Skip to content

[SPARK-56775] Update docker/* GitHub Actions to ASF-approved commit hashes#110

Closed
dongjoon-hyun wants to merge 1 commit into
apache:masterfrom
dongjoon-hyun:dongjoon/trusting-sinoussi-78ed6b
Closed

[SPARK-56775] Update docker/* GitHub Actions to ASF-approved commit hashes#110
dongjoon-hyun wants to merge 1 commit into
apache:masterfrom
dongjoon-hyun:dongjoon/trusting-sinoussi-78ed6b

Conversation

@dongjoon-hyun

@dongjoon-hyun dongjoon-hyun commented May 7, 2026

Copy link
Copy Markdown
Member

What changes were proposed in this pull request?

This PR updates all docker/* GitHub Actions in .github/workflows/main.yml from major version tags to ASF-approved commit hashes registered in apache/infrastructure-actions/approved_patterns.yml.

Action Before After (latest approved)
docker/setup-qemu-action @v3 @ce360397dd3f832beb865e1373c09c0e9f86d70a (v4.0.0)
docker/setup-buildx-action @v2 @4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd (v4.0.0)
docker/build-push-action (×3) @v3 @bcafcacb16a39f128d818304e6c9c0c18556b85f (v7.1.0)
docker/login-action (×2) @v2 @4907a6ddec9925e35a0a9e82d7399ccc52663121 (v4.1.0)

Why are the changes needed?

ASF Infrastructure policy requires GitHub Actions to be pinned to commit hashes listed in approved_patterns.yml. The current docker/* references use legacy major version tags (@v2/@v3) that are out of compliance and several major versions behind upstream.

Currently, CI is broken.

The actions docker/setup-qemu-action@v3, docker/setup-buildx-action@v2, docker/build-push-action@v3, and docker/login-action@v2 are not allowed in apache/spark-docker because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns:

For other Apache Spark repositories, we updated already but spark-docker seems to be outdated.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Pass the CIs.

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Opus 4.7 (1M context)

@dongjoon-hyun dongjoon-hyun changed the title [SPARK-56775] Update docker/* GitHub Actions to ASF-approved commit hashes [SPARK-56775] Update docker/* GitHub Actions to ASF-approved commit hashes May 7, 2026
@dongjoon-hyun

Copy link
Copy Markdown
Member Author

Could you review this PR, too, @peter-toth ? spark-docker repo seems to be outdated for a while.

@dongjoon-hyun

Copy link
Copy Markdown
Member Author

Thank you, @viirya !

@dongjoon-hyun

Copy link
Copy Markdown
Member Author

Thank you, @peter-toth , too.

@dongjoon-hyun dongjoon-hyun deleted the dongjoon/trusting-sinoussi-78ed6b branch May 7, 2026 17:10
@dongjoon-hyun

Copy link
Copy Markdown
Member Author

Merged to master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants