chore(ci): pin android-emulator-runner to v2.38.0 SHA - #3927
Merged
Conversation
ASF projects can only use GitHub Actions that appear on the ASF infrastructure allowlist. apache/infrastructure-actions#1100 replaces the `reactivecircus/android-emulator-runner@*` wildcard entry with the v2.38.0 commit SHA, keeping the floating `v2` tag allowlisted only until 2026-08-25. Pin the action to `a421e43855164a8197daf9d8d40fe71c6996bb0d` (v2.38.0) so the Android instrumented test job keeps running once the wildcard is gone. Assisted-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
ppkarwasz
added a commit
to ppkarwasz/infrastructure-actions
that referenced
this pull request
Aug 10, 2026
Code search across the apache org finds no repo referencing either SHA, so the only transitional ref still needed is the floating v2 tag used by apache/fory (apache/fory#3927). Assisted-By: Claude Opus 5 (Claude Code)
Member
Author
|
Wow, that was fast! |
ppkarwasz
added a commit
to ppkarwasz/infrastructure-actions
that referenced
this pull request
Aug 10, 2026
apache/fory#3927 has merged, so no apache repo references the floating v2 tag any more. The v2.38.0 SHA is now the only allowed ref. Assisted-By: Claude Opus 5 (Claude Code)
ppkarwasz
added a commit
to apache/infrastructure-actions
that referenced
this pull request
Aug 11, 2026
* Pin reactivecircus/android-emulator-runner Replace the wildcard with the v2.38.0 SHA as the permanent, Dependabot-maintained pin. The v2.37.0 and v2.34.0 SHAs and the floating v2 tag (still used by 14 apache repos) are whitelisted until 2026-08-25 to give those repos time to migrate. Generated-by: Claude Fable 5 (Claude Code) * Extend transitional expiry to 2026-09-09 Refresh the grace period for the v2.37.0 and v2.34.0 SHAs and the floating v2 tag, since the original 2026-08-25 deadline was set before this PR stalled. Assisted-By: Claude Opus 5 (Claude Code) * Drop unused v2.37.0 and v2.34.0 transitional pins Code search across the apache org finds no repo referencing either SHA, so the only transitional ref still needed is the floating v2 tag used by apache/fory (apache/fory#3927). Assisted-By: Claude Opus 5 (Claude Code) * Drop the transitional v2 tag pin apache/fory#3927 has merged, so no apache repo references the floating v2 tag any more. The v2.38.0 SHA is now the only allowed ref. Assisted-By: Claude Opus 5 (Claude Code)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Pin
reactivecircus/android-emulator-runnerin.github/workflows/ci.ymlfrom the floatingv2tag to the v2.38.0 commit SHAa421e43855164a8197daf9d8d40fe71c6996bb0d.Why
Every GitHub Action used by an ASF project must be on the ASF infrastructure allowlist. apache/infrastructure-actions#1100 replaces the
reactivecircus/android-emulator-runner@*wildcard entry with the v2.38.0 SHA as the permanent, Dependabot-maintained pin. The floatingv2tag stays allowlisted only as a temporary grace entry until 2026-08-25, after whichremove_expired.ymldrops it automatically.That PR lists
apache/fory(.github/workflows/ci.yml) among the repos still using the floatingv2tag and therefore needing migration. Without this change, the Android instrumented test job would start failing once the temporary allowlist entry expires.v2.38.0 is the current latest release, so this is a pin, not a downgrade. CI itself is the test.