From a83c94856cdb387c4879b70d894b13bab8b3e33f Mon Sep 17 00:00:00 2001 From: Jiadong Bai Date: Mon, 27 Apr 2026 21:38:18 -0700 Subject: [PATCH] ci: bump coursier/cache-action to v8.1.0 for ASF allowlist The previously pinned SHA 4e2615869d (v6.4.9) is no longer on the ASF approved-actions allowlist (apache/infrastructure-actions/ approved_patterns.yml). The allowlist now permits only v8.x SHAs; v8.1.0 (90c37294538be80a558fd665531fcdc2b467b475) is the latest allowed and is what most apache/pekko repos use. Without this bump, the Build workflow's scala job and the image build workflow fail at startup with "action ... is not allowed". Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/build-and-push-images.yml | 6 +++--- .github/workflows/github-action-build.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-and-push-images.yml b/.github/workflows/build-and-push-images.yml index c7762ada03a..b63743ec2c0 100644 --- a/.github/workflows/build-and-push-images.yml +++ b/.github/workflows/build-and-push-images.yml @@ -128,7 +128,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1.1.14 - - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.9 + - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -327,7 +327,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.9 + - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -407,7 +407,7 @@ jobs: - name: Setup sbt launcher uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.9 + - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' diff --git a/.github/workflows/github-action-build.yml b/.github/workflows/github-action-build.yml index 21e70fcf509..f7a72b8da5a 100644 --- a/.github/workflows/github-action-build.yml +++ b/.github/workflows/github-action-build.yml @@ -122,7 +122,7 @@ jobs: if [ -f amber/operator-requirements.txt ]; then pip install -r amber/operator-requirements.txt; fi - name: Setup sbt launcher uses: sbt/setup-sbt@508b753e53cb6095967669e0911487d2b9bc9f41 # v1.1.22 - - uses: coursier/cache-action@4e2615869d13561d626ed48655e1a39e5b192b3c # v6.4.9 + - uses: coursier/cache-action@90c37294538be80a558fd665531fcdc2b467b475 # v8.1.0 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' - name: Lint with scalafmt