This is an automated email from the ASF dual-hosted git repository.

zeroshade pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-go.git


The following commit(s) were added to refs/heads/main by this push:
     new 94d6f3c6c build(deps): bump 
apache/infrastructure-actions/allowlist-check from 1.0.0 to 1.0.1 (#2209)
94d6f3c6c is described below

commit 94d6f3c6ce75c8fd9c92ae096dcc0f6e1284c9c0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Oct 19 17:04:48 2026 -0400

    build(deps): bump apache/infrastructure-actions/allowlist-check from 1.0.0 
to 1.0.1 (#2209)
    
    * build(deps): bump apache/infrastructure-actions/allowlist-check
    
    Bumps 
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
 from 1.0.0 to 1.0.1.
    - 
[Commits](https://github.com/apache/infrastructure-actions/compare/61dcea11f19e2bbe1263f14d72235e8da17d3ad0...f1a487181effd0b216892001abdfb524442bb24d)
    
    ---
    updated-dependencies:
    - dependency-name: apache/infrastructure-actions/allowlist-check
      dependency-version: 1.0.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * ci: pin allowlist-check to the allowlist-check/v1.0.1 commit
    
    Dependabot pinned f1a4871, which is the commit behind the save/v1.0.1 tag,
    not allowlist-check/v1.0.1 (df54e48). zizmor flagged the mismatch
    (ref-version-mismatch).
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Matt Topol <[email protected]>
---
 .github/workflows/asf-allowlist-check.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/asf-allowlist-check.yml 
b/.github/workflows/asf-allowlist-check.yml
index 384478999..ec4c7134e 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -39,4 +39,4 @@ jobs:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         persist-credentials: false
-    - uses: 
apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0
  # allowlist-check/v1.0.0
+    - uses: 
apache/infrastructure-actions/allowlist-check@df54e48ff76152790f317934c691cfa7fd7a1a46
  # allowlist-check/v1.0.1

Reply via email to