Skip to content

[Backport 2.19-dev] Pin async-query-core publish actions to commit SHAs - #5624

Merged
ahkcs merged 1 commit into
opensearch-project:2.19-devfrom
ahkcs:fix/pin-async-query-publish-actions-2.19-dev
Jul 15, 2026
Merged

[Backport 2.19-dev] Pin async-query-core publish actions to commit SHAs#5624
ahkcs merged 1 commit into
opensearch-project:2.19-devfrom
ahkcs:fix/pin-async-query-publish-actions-2.19-dev

Conversation

@ahkcs

@ahkcs ahkcs commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

Description

Pins all actions in publish-async-query-core.yml to full commit SHAs, matching the versions pinned on main by #5464.

The 2.19-dev pinning backport #5617 was based on #5573, whose source branch did not contain this workflow, so these five action references remained unpinned. This caused the July 10 async-query-core publication to fail during action preparation: https://github.com/opensearch-project/sql/actions/runs/29123519082

Testing

  • git diff --check
  • Verified every uses: entry in the workflow is pinned to a full commit SHA

Related: #5464, #5573, #5617

@github-actions

github-actions Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

PR Reviewer Guide 🔍

(Review updated until commit 8d3b0f4)

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
✅ No TODO sections
🔀 No multiple PR themes
⚡ No major issues detected

Signed-off-by: Kai Huang <ahkcs@amazon.com>
@ahkcs
ahkcs force-pushed the fix/pin-async-query-publish-actions-2.19-dev branch from 3b7e532 to 8d3b0f4 Compare July 14, 2026 21:11
@github-actions

Copy link
Copy Markdown
Contributor

Persistent review updated to latest commit 8d3b0f4

@noCharger noCharger left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While scanning 2.19-dev, delete_backport_branch.yml still has one unpinned action:

uses: SvanBoxel/delete-merged-branch@main

Branch ref will hit the same "must be pinned to a full-length commit SHA" rejection. Worth a follow-up PR to pin it. Everything else on 2.19-dev is SHA-pinned.

@ahkcs
ahkcs merged commit 6f7eb64 into opensearch-project:2.19-dev Jul 15, 2026
46 of 47 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants