pFad - Phone/Frame/Anonymizer/Declutterfier! Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

URL: http://github.com/apache/iceberg-python/commit/d008a04a7cf8ec6c73855285117dca1ad25b35d1

gin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/global-7a1ad343bd40328c.css" /> CI: Use specific patch versions in workflow action comments (#3331) · apache/iceberg-python@d008a04 · GitHub
Skip to content

Commit d008a04

Browse files
kevinjqliukevinjqliu
authored
CI: Use specific patch versions in workflow action comments (#3331)
<!-- Thanks for opening a pull request! --> <!-- In the case this PR will resolve an issue, please replace ${GITHUB_ISSUE_ID} below with the actual Github issue id. --> <!-- Closes #${GITHUB_ISSUE_ID} --> # Rationale for this change Similar to apache/iceberg#16229 The workflow files use SHA-pinned actions (immutable), but the human-readable comments referenced only major versions (e.g., `# v6`, `# v5`). **When maintainers move these mutable tags to a new commit, zizmor fails in CI because the SHA no longer matches the stated tag.** ## Are these changes tested? ## Are there any user-facing changes? <!-- In the case of user-facing changes, please add the changelog label. -->
1 parent 8e6d97f commit d008a04

11 files changed

Lines changed: 40 additions & 40 deletions

‎.github/workflows/asf-allowlist-check.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
asf-allowlist-check:
4141
runs-on: ubuntu-24.04
4242
steps:
43-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
43+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4444
with:
4545
persist-credentials: false
4646
- uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 # main

‎.github/workflows/check-md-link.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
markdown-link-check:
4040
runs-on: ubuntu-latest
4141
steps:
42-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
42+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
persist-credentials: false
4545
- uses: tcort/github-action-markdown-link-check@e7c7a18363c842693fadde5d41a3bd3573a7a225 # v1.1.2

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: Checkout repository
44-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
44+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4545
with:
4646
persist-credentials: false
4747

‎.github/workflows/license_check.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
rat:
2828
runs-on: ubuntu-latest
2929
steps:
30-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
30+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3131
with:
3232
persist-credentials: false
3333
- run: dev/check-license

‎.github/workflows/nightly-pypi-build.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,12 +34,12 @@ jobs:
3434
outputs:
3535
VERSION: ${{ steps.set-version.outputs.VERSION }}
3636
steps:
37-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
37+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3838
with:
3939
fetch-depth: 1
4040
persist-credentials: false
4141

42-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
42+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4343
with:
4444
python-version: 3.12
4545

@@ -79,7 +79,7 @@ jobs:
7979

8080
steps:
8181
- name: Download all the artifacts
82-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
82+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
8383
with:
8484
merge-multiple: true
8585
path: dist/

‎.github/workflows/pypi-build-artifacts.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939
os: [ ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest ]
4040

4141
steps:
42-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
42+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
fetch-depth: 1
4545
persist-credentials: false
4646

47-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
47+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4848
with:
4949
python-version: |
5050
3.10
@@ -89,7 +89,7 @@ jobs:
8989
if: matrix.os == 'ubuntu-latest'
9090
run: ls -lah dist/* && cp dist/* wheelhouse/
9191

92-
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
92+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
9393
with:
9494
name: "pypi-release-candidate-${{ matrix.os }}"
9595
path: ./wheelhouse/*
@@ -100,7 +100,7 @@ jobs:
100100
- pypi-build-artifacts
101101
steps:
102102
- name: Merge Artifacts
103-
uses: actions/upload-artifact/merge@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
103+
uses: actions/upload-artifact/merge@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
104104
with:
105105
name: "pypi-release-candidate-${{ inputs.VERSION }}"
106106
pattern: pypi-release-candidate*

‎.github/workflows/python-ci-docs.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,10 +38,10 @@ jobs:
3838
runs-on: ubuntu-slim
3939

4040
steps:
41-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
41+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4242
with:
4343
persist-credentials: false
44-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
44+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4545
with:
4646
python-version: 3.12
4747
- name: Install UV

‎.github/workflows/python-ci.yml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -55,10 +55,10 @@ jobs:
5555
python: ['3.10', '3.11', '3.12', '3.13', '3.14']
5656

5757
steps:
58-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
58+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5959
with:
6060
persist-credentials: false
61-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
61+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
6262
with:
6363
python-version: ${{ matrix.python }}
6464
- name: Install UV
@@ -81,10 +81,10 @@ jobs:
8181
integration-test:
8282
runs-on: ubuntu-latest
8383
steps:
84-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
84+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
8585
with:
8686
persist-credentials: false
87-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
87+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
8888
with:
8989
python-version: '3.12'
9090
- name: Install UV
@@ -101,7 +101,7 @@ jobs:
101101
if: ${{ failure() }}
102102
run: docker compose -f dev/docker-compose-integration.yml logs
103103
- name: Upload coverage data
104-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
104+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
105105
with:
106106
name: coverage-integration
107107
path: .coverage*
@@ -110,10 +110,10 @@ jobs:
110110
integration-test-s3:
111111
runs-on: ubuntu-latest
112112
steps:
113-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
113+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
114114
with:
115115
persist-credentials: false
116-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
116+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
117117
with:
118118
python-version: '3.12'
119119
- name: Install UV
@@ -130,7 +130,7 @@ jobs:
130130
if: ${{ failure() }}
131131
run: docker compose -f dev/docker-compose.yml logs
132132
- name: Upload coverage data
133-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
133+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
134134
with:
135135
name: coverage-s3
136136
path: .coverage*
@@ -139,10 +139,10 @@ jobs:
139139
integration-test-adls:
140140
runs-on: ubuntu-latest
141141
steps:
142-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
142+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
143143
with:
144144
persist-credentials: false
145-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
145+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
146146
with:
147147
python-version: '3.12'
148148
- name: Install UV
@@ -159,7 +159,7 @@ jobs:
159159
if: ${{ failure() }}
160160
run: docker compose -f dev/docker-compose-azurite.yml logs
161161
- name: Upload coverage data
162-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
162+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
163163
with:
164164
name: coverage-adls
165165
path: .coverage*
@@ -168,10 +168,10 @@ jobs:
168168
integration-test-gcs:
169169
runs-on: ubuntu-latest
170170
steps:
171-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
171+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
172172
with:
173173
persist-credentials: false
174-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
174+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
175175
with:
176176
python-version: '3.12'
177177
- name: Install UV
@@ -188,7 +188,7 @@ jobs:
188188
if: ${{ failure() }}
189189
run: docker compose -f dev/docker-compose-gcs-server.yml logs
190190
- name: Upload coverage data
191-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
191+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
192192
with:
193193
name: coverage-gcs
194194
path: .coverage*
@@ -198,10 +198,10 @@ jobs:
198198
runs-on: ubuntu-latest
199199
needs: [integration-test, integration-test-s3, integration-test-adls, integration-test-gcs]
200200
steps:
201-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
201+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
202202
with:
203203
persist-credentials: false
204-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
204+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
205205
with:
206206
python-version: '3.12'
207207
- name: Install UV
@@ -211,7 +211,7 @@ jobs:
211211
- name: Install dependencies
212212
run: uv sync --group dev
213213
- name: Download all coverage artifacts
214-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
214+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
215215
with:
216216
pattern: coverage-*
217217
merge-multiple: true
@@ -221,10 +221,10 @@ jobs:
221221
cibw-dev-env-smoke-test:
222222
runs-on: ubuntu-latest
223223
steps:
224-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
224+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
225225
with:
226226
persist-credentials: false
227-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
227+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
228228
with:
229229
python-version: '3.12'
230230
- name: Install UV

‎.github/workflows/python-release-docs.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,10 @@ jobs:
3535
contents: write
3636

3737
steps:
38-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
38+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3939
with:
4040
persist-credentials: false
41-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
41+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4242
with:
4343
python-version: 3.12
4444
- name: Install UV

‎.github/workflows/python-release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -100,12 +100,12 @@ jobs:
100100
needs:
101101
- validate-inputs
102102
steps:
103-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
103+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
104104
with:
105105
fetch-depth: 1
106106
persist-credentials: false
107107

108-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
108+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
109109
with:
110110
python-version: 3.12
111111

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad © 2024 Your Company Name. All rights reserved.




Check this box to remove all script contents from the fetched content.



Check this box to remove all images from the fetched content.


Check this box to remove all CSS styles from the fetched content.


Check this box to keep images inefficiently compressed and original size.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy