This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.2 by this push:
new 9ead9e9b45 fix(deps, ci, v1.2): refresh expired and expiring action
pins (#7581)
9ead9e9b45 is described below
commit 9ead9e9b457a63787f52b81b608baffbc1853582
Author: Xuan Gu <[email protected]>
AuthorDate: Wed Aug 12 21:22:03 2026 +0000
fix(deps, ci, v1.2): refresh expired and expiring action pins (#7581)
### What changes were proposed in this PR?
CI on `release/v1.2` fails at workflow parse because the branch pins
`coursier/cache-action` v8.1.0, whose ASF actions-allowlist entry
expired on 2026-08-05 (v8.1.1 was approved in July with a one-month
grace for the old SHA). The docker action pins on the branch have
allowlist expiry dates of Aug 16/19, so they are bumped in the same pass
instead of waiting for the next breakage.
All five pins move to the SHAs `main` already uses (allowlisted,
exercised on `main` daily):
| Action | v1.2 pin | New pin (= main) |
| --- | --- | --- |
| coursier/cache-action | v8.1.0 (expired Aug 5) | v8.1.1 |
| docker/build-push-action | v7.1.0 (expires Aug 16) | v7.3.0 |
| docker/login-action | v4.1.0 (expires Aug 16) | v4.4.0 |
| docker/setup-buildx-action | v4.0.0 (expires Aug 16) | v4.2.0 |
| docker/setup-qemu-action | v4.0.0 (expires Aug 19) | v4.2.0 |
Only `uses:` lines change; no job logic is touched.
### Any related issues, documentation, discussions?
Fixes #7572.
### How was this PR tested?
YAML validated; every new SHA checked against the current
`apache/infrastructure-actions` allowlist (`actions.yml`): the
coursier/build-push/buildx/qemu entries carry no expiry, and
login-action matches `main`'s Oct 16 lease. The coursier bump is
exercised by this PR's own sbt CI legs; the docker pins are the same
SHAs `main`'s daily image publishing runs.
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Opus 4.8)
Co-authored-by: Claude Opus 4.8 <[email protected]>
---
.github/workflows/build-and-push-images.yml | 28 ++++++++++++++--------------
.github/workflows/build.yml | 6 +++---
2 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/.github/workflows/build-and-push-images.yml
b/.github/workflows/build-and-push-images.yml
index e70cd8c3e7..aa8335cfc1 100644
--- a/.github/workflows/build-and-push-images.yml
+++ b/.github/workflows/build-and-push-images.yml
@@ -128,7 +128,7 @@ jobs:
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -330,7 +330,7 @@ jobs:
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -349,11 +349,11 @@ jobs:
df -h
- name: Set up Docker Buildx
- uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+ uses:
docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -361,13 +361,13 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push AMD64 image
- uses:
docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+ uses:
docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -410,7 +410,7 @@ jobs:
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
@@ -430,16 +430,16 @@ jobs:
# Set up QEMU for ARM64 emulation
- name: Set up QEMU
- uses:
docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+ uses:
docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
with:
platforms: linux/arm64
- name: Set up Docker Buildx
- uses:
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+ uses:
docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -447,13 +447,13 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
- name: Build and push ARM64 image
- uses:
docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+ uses:
docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with:
context: ${{ matrix.context }}
file: ${{ matrix.dockerfile }}
@@ -481,7 +481,7 @@ jobs:
steps:
- name: Log in to GitHub Container Registry
if: startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/')
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -489,7 +489,7 @@ jobs:
- name: Log in to Docker Hub
if: ${{ !startsWith(needs.set-parameters.outputs.docker_registry,
'ghcr.io/') }}
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 #
v4.1.0
+ uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 #
v4.4.0
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4ded8154d3..788a884106 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -217,7 +217,7 @@ jobs:
PGPASSWORD: postgres
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Lint and build amber distributable bundle
@@ -392,7 +392,7 @@ jobs:
PGPASSWORD: postgres
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Create texera_db_for_test_cases
@@ -586,7 +586,7 @@ jobs:
java-version: 17
- name: Setup sbt launcher
uses: sbt/setup-sbt@6444f4c8111de4b9059c3975def104b03cfaa5f0 # v1.5.2
- - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 #
v8.1.0
+ - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d #
v8.1.1
with:
extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}",
"project/build.properties" ]'
- name: Create Databases
