Skip to content

[SPARK-56126][INFRA] Sync docker-related GitHub Actions versions to the ASF approved patterns#54935

Closed
dongjoon-hyun wants to merge 1 commit intoapache:masterfrom
dongjoon-hyun:SPARK-56126
Closed

[SPARK-56126][INFRA] Sync docker-related GitHub Actions versions to the ASF approved patterns#54935
dongjoon-hyun wants to merge 1 commit intoapache:masterfrom
dongjoon-hyun:SPARK-56126

Conversation

@dongjoon-hyun
Copy link
Copy Markdown
Member

@dongjoon-hyun dongjoon-hyun commented Mar 21, 2026

What changes were proposed in this pull request?

This PR aims to sync docker-related GitHub Actions versions to the ASF approved patterns.

Why are the changes needed?

Currently, the CI is blocked by the ASF check because of the recent change.

The actions docker/login-action@v3, docker/setup-qemu-action@v3, docker/setup-buildx-action@v3, and docker/build-push-action@v6 are not allowed in apache/spark because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns:

Screenshot 2026-03-20 at 20 32 56

This is due to the following change.

As of now, the updated patterns are the following.

- docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
- docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
- docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051
- docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
- docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Manually check like the following because the updated CI should be triggered manually.

$ git grep 'uses: docker' | sort | uniq -c
   5 .github/workflows/build_and_test.yml:        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
   1 .github/workflows/build_and_test.yml:        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
   1 .github/workflows/build_and_test.yml:        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
   1 .github/workflows/build_and_test.yml:        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
  16 .github/workflows/build_infra_images_cache.yml:        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Code (claude-opus-4-6)

@dongjoon-hyun
Copy link
Copy Markdown
Member Author

Thank you, @pan3793 .

@dongjoon-hyun
Copy link
Copy Markdown
Member Author

Merged to master.

@dongjoon-hyun dongjoon-hyun deleted the SPARK-56126 branch March 21, 2026 04:41
terana pushed a commit to terana/spark that referenced this pull request Mar 23, 2026
… the ASF approved patterns

### What changes were proposed in this pull request?

This PR aims to sync `docker`-related GitHub Actions versions to the ASF approved patterns.

### Why are the changes needed?

Currently, the CI is blocked by the ASF check because of the recent change.
- https://github.com/apache/spark/actions/workflows/build_main.yml
  - https://github.com/apache/spark/actions/runs/23362042477
- https://github.com/apache/spark/actions/workflows/build_non_ansi.yml
  - https://github.com/apache/spark/actions/runs/23369253367

> The actions docker/login-actionv3, docker/setup-qemu-actionv3, docker/setup-buildx-actionv3, and docker/build-push-actionv6 are not allowed in apache/spark because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns:

<img width="905" height="380" alt="Screenshot 2026-03-20 at 20 32 56" src="https://github.com/user-attachments/assets/2582b68a-6303-44ab-b961-d9b753072f1e" />

This is due to the following change.
- apache/infrastructure-actions#547

As of now, the updated patterns are the following.

- https://github.com/apache/infrastructure-actions/blob/07f5f9d2b05fe0ec9886e3ef0a9d79797817f0cb/approved_patterns.yml#L100-L104
```
- docker/build-push-action10e90e3645eae34f1e60eeb005ba3a3d33f178e8
- docker/login-actionc94ce9fb468520275223c153574b00df6fe4bcc9
- docker/metadata-actionc299e40c65443455700f0fdfc63efafe5b349051
- docker/setup-buildx-action8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
- docker/setup-qemu-action29109295f81e9208d7d86ff1c6c12d2833863392
```

### Does this PR introduce _any_ user-facing change?

No.

### How was this patch tested?

Manually check like the following because the updated CI should be triggered manually.

```
$ git grep 'uses: docker' | sort | uniq -c
   5 .github/workflows/build_and_test.yml:        uses: docker/build-push-action10e90e3645eae34f1e60eeb005ba3a3d33f178e8
   1 .github/workflows/build_and_test.yml:        uses: docker/login-actionc94ce9fb468520275223c153574b00df6fe4bcc9
   1 .github/workflows/build_and_test.yml:        uses: docker/setup-buildx-action8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
   1 .github/workflows/build_and_test.yml:        uses: docker/setup-qemu-action29109295f81e9208d7d86ff1c6c12d2833863392
  16 .github/workflows/build_infra_images_cache.yml:        uses: docker/build-push-action10e90e3645eae34f1e60eeb005ba3a3d33f178e8
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/login-actionc94ce9fb468520275223c153574b00df6fe4bcc9
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/setup-buildx-action8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
   1 .github/workflows/build_infra_images_cache.yml:        uses: docker/setup-qemu-action29109295f81e9208d7d86ff1c6c12d2833863392
```

### Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Code (claude-opus-4-6)

Closes apache#54935 from dongjoon-hyun/SPARK-56126.

Authored-by: Dongjoon Hyun <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants