pan3793 opened a new pull request, #7565: URL: https://github.com/apache/kyuubi/pull/7565
Backport of the master bump in #7564 to `branch-1.11`. ### Why are the changes needed? Keep CI on `branch-1.11` on the latest GitHub Actions versions, per the [apache/infrastructure-actions allowlist](https://github.com/apache/infrastructure-actions/blob/main/actions.yml). The missing dependabot bump chain on master (`#7464`–`#7548`) plus the major-tag normalization in `#7564` are reimplemented here as a **single cumulative change** rather than cherry-picked, because the intermediate bumps touch overlapping version lines and won't apply cleanly onto `branch-1.11`'s older baseline. Only action **version references** are updated; `branch-1.11`'s workflow structure is preserved. Changes (`branch-1.11` baseline -> latest): - `actions/checkout` `v4` -> `v7` - `actions/setup-java` `v4` -> `v5` - `actions/setup-python` `v5` -> `v6` - `actions/setup-node` `v4` -> `v6` - `actions/stale` `v9` -> `v10` - `actions/upload-artifact` `v4` -> `v7` - `actions/dependency-review-action` `v4` -> `v5` - `actions/first-interaction` `v1` -> `v3` - `actions/labeler` `v5` -> `v6` (`.github/labeler.yml` is already v6-schema, so no config migration needed) - `codecov/codecov-action` `v3` -> `v7` - `actions/cache` `v4` -> `v6` (in `.github/actions/setup-maven`; `@v6` elsewhere unchanged) - `docker/build-push-action` -> `53b7df96...` (# v7.3.0) - `docker/setup-buildx-action` -> `bb05f3f5...` (# v4.2.0) - `docker/setup-qemu-action` -> `96fe6ef7...` (# v4.2.0) - `docker/login-action` -> `af1e73f9...` (# v4.4.0) `github/super-linter/slim@v7` was already latest; unchanged. ### How was this patch tested? YAML-only change; no unit tests apply. Verified by: - The resulting `uses:` set on `branch-1.11` now matches `master` exactly. - `./dev/reformat` was run; it only failed on the Spotless `black` step (a local pyenv-shim issue, exit 127) and modified no files — Spotless does not manage YAML, and the working tree contains only the `.github` version bumps. - All references here are at the latest allowlisted versions / major tags, consistent with what the `ASF Allowlist Check` workflow enforces on `master`. ### Was this patch authored or co-authored using generative AI tooling? Assisted-by: codemaker with glm-5.2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
