Skip to content

Bump Github Action versions - #13

Merged
kumaab merged 1 commit into
mainfrom
bump_action
Aug 6, 2026
Merged

Bump Github Action versions#13
kumaab merged 1 commit into
mainfrom
bump_action

Conversation

@kumaab

@kumaab kumaab commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

Bump GitHub Action versions to latest versions (in ASF whitelist) to avoid jobs not running on CI.

Versions not allowed are seen by this check: https://github.com/apache/ranger-tools/actions/runs/31066452015/job/92505059589?pr=12

How was this patch tested?

CI run: https://github.com/apache/ranger-tools/actions/runs/31066744646

@kumaab kumaab self-assigned this Aug 6, 2026
@kumaab
kumaab merged commit 677b9b5 into main Aug 6, 2026
7 checks passed

@adoroszlai adoroszlai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @kumaab for the patch. Can we bump all docker actions, even if still allowed currently? They will be outdated in a few weeks.

        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a

to

        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

Infra allowlist:

445:  030e881283bb7a6894de51c315a6bfe6a94e05cf:
446-    tag: v6.0.0
447-    expires_at: 2026-08-16
--
454:  4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:
455-    tag: v4.0.0
456-    expires_at: 2026-08-16
--
463:  ce360397dd3f832beb865e1373c09c0e9f86d70a:
464-    tag: v4.0.0
465-    expires_at: 2026-08-19

Also, please add a dependabot config to update these versions automatically.

@kumaab

kumaab commented Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Thanks @kumaab for the patch. Can we bump all docker actions, even if still allowed currently? They will be outdated in a few weeks.

        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a

to

        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

Infra allowlist:

445:  030e881283bb7a6894de51c315a6bfe6a94e05cf:
446-    tag: v6.0.0
447-    expires_at: 2026-08-16
--
454:  4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:
455-    tag: v4.0.0
456-    expires_at: 2026-08-16
--
463:  ce360397dd3f832beb865e1373c09c0e9f86d70a:
464-    tag: v4.0.0
465-    expires_at: 2026-08-19

Also, please add a dependabot config to update these versions automatically.

Sure Attila, sounds good. I'll do that in a follow-up PR. Thank you!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants