dongjoon-hyun opened a new pull request, #809: URL: https://github.com/apache/spark-kubernetes-operator/pull/809
### What changes were proposed in this pull request? This PR aims to update `docker/*` GitHub Actions to the latest approved commit hashes. - `docker/setup-qemu-action`: `ce360397dd3f832beb865e1373c09c0e9f86d70a` (v4.0.0) -> `96fe6ef7f33517b61c61be40b68a1882f3264fb8` ([v4.2.0](https://github.com/docker/setup-qemu-action/releases/tag/v4.2.0), 2026-07-01) - `docker/setup-buildx-action`: `4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd` (v4.0.0) -> `37fe631027851001ddb9b187196cc803df7f5f0e` ([v4.3.0](https://github.com/docker/setup-buildx-action/releases/tag/v4.3.0), 2026-08-19) - `docker/login-action`: `4907a6ddec9925e35a0a9e82d7399ccc52663121` (v4.1.0) -> `dbcb813823bdd20940b903addbd779551569679f` ([v4.6.0](https://github.com/docker/login-action/releases/tag/v4.6.0), 2026-07-29) - `docker/build-push-action`: `bcafcacb16a39f128d818304e6c9c0c18556b85f` (v7.1.0) -> `53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` ([v7.3.0](https://github.com/docker/build-push-action/releases/tag/v7.3.0), 2026-07-01) ### Why are the changes needed? ASF INFRA removed all four commit hashes from the approved action list on 2026-09-03. - https://github.com/apache/infrastructure-actions/commit/63206b1 (`Remove Expired Refs`) Since then, the `Publish Snapshot Image` workflow cannot start at all and ends with `startup_failure` before any job is created: ``` The actions docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a, docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd, docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121, and docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f are not allowed in apache/spark-kubernetes-operator because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ... ``` - https://github.com/apache/spark-kubernetes-operator/actions/runs/33699649546 This is the same class of failure as SPARK-59230, which fixed `gradle/actions/setup-gradle` for the `Build` workflow. ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? Pass the CIs. ### Was this patch authored or co-authored using generative AI tooling? Generated-by: Claude Opus 5 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
