This is an automated email from the ASF dual-hosted git repository.
raulcd pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow.git
The following commit(s) were added to refs/heads/main by this push:
new f7159f2bff GH-48326: [CI] Stop specifying hash for `actions/*` GitHub
Actions (#48327)
f7159f2bff is described below
commit f7159f2bff091a2adf9b918a754701df1f122560
Author: Sutou Kouhei <[email protected]>
AuthorDate: Fri Dec 5 23:26:09 2025 +0900
GH-48326: [CI] Stop specifying hash for `actions/*` GitHub Actions (#48327)
### Rationale for this change
Dependabot sometimes failed to update hash.
For example: https://github.com/apache/arrow/pull/48301
The ASF GitHub Actions policy doesn't requiring pinning `actions/*` actions:
https://infra.apache.org/github-actions-policy.html
> External actions
>
> You MAY use all actions internal to the `apache/*`, `github/*` and
`actions/*` namespaces without restrictions.
>
> You MUST pin all external actions to the specific git hash (SHA1) of the
action that has been reviewed for use by the project. For instance, you MUST
pin `foobar/baz-action@ 8843d7f92416211de9ebb963ff4ce28125932878`.
We can avoid the Dependabot behavior by removing hash from `actions/*`
actions.
### What changes are included in this PR?
* Remove hash from `actions/*` actions.
* Use `@ vX` instead of `@ vX.Y.Z` to reduce Dependabot updates.
### Are these changes tested?
Yes.
### Are there any user-facing changes?
No.
* GitHub Issue: #48326
Authored-by: Sutou Kouhei <[email protected]>
Signed-off-by: Raúl Cumplido <[email protected]>
---
.github/workflows/archery.yml | 4 ++--
.github/workflows/check_labels.yml | 2 +-
.github/workflows/comment_bot.yml | 6 +++---
.github/workflows/cpp.yml | 14 +++++++-------
.github/workflows/cpp_extra.yml | 16 ++++++++--------
.github/workflows/cpp_windows.yml | 2 +-
.github/workflows/dev.yml | 6 +++---
.github/workflows/dev_pr.yml | 10 +++++-----
.github/workflows/docs.yml | 4 ++--
.github/workflows/docs_light.yml | 4 ++--
.github/workflows/integration.yml | 16 ++++++++--------
.github/workflows/issue_bot.yml | 2 +-
.github/workflows/matlab.yml | 6 +++---
.github/workflows/package_linux.yml | 6 +++---
.github/workflows/pr_bot.yml | 6 +++---
.github/workflows/pr_review_trigger.yml | 2 +-
.github/workflows/python.yml | 12 ++++++------
.github/workflows/r.yml | 20 ++++++++++----------
.github/workflows/r_nightly.yml | 6 +++---
.github/workflows/release_candidate.yml | 4 ++--
.github/workflows/report_ci.yml | 4 ++--
.github/workflows/ruby.yml | 12 ++++++------
.github/workflows/stale.yml | 12 ++++++------
.github/workflows/verify_rc.yml | 14 +++++++-------
24 files changed, 95 insertions(+), 95 deletions(-)
diff --git a/.github/workflows/archery.yml b/.github/workflows/archery.yml
index f6f3574971..e82281f425 100644
--- a/.github/workflows/archery.yml
+++ b/.github/workflows/archery.yml
@@ -58,14 +58,14 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Git Fixup
shell: bash
run: git branch $ARCHERY_DEFAULT_BRANCH origin/$ARCHERY_DEFAULT_BRANCH
|| true
- name: Setup Python
- uses: actions/[email protected]
+ uses: actions/setup-python@v6
with:
python-version: '3.12'
- name: Install pygit2 binary wheel
diff --git a/.github/workflows/check_labels.yml
b/.github/workflows/check_labels.yml
index c8490dd474..3e99d548c3 100644
--- a/.github/workflows/check_labels.yml
+++ b/.github/workflows/check_labels.yml
@@ -43,7 +43,7 @@ jobs:
steps:
- name: Checkout Arrow
if: github.event_name == 'pull_request'
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
- name: Check
id: check
env:
diff --git a/.github/workflows/comment_bot.yml
b/.github/workflows/comment_bot.yml
index 4929ac5e3f..d1fbf058bf 100644
--- a/.github/workflows/comment_bot.yml
+++ b/.github/workflows/comment_bot.yml
@@ -36,13 +36,13 @@ jobs:
pull-requests: write
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
path: arrow
# fetch the tags for version number generation
fetch-depth: 0
- name: Set up Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Install Archery and Crossbow dependencies
@@ -63,7 +63,7 @@ jobs:
if: github.event.comment.body == 'take'
runs-on: ubuntu-latest
steps:
- - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ - uses: actions/github-script@v8
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
diff --git a/.github/workflows/cpp.yml b/.github/workflows/cpp.yml
index 644935e510..718547dbbe 100644
--- a/.github/workflows/cpp.yml
+++ b/.github/workflows/cpp.yml
@@ -110,7 +110,7 @@ jobs:
UBUNTU: ${{ matrix.ubuntu }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -123,7 +123,7 @@ jobs:
- name: Setup Python on hosted runner
if: |
matrix.runs-on == 'ubuntu-latest'
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3
- name: Setup Python on self-hosted runner
@@ -163,7 +163,7 @@ jobs:
timeout-minutes: 45
steps:
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -218,7 +218,7 @@ jobs:
sysctl -a | grep cpu
sysctl -a | grep "hw.optional"
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -235,7 +235,7 @@ jobs:
$(brew --prefix bash)/bin/bash \
ci/scripts/install_minio.sh latest ${ARROW_HOME}
- name: Set up Python
- uses: actions/[email protected]
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Install Google Cloud Storage Testbench
@@ -344,7 +344,7 @@ jobs:
/d 1 `
/f
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -378,7 +378,7 @@ jobs:
https://dl.min.io/server/minio/release/windows-amd64/archive/minio.RELEASE.2024-09-13T20-26-02Z
chmod +x /usr/local/bin/minio.exe
- name: Set up Python
- uses: actions/[email protected]
+ uses: actions/setup-python@v6
id: python-install
with:
python-version: '3.12'
diff --git a/.github/workflows/cpp_extra.yml b/.github/workflows/cpp_extra.yml
index d39932700b..5645a8d0d3 100644
--- a/.github/workflows/cpp_extra.yml
+++ b/.github/workflows/cpp_extra.yml
@@ -121,18 +121,18 @@ jobs:
DOCKER_VOLUME_PREFIX: ".docker/"
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
- name: Cache Docker Volumes
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@v4
with:
path: .docker
key: extra-${{ matrix.image }}-${{ hashFiles('cpp/**') }}
restore-keys: extra-${{ matrix.image }}-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3
- name: Setup Archery
@@ -203,7 +203,7 @@ jobs:
REPO: ghcr.io/${{ github.repository }}-dev
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -211,13 +211,13 @@ jobs:
run: |
ci/scripts/util_free_space.sh
- name: Cache Docker Volumes
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@v4
with:
path: .docker
key: jni-${{ matrix.platform.runs-on }}-${{ hashFiles('cpp/**') }}
restore-keys: jni-${{ matrix.platform.runs-on }}-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3
- name: Setup Archery
@@ -255,7 +255,7 @@ jobs:
MACOSX_DEPLOYMENT_TARGET: "14.0"
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -283,7 +283,7 @@ jobs:
run: |
echo "CCACHE_DIR=${PWD}/ccache" >> ${GITHUB_ENV}
- name: Cache ccache
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@v4
with:
path: ccache
key: jni-macos-${{ hashFiles('cpp/**') }}
diff --git a/.github/workflows/cpp_windows.yml
b/.github/workflows/cpp_windows.yml
index 0940beef69..aad52f4174 100644
--- a/.github/workflows/cpp_windows.yml
+++ b/.github/workflows/cpp_windows.yml
@@ -77,7 +77,7 @@ jobs:
/d 1 `
/f
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index 0157ac6502..11c318295b 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -47,7 +47,7 @@ jobs:
timeout-minutes: 15
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install pre-commit
@@ -88,11 +88,11 @@ jobs:
GIT_COMMITTER_EMAIL: "github-actions[bot]@users.noreply.github.com"
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: '3.12'
- name: Install Ruby
diff --git a/.github/workflows/dev_pr.yml b/.github/workflows/dev_pr.yml
index e5d9ac933e..e2e75a34cf 100644
--- a/.github/workflows/dev_pr.yml
+++ b/.github/workflows/dev_pr.yml
@@ -43,7 +43,7 @@ jobs:
name: Process
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
with:
repository: apache/arrow
ref: main
@@ -53,7 +53,7 @@ jobs:
if: |
(github.event.action == 'opened' ||
github.event.action == 'edited')
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ uses: actions/github-script@v8
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
@@ -64,7 +64,7 @@ jobs:
if: |
(github.event.action == 'opened' ||
github.event.action == 'edited')
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ uses: actions/github-script@v8
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
@@ -75,7 +75,7 @@ jobs:
if: |
(github.event.action == 'opened' ||
github.event.action == 'edited')
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ uses: actions/github-script@v8
with:
debug: true
github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -87,7 +87,7 @@ jobs:
if: |
(github.event.action == 'opened' ||
github.event.action == 'synchronize')
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
+ uses: actions/labeler@v6
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
configuration-path: .github/workflows/dev_pr/labeler.yml
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 894b697fbf..338bcc7448 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -39,7 +39,7 @@ jobs:
JDK: 17
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Free up disk space
@@ -52,7 +52,7 @@ jobs:
key: debian-docs-${{ hashFiles('cpp/**') }}
restore-keys: debian-docs-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
diff --git a/.github/workflows/docs_light.yml b/.github/workflows/docs_light.yml
index 68edc433fc..e68ee21043 100644
--- a/.github/workflows/docs_light.yml
+++ b/.github/workflows/docs_light.yml
@@ -49,7 +49,7 @@ jobs:
PYTHON: "3.12"
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Cache Docker Volumes
@@ -59,7 +59,7 @@ jobs:
key: conda-docs-${{ hashFiles('cpp/**') }}
restore-keys: conda-docs-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
diff --git a/.github/workflows/integration.yml
b/.github/workflows/integration.yml
index 34317c5f26..6cf70f1ebc 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -64,37 +64,37 @@ jobs:
timeout-minutes: 60
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
- name: Checkout Arrow Rust
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-rs
path: rust
- name: Checkout Arrow nanoarrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-nanoarrow
path: nanoarrow
- name: Checkout Arrow Go
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-go
path: go
- name: Checkout Arrow Java
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-java
path: java
- name: Checkout Arrow JS
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-js
path: js
- name: Checkout Arrow .NET
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
repository: apache/arrow-dotnet
path: dotnet
@@ -108,7 +108,7 @@ jobs:
key: conda-${{ hashFiles('cpp/**') }}
restore-keys: conda-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
diff --git a/.github/workflows/issue_bot.yml b/.github/workflows/issue_bot.yml
index 3d37423d4f..1b25c008ab 100644
--- a/.github/workflows/issue_bot.yml
+++ b/.github/workflows/issue_bot.yml
@@ -32,7 +32,7 @@ jobs:
if: github.event.issue.pull_request == null
runs-on: ubuntu-latest
steps:
- - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ - uses: actions/github-script@v8
with:
script: |
let split_body = context.payload.issue.body.split('###
Component(s)');
diff --git a/.github/workflows/matlab.yml b/.github/workflows/matlab.yml
index 7d99b37fb1..50c6fcecbf 100644
--- a/.github/workflows/matlab.yml
+++ b/.github/workflows/matlab.yml
@@ -51,7 +51,7 @@ jobs:
if: ${{ !contains(github.event.pull_request.title, 'WIP') }}
steps:
- name: Check out repository
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install ninja-build
@@ -99,7 +99,7 @@ jobs:
macos-version: "14"
steps:
- name: Check out repository
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install ninja-build
@@ -140,7 +140,7 @@ jobs:
if: ${{ !contains(github.event.pull_request.title, 'WIP') }}
steps:
- name: Check out repository
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install MATLAB
diff --git a/.github/workflows/package_linux.yml
b/.github/workflows/package_linux.yml
index 60408cfa30..d37a142fb2 100644
--- a/.github/workflows/package_linux.yml
+++ b/.github/workflows/package_linux.yml
@@ -110,7 +110,7 @@ jobs:
DOCKER_VOLUME_PREFIX: ".docker/"
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -180,7 +180,7 @@ jobs:
echo "ARROW_VERSION=${version}" >> "${GITHUB_ENV}"
fi
- name: Cache Docker Volumes
- uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+ uses: actions/cache@v4
with:
path: .docker
key: package-linux-${{ matrix.id }}-${{ hashFiles('cpp/**',
'c_glib/**') }}
@@ -274,7 +274,7 @@ jobs:
tar cvzf ${{ matrix.id }}.tar.gz ${DISTRIBUTION}
dev/release/utils-generate-checksum.sh ${{ matrix.id }}.tar.gz
- name: Upload the artifacts to the job
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ uses: actions/upload-artifact@v5
with:
name: ${{ matrix.id }}
path: ${{ matrix.id }}.tar.gz*
diff --git a/.github/workflows/pr_bot.yml b/.github/workflows/pr_bot.yml
index dc9294a13a..63bdb3e91e 100644
--- a/.github/workflows/pr_bot.yml
+++ b/.github/workflows/pr_bot.yml
@@ -40,7 +40,7 @@ jobs:
- name: 'Download PR review payload'
id: 'download'
if: github.event_name == 'workflow_run'
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #
v8.0.0
+ uses: actions/github-script@v8
with:
script: |
const run_id = "${{ github.event.workflow_run.id }}";
@@ -73,7 +73,7 @@ jobs:
curl -sL -o committers.yml $url
echo "committers_path=$(pwd)/committers.yml" >> $GITHUB_OUTPUT
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
path: arrow
repository: apache/arrow
@@ -82,7 +82,7 @@ jobs:
# fetch the tags for version number generation
fetch-depth: 0
- name: Set up Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Install Archery and Crossbow dependencies
diff --git a/.github/workflows/pr_review_trigger.yml
b/.github/workflows/pr_review_trigger.yml
index f1727d0ebd..8d9f0ae04e 100644
--- a/.github/workflows/pr_review_trigger.yml
+++ b/.github/workflows/pr_review_trigger.yml
@@ -29,7 +29,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: "Upload PR review Payload"
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ uses: actions/upload-artifact@v5
with:
path: "${{ github.event_path }}"
name: "pr_review_payload"
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index b868dbc1bc..071a5f98d2 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -103,7 +103,7 @@ jobs:
NUMPY: ${{ matrix.numpy || 'latest' }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -114,7 +114,7 @@ jobs:
key: ${{ matrix.cache }}-${{ hashFiles('cpp/**') }}
restore-keys: ${{ matrix.cache }}-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
@@ -178,12 +178,12 @@ jobs:
MACOSX_DEPLOYMENT_TARGET: 12.0
steps:
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
- name: Setup Python
- uses: actions/[email protected]
+ uses: actions/setup-python@v6
with:
python-version: '3.11'
- name: Install Dependencies
@@ -257,12 +257,12 @@ jobs:
/d 1 `
/f
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.13
- name: Install ccache
diff --git a/.github/workflows/r.yml b/.github/workflows/r.yml
index 9bb83b9759..cca764b69d 100644
--- a/.github/workflows/r.yml
+++ b/.github/workflows/r.yml
@@ -78,7 +78,7 @@ jobs:
UBUNTU: ${{ matrix.ubuntu }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -96,7 +96,7 @@ jobs:
ubuntu-${{ matrix.ubuntu }}-r-${{ matrix.r }}-${{
hashFiles('cpp/src/**/*.cc','cpp/src/**/*.h)') }}-
ubuntu-${{ matrix.ubuntu }}-r-${{ matrix.r }}-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
@@ -118,7 +118,7 @@ jobs:
if: always()
- name: Save the test output
if: always()
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ uses: actions/upload-artifact@v5
with:
name: test-output-${{ matrix.ubuntu }}-${{ matrix.r }}
path: r/check/arrow.Rcheck/tests/testthat.Rout*
@@ -150,12 +150,12 @@ jobs:
R_TAG: ${{ matrix.config.tag }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
@@ -178,7 +178,7 @@ jobs:
if: always()
- name: Save the test output
if: always()
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ uses: actions/upload-artifact@v5
with:
name: test-output-bundled
path: r/check/arrow.Rcheck/tests/testthat.Rout*
@@ -207,7 +207,7 @@ jobs:
steps:
- run: git config --global core.autocrlf false
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Setup ccache
@@ -240,7 +240,7 @@ jobs:
# So that they're unique when multiple are downloaded in the next step
shell: bash
run: mv libarrow.zip libarrow-rtools${{ matrix.config.rtools }}-${{
matrix.config.arch }}.zip
- - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ - uses: actions/upload-artifact@v5
with:
name: libarrow-rtools${{ matrix.config.rtools }}-${{
matrix.config.arch }}.zip
path: libarrow-rtools${{ matrix.config.rtools }}-${{
matrix.config.arch }}.zip
@@ -263,7 +263,7 @@ jobs:
steps:
- run: git config --global core.autocrlf false
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
# This must be done before r-lib/actions/setup-r because curl in
@@ -278,7 +278,7 @@ jobs:
echo "$HOME/.local/bin" >> $GITHUB_PATH
- run: mkdir r/windows
- name: Download artifacts
- uses: actions/[email protected]
+ uses: actions/download-artifact@v6
with:
name: libarrow-rtools40-ucrt64.zip
path: r/windows
diff --git a/.github/workflows/r_nightly.yml b/.github/workflows/r_nightly.yml
index babf4e771a..ff4de22b3a 100644
--- a/.github/workflows/r_nightly.yml
+++ b/.github/workflows/r_nightly.yml
@@ -45,7 +45,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 1
path: arrow
@@ -53,14 +53,14 @@ jobs:
ref: main
submodules: recursive
- name: Checkout Crossbow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
path: crossbow
repository: ursacomputing/crossbow
ref: main
- name: Set up Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
cache: 'pip'
python-version: 3.12
diff --git a/.github/workflows/release_candidate.yml
b/.github/workflows/release_candidate.yml
index 3b6429bb10..8a33bda00e 100644
--- a/.github/workflows/release_candidate.yml
+++ b/.github/workflows/release_candidate.yml
@@ -44,7 +44,7 @@ jobs:
timeout-minutes: 10
steps:
- name: Checkout Arrow
- uses: actions/[email protected]
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Install dependencies
@@ -101,7 +101,7 @@ jobs:
"${RELEASE_TARBALL}"
fi
- name: Upload Artifacts
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
# v5.0.0
+ uses: actions/upload-artifact@v5
with:
name: release-candidate
path: ${{ env.RELEASE_TARBALL }}*
diff --git a/.github/workflows/report_ci.yml b/.github/workflows/report_ci.yml
index 3386b4777a..d8315123cc 100644
--- a/.github/workflows/report_ci.yml
+++ b/.github/workflows/report_ci.yml
@@ -30,11 +30,11 @@ jobs:
name: ${{ github.job }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3
- name: Setup Archery
diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 1bb09def98..3945796c74 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -81,7 +81,7 @@ jobs:
UBUNTU: ${{ matrix.ubuntu }}
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -92,7 +92,7 @@ jobs:
key: ubuntu-${{ matrix.ubuntu }}-ruby-${{ hashFiles('cpp/**') }}
restore-keys: ubuntu-${{ matrix.ubuntu }}-ruby-
- name: Setup Python
- uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ uses: actions/setup-python@v6
with:
python-version: 3.12
- name: Setup Archery
@@ -150,7 +150,7 @@ jobs:
ARROW_WITH_ZSTD: ON
steps:
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -248,7 +248,7 @@ jobs:
/d 1 `
/f
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -366,7 +366,7 @@ jobs:
/d 1 `
/f
- name: Checkout Arrow
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
submodules: recursive
@@ -396,7 +396,7 @@ jobs:
# We can invalidate the current cache by updating this.
CACHE_VERSION: "2024-05-09"
- name: Checkout vcpkg
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ uses: actions/checkout@v6
with:
fetch-depth: 0
path: vcpkg
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 939e274fa7..84c4d8846a 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -28,7 +28,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
stale-pr-message: "Thank you for your contribution. Unfortunately,
this pull request has been marked as stale because it has had no activity in
the past 365 days. Please remove the stale label or comment below, or this PR
will be closed in 14 days. Feel free to re-open this if it has been closed in
error. If you do not have repository permissions to reopen the PR, please tag a
maintainer."
stale-pr-label: "Status: stale-warning"
@@ -46,7 +46,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
stale-pr-label: "Status: stale-warning"
only-pr-labels: "Status: stale-warning"
@@ -63,7 +63,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
# exclude PRs
days-before-pr-stale: -1
@@ -82,7 +82,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
# exclude PRs
days-before-pr-stale: -1
@@ -99,7 +99,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
# exclude PRs
days-before-pr-stale: -1
@@ -118,7 +118,7 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v10.1.0
+ - uses: actions/stale@v10
with:
# exclude PRs
days-before-pr-stale: -1
diff --git a/.github/workflows/verify_rc.yml b/.github/workflows/verify_rc.yml
index 7d1d7bb3b9..e88b8ca8f2 100644
--- a/.github/workflows/verify_rc.yml
+++ b/.github/workflows/verify_rc.yml
@@ -90,7 +90,7 @@ jobs:
TEST_APT: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Run
@@ -133,7 +133,7 @@ jobs:
TEST_BINARY: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
- name: Run
run: |
dev/release/verify-release-candidate.sh ${VERSION} ${RC}
@@ -156,8 +156,8 @@ jobs:
TEST_WHEELS: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
- - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 #
v6.1.0
+ - uses: actions/checkout@v6
+ - uses: actions/setup-python@v6
with:
python-version: 3
- name: Setup Archery
@@ -202,7 +202,7 @@ jobs:
TEST_WHEELS: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
- name: Run
env:
GH_TOKEN: ${{ github.token }}
@@ -220,7 +220,7 @@ jobs:
TEST_WHEELS: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
with:
submodules: recursive
- uses:
conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f #
v3.2.0
@@ -254,7 +254,7 @@ jobs:
TEST_YUM: "1"
VERSION: ${{ needs.target.outputs.version }}
steps:
- - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd #
v5.0.1
+ - uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Run
