The GitHub Actions job "GitHub Actions Security Analysis" on 
airflow-steward.git/feat/doc-validation-ci has succeeded.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
0a84efc0325032a870e1f4cab8c7ca03a10bb1ba / Jarek Potiuk <[email protected]>
fix(ci): bump node language version + use ASF-allowlisted lychee-action SHA

PR #18's first CI run failed three checks; this fixup commit addresses
all three:

- prek / markdownlint — markdownlint-cli2 v0.22.1 requires Node ≥ 20
  (its string-width dep uses the regex `/v` flag), but
  `default_language_version.node` was pinned to 18.6.0. Bumped to
  22.11.0 (current active LTS).

- asf-allowlist-check — `lycheeverse/lychee-action@82202e5e…`
  (v2.6.1) is not on the ASF infrastructure-actions allowlist.
  Re-pinned to the allowlisted v2.8.0 SHA
  `8646ba30535128ac92d33dfc9133794bfdd9b411`. Comment in the workflow
  now explains the allowlist requirement so future bumps go through
  the same check.

- zizmor (ref-version-mismatch) — the v2.6.1-comment + actual-SHA
  combination from the original pin was flagged because the SHA
  pointed to v2.4.1, not v2.6.1. The new v2.8.0 SHA correctly maps
  to its tag, so the warning disappears with the same change.

prek + zizmor verified clean locally.

Generated-by: Claude Code (Opus 4.7)

Report URL: https://github.com/apache/airflow-steward/actions/runs/25216288647

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to