This is an automated email from the ASF dual-hosted git repository.
zeroshade pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-go.git
The following commit(s) were added to refs/heads/main by this push:
new 94d6f3c6c build(deps): bump
apache/infrastructure-actions/allowlist-check from 1.0.0 to 1.0.1 (#2209)
94d6f3c6c is described below
commit 94d6f3c6ce75c8fd9c92ae096dcc0f6e1284c9c0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Oct 19 17:04:48 2026 -0400
build(deps): bump apache/infrastructure-actions/allowlist-check from 1.0.0
to 1.0.1 (#2209)
* build(deps): bump apache/infrastructure-actions/allowlist-check
Bumps
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
from 1.0.0 to 1.0.1.
-
[Commits](https://github.com/apache/infrastructure-actions/compare/61dcea11f19e2bbe1263f14d72235e8da17d3ad0...f1a487181effd0b216892001abdfb524442bb24d)
---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: 1.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
* ci: pin allowlist-check to the allowlist-check/v1.0.1 commit
Dependabot pinned f1a4871, which is the commit behind the save/v1.0.1 tag,
not allowlist-check/v1.0.1 (df54e48). zizmor flagged the mismatch
(ref-version-mismatch).
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matt Topol <[email protected]>
---
.github/workflows/asf-allowlist-check.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 384478999..ec4c7134e 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -39,4 +39,4 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- - uses:
apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
# allowlist-check/v1.0.0
+ - uses:
apache/infrastructure-actions/allowlist-check@df54e48ff76152790f317934c691cfa7fd7a1a46
# allowlist-check/v1.0.1