This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 516fa088f4d ci: cancel superseded Cron Job ITs runs on pull requests
(#20692)
516fa088f4d is described below
commit 516fa088f4de1528fe4ef9826988bbc338bd2fbe
Author: Andreas Maechler <[email protected]>
AuthorDate: Fri Oct 23 00:33:49 2026 -0600
ci: cancel superseded Cron Job ITs runs on pull requests (#20692)
* ci: cancel superseded Cron Job ITs runs on pull requests
Use the same concurrency group as the other PR workflows, so a new push to
a PR that touches owasp-dependency-check-suppressions.xml cancels the
dependency check still running for the previous push. Scheduled runs and
release-branch pushes keep a group per run and are never cancelled.
* ci: stop the Cron Job ITs failure message from re-running Maven
The failure message wrapped './mvnw dependency-check:check' in backticks
inside a double-quoted string, so bash ran it as a command substitution:
every failed check started a second Maven run and pasted its output into
the message. Quote the command instead.
---
.github/workflows/cron-job-its.yml | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/cron-job-its.yml
b/.github/workflows/cron-job-its.yml
index 72d9a3182f7..eb85273e611 100644
--- a/.github/workflows/cron-job-its.yml
+++ b/.github/workflows/cron-job-its.yml
@@ -29,6 +29,10 @@ on:
- '[0-9]+.[0-9]+.[0-9]+' # release branches
- '[0-9]+.[0-9]+.[0-9]+-[A-Za-z0-9]+' # release branches
+concurrency:
+ group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label ||
github.head_ref || github.run_id }}' # group workflows only on pull_requests
and not on branch commits
+ cancel-in-progress: true
+
jobs:
security_vulnerabilities:
if: github.repository == 'apache/druid'
@@ -57,7 +61,7 @@ jobs:
./mvnw -B dependency-check:purge dependency-check:check
-DnvdApiKey=$NVD_API_KEY -DossIndexUsername=$OSS_INDEX_USERNAME
-DossIndexPassword=$OSS_INDEX_PASSWORD || { echo "
The OWASP dependency check has found security vulnerabilities.
Please use a newer version
of the dependency that does not have vulnerabilities. To see a
report run
- `./mvnw dependency-check:check`
+ './mvnw dependency-check:check'
If the analysis has false positives,
they can be suppressed by adding entries to
owasp-dependency-check-suppressions.xml (for more
information, see
https://jeremylong.github.io/DependencyCheck/general/suppression.html).
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
