This is an automated email from the ASF dual-hosted git repository.
dongjoon-hyun pushed a commit to branch branch-4.x
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/branch-4.x by this push:
new 1f06ef93eccd [SPARK-58074][INFRA] Mask `PYPI_API_TOKEN` in dry-run
mode of `release.yml`
1f06ef93eccd is described below
commit 1f06ef93eccd90728eb4df5df886f1dc9650d614
Author: Dongjoon Hyun <[email protected]>
AuthorDate: Thu Jul 9 15:28:17 2026 -0700
[SPARK-58074][INFRA] Mask `PYPI_API_TOKEN` in dry-run mode of `release.yml`
### What changes were proposed in this pull request?
This PR aims to mask `PYPI_API_TOKEN` with a `"not_used"` placeholder in
the dry-run mode of `release.yml`, like the other secrets.
### Why are the changes needed?
In dry-run mode, all other secrets are replaced with placeholders, but
`PYPI_API_TOKEN` was missing from the list. So, the real token was propagated
to the release scripts and the Docker container environment although dry runs
never use it.
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
Manual review.
### Was this patch authored or co-authored using generative AI tooling?
Generated-by: Claude Fable 5
Closes #57170 from dongjoon-hyun/SPARK-58074.
Authored-by: Dongjoon Hyun <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
(cherry picked from commit 104756030fab193184a130175273a394a4eb79a6)
Signed-off-by: Dongjoon Hyun <[email protected]>
---
.github/workflows/release.yml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ef9a19e3e018..6adbbdee7e87 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -177,6 +177,7 @@ jobs:
GPG_PASSPHRASE="not_used"
ASF_USERNAME="gurwls223"
ASF_NEXUS_TOKEN="not_used"
+ PYPI_API_TOKEN="not_used"
export SKIP_TAG=1
unset RELEASE_VERSION
else
@@ -184,7 +185,7 @@ jobs:
export DRYRUN_MODE=0
fi
- export ASF_PASSWORD GPG_PRIVATE_KEY GPG_PASSPHRASE ASF_USERNAME
ASF_NEXUS_TOKEN
+ export ASF_PASSWORD GPG_PRIVATE_KEY GPG_PASSPHRASE ASF_USERNAME
ASF_NEXUS_TOKEN PYPI_API_TOKEN
export GIT_BRANCH="${GIT_BRANCH:-master}"
[ -n "$RELEASE_VERSION" ] && export RELEASE_VERSION
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
