pan3793 opened a new pull request, #7564: URL: https://github.com/apache/kyuubi/pull/7564
### Why are the changes needed? To keep our CI on the latest GitHub Actions versions, per the [apache/infrastructure-actions allowlist](https://github.com/apache/infrastructure-actions/blob/main/actions.yml). - For the GitHub-maintained actions (`actions/*`, `github/*`) and allowlisted `*` actions, the allowlist permits any version, so this PR tracks the latest **major** version tags (`@vN`) rather than specific patches. - For hash-pinned allowlisted third-party actions, the convention is to pin to the allowlisted commit hash with a `# vX.Y.Z` comment. The Docker actions used here were already at the latest allowlisted hashes, so they are unchanged. Changes (patch tag -> latest major): - `actions/checkout` `v7.0.0` -> `v7` - `actions/setup-java` `v5.4.0` -> `v5` - `actions/setup-python` `v6.3.0` -> `v6` - `actions/cache` `v6.1.0` -> `v6` (and `v4` -> `v6` in `.github/actions/setup-maven/action.yaml`) - `actions/stale` `v10.3.0` -> `v10` ### How was this patch tested? YAML-only change; no unit tests apply. Verified by: - Cross-checked each action's target against the ASF allowlist and the latest release tag on GitHub. - Ran `./dev/reformat` (no source changes; Spotless does not manage YAML). - The `ASF Allowlist Check` workflow in this repo enforces the allowlist on this PR. ### Was this patch authored or co-authored using generative AI tooling? Assisted-by: codemaker with glm-5.2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
