From d201c6feb7c0a0055ec7ad76e124a85539e54636 Mon Sep 17 00:00:00 2001 From: Tobias Kaymak Date: Thu, 3 Sep 2026 07:06:34 +0000 Subject: [PATCH] [CI] Re-pin gradle/actions/setup-gradle to allowlisted v6.3.0 The ASF GitHub Actions allowlist is an exact SHA list in apache/infrastructure-actions. The v6.1.0 SHA that Beam pinned expired on 2026-09-03 and was removed in commit 63206b15a5, so every workflow that uses setup-environment-action fails in Setup environment with "is not allowed in apache/beam". v6.3.0 is allowlisted without an expiry date and keeps the cache-disabled and validate-wrappers inputs. --- .github/actions/setup-environment-action/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/setup-environment-action/action.yml b/.github/actions/setup-environment-action/action.yml index b37d30953ed9..f25f9ed7bfc2 100644 --- a/.github/actions/setup-environment-action/action.yml +++ b/.github/actions/setup-environment-action/action.yml @@ -94,7 +94,7 @@ runs: distribution: 'temurin' java-version: ${{ inputs.java-version == 'default' && '21' || inputs.java-version }} - name: Setup Gradle - uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-disabled: ${{ inputs.disable-cache }} validate-wrappers: false