Skip to content

ci: bump coursier/cache-action to v8.1.0#4543

Merged
aglinxinyuan merged 1 commit into
apache:mainfrom
bobbai00:ci/bump-coursier-cache-action
Apr 28, 2026
Merged

ci: bump coursier/cache-action to v8.1.0#4543
aglinxinyuan merged 1 commit into
apache:mainfrom
bobbai00:ci/bump-coursier-cache-action

Conversation

@bobbai00
Copy link
Copy Markdown
Contributor

@bobbai00 bobbai00 commented Apr 28, 2026

What changes were proposed in this PR?

  • Bump coursier/cache-action from SHA 4e2615869d (v6.4.9) to 90c37294538be80a558fd665531fcdc2b467b475 (v8.1.0) in .github/workflows/github-action-build.yml and .github/workflows/build-and-push-images.yml.
  • The old SHA is no longer on the ASF approved-actions allowlist (apache/infrastructure-actions/approved_patterns.yml).

Any related issues, documentation, discussions?

How was this PR tested?

Manually tested

Was this PR authored or co-authored using generative AI tooling?

Yes

The previously pinned SHA 4e2615869d (v6.4.9) is no longer on the
ASF approved-actions allowlist (apache/infrastructure-actions/
approved_patterns.yml). The allowlist now permits only v8.x SHAs;
v8.1.0 (90c37294538be80a558fd665531fcdc2b467b475) is the latest
allowed and is what most apache/pekko repos use.

Without this bump, the Build workflow's scala job and the image
build workflow fail at startup with "action ... is not allowed".

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions github-actions Bot added the ci changes related to CI label Apr 28, 2026
@bobbai00 bobbai00 self-assigned this Apr 28, 2026
@bobbai00 bobbai00 changed the title ci: bump coursier/cache-action to v8.1.0 for ASF allowlist ci: bump coursier/cache-action to v8.1.0 Apr 28, 2026
@bobbai00 bobbai00 added the fix label Apr 28, 2026
@bobbai00 bobbai00 requested a review from aglinxinyuan April 28, 2026 04:55
@bobbai00 bobbai00 enabled auto-merge (squash) April 28, 2026 04:57
@bobbai00 bobbai00 disabled auto-merge April 28, 2026 04:57
@bobbai00 bobbai00 requested a review from Xiao-zhen-Liu April 28, 2026 04:57
@bobbai00 bobbai00 changed the title ci: bump coursier/cache-action to v8.1.0 ci: bump coursiercache-action to v8.1.0 Apr 28, 2026
@bobbai00 bobbai00 changed the title ci: bump coursiercache-action to v8.1.0 ci: bump coursier/cache-action to v8.1.0 Apr 28, 2026
Copy link
Copy Markdown
Contributor

@Xiao-zhen-Liu Xiao-zhen-Liu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@aglinxinyuan aglinxinyuan merged commit 402d974 into apache:main Apr 28, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci changes related to CI fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants