dongjoon-hyun opened a new pull request, #59141:
URL: https://github.com/apache/spark/pull/59141

   ### What changes were proposed in this pull request?
   
   This PR bumps the GitHub Actions used by Spark CI to the latest versions.
   
   **`docker/*`** (pinned by hash, latest entries in the ASF allow-list):
   
   | Action | Old | New |
   |---|---|---|
   | `docker/build-push-action` | 
[v7.3.0](https://github.com/docker/build-push-action/releases/tag/v7.3.0) 
(2026-07-01) | 
[v7.4.0](https://github.com/docker/build-push-action/releases/tag/v7.4.0) 
(2026-09-15) |
   | `docker/setup-buildx-action` | 
[v4.2.0](https://github.com/docker/setup-buildx-action/releases/tag/v4.2.0) 
(2026-07-02) | 
[v4.4.1](https://github.com/docker/setup-buildx-action/releases/tag/v4.4.1) 
(2026-09-16) |
   | `docker/setup-qemu-action` | 
[v4.2.0](https://github.com/docker/setup-qemu-action/releases/tag/v4.2.0) 
(2026-07-01) | 
[v4.4.0](https://github.com/docker/setup-qemu-action/releases/tag/v4.4.0) 
(2026-09-15) |
   
   **`actions/*`** (referenced by major tag):
   
   | Action | Old | New |
   |---|---|---|
   | `actions/cache`, `actions/cache/restore` | v5 | 
[v6](https://github.com/actions/cache/releases/tag/v6.1.0) (v6.1.0, 2026-06-26) 
|
   | `actions/setup-node` | v6 | 
[v7](https://github.com/actions/setup-node/releases/tag/v7.0.0) (v7.0.0, 
2026-07-14) |
   | `actions/stale` | v10 | 
[v11](https://github.com/actions/stale/releases/tag/v11.0.0) (v11.0.0, 
2026-07-28) |
   
   All other actions are already at their latest version.
   
   ### Why are the changes needed?
   
   The current `docker/*` pins expire from the ASF allow-list between 
2026-11-19 and 2026-12-09, after which CI jobs using them fail. The `actions/*` 
majors are ESM migrations with dependency updates and no input changes.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No.
   
   ### How was this patch tested?
   
   Verified that every hash-pinned `docker/*` reference is in the latest 
`approved_patterns.yml` and that all workflow YAML files parse. CI on this PR 
exercises the updated actions.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: Claude Sonnet 5.5


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to