Yong, thanks a lot for reporting this! Since it blocks all PRs, I'd prefer to move to v6 as soon as possible given the urgency. We can check with ASF Infra in parallel to see whether adding the v5 hash back is still an option.
+1 on upgrading to v6. Yufei On Mon, Jun 22, 2026 at 11:14 AM Yong Zheng <[email protected]> wrote: > Hello team, > > The current CI is broken for all due to issue on setup-gradle. This > appears to be related to #4518 and #4512 where none of the hash for v5 is > on allowed list for ASF. If we need to use v5, we would need some help from > ASF infra to allow that: > > ``` > curl -s > https://raw.githubusercontent.com/apache/infrastructure-actions/main/approved_patterns.yml > | grep "gradle/actions/setup-gradle" > - gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f > - gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e > - gradle/actions/setup-gradle@5e2ebd065dc2488b7a6ad670704656cbbe1e8f60 > - gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 > ``` > And we are on the following version: > > ``` > uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c > # v5 > ``` > > Should we proceed to v6 or ask infra to add v5 back? > > Thanks, > Yong Zheng >
