp* *musl*'
CIBW_ARCHS_LINUX: 'x86_64 aarch64'
