Skip to content

[SPARK-56724][INFRA][3.5] Make docker/* GitHub Actions up-to-date#56532

Open
sarutak wants to merge 1 commit into
apache:branch-3.5from
sarutak:update-docker-actions-branch-3.5
Open

[SPARK-56724][INFRA][3.5] Make docker/* GitHub Actions up-to-date#56532
sarutak wants to merge 1 commit into
apache:branch-3.5from
sarutak:update-docker-actions-branch-3.5

Conversation

@sarutak

@sarutak sarutak commented Jun 15, 2026

Copy link
Copy Markdown
Member

What changes were proposed in this pull request?

Update the commit SHAs of the following Docker-related GitHub Actions in branch-3.5 to match the ones registered in the Apache organization's GitHub Actions allowlist:

  • docker/login-action
  • docker/setup-qemu-action
  • docker/setup-buildx-action
  • docker/build-push-action

Why are the changes needed?

The master branch was already updated to the new SHAs, but branch-3.5 still used tag-based references (e.g., @v2) which are not in the allowlist.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

CI should pass with this change.

Was this patch authored or co-authored using generative AI tooling?

Kiro CLI / Claude

This PR upgrades four docker/* GitHub Actions to the latest commit hashes approved by the Apache Software Foundation in infrastructure-actions/approved_patterns.yml:

| Action | Before (tag) | After (tag) |
| --- | --- | --- |
| docker/build-push-action | v3 | bcafcacb16a39f128d818304e6c9c0c18556b85f (v7.1.0) |
| docker/login-action | v2 | 4907a6ddec9925e35a0a9e82d7399ccc52663121 (v4.1.0) |
| docker/setup-buildx-action | v2 | 4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd (v4.0.0) |
| docker/setup-qemu-action | v2 | ce360397dd3f832beb865e1373c09c0e9f86d70a (v4.0.0) |
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants