aglinxinyuan opened a new pull request, #9100:
URL: https://github.com/apache/texera/pull/9100
### What changes were proposed in this PR?
Nothing can merge into `main` right now. Two CI faults block it, and each
fix needs the other to land first.
```
Before: Scala job -> sbt/setup-sbt v1.5.7 -> nested carabiner action not
allowed -> fails at Set up job
merge group -> no runner within 45 min ->
checks_timed_out, PR leaves the queue
After: Scala job -> sbt/setup-sbt v1.5.12 -> every nested action allowed
-> runs
merge group -> waits up to 360 min for runners -> merges
```
- **setup-sbt.** The ASF actions allowlist dropped the nested
`carabiner-dev/actions/install/*` refs that `sbt/setup-sbt` v1.5.7 reaches, so
every job that sets up sbt (`amber`, `amber-integration`, `platform`,
`platform-integration`, `Bench`) has died at *Set up job* since 2026-10-19.
This moves all 9 call sites to v1.5.12, whose whole chain is allowed. The
action's inputs did not change.
- **Merge queue timeout.** The queue ejects an entry whose required checks
have not reported within `check_response_timeout_minutes`, which is 45. ASF's
shared runners are backed up well past that: in the last merge group, *Validate
PR title*, a 2-second job, waited 110 minutes for a runner. This raises the
limit to 360 minutes, as DataFusion did in apache/datafusion#26293.
The timeout change cannot pass its own Scala checks without the setup-sbt
bump, and the bump keeps timing out in the queue without the higher limit, so
both go in one PR.
### Any related issues, documentation, discussions?
Closes #9095.
### How was this PR tested?
Every changed file parses:
```
python -I -c "import sys, yaml; [yaml.safe_load(open(f)) for f in
sys.argv[1:]]" .asf.yaml .github/workflows/benchmarks.yml
.github/workflows/build-and-push-images.yml .github/workflows/build.yml
.github/workflows/dependency-graph.yml
```
Walking the `uses:` chain under `sbt/setup-sbt@ecad189` (v1.5.12) reaches
`ampel/verify@32587e8`, `install/ampel@d6d91c5`,
`install/download-and-verify@2fec8bd` and `install/ampel-bootstrap@16009dc`,
and all four are in `apache/infrastructure-actions`' `approved_patterns.yml` as
of 2026-10-23. Under v1.5.7, `install/ampel@2fec8bd`,
`install/download-and-verify@16009dc` and `install/ampel-bootstrap@619a474` are
not.
The rest is CI. The labeler applies `ci` for `.github/**`, which runs every
stack that sets up sbt, plus `Bench`. The new timeout only shows once this is
merged.
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Claude Opus 5.5)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
