From 41763c859aba508ae7a69682354691973c485cd3 Mon Sep 17 00:00:00 2001 From: laughingman7743 Date: Mon, 30 Mar 2026 00:34:56 +0900 Subject: [PATCH 1/5] Update GitHub Actions to latest versions and fix pinact workflow Update all actions to latest major versions. Also add head_ref checkout to pinact workflow for proper branch push support. Hashes will be pinned automatically by pinact-action. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/docs-trigger.yaml | 2 +- .github/workflows/docs.yaml | 10 +++++----- .github/workflows/pinact.yaml | 5 +++-- .github/workflows/release.yaml | 8 ++++---- .github/workflows/test-suite.yaml | 8 ++++---- 5 files changed, 17 insertions(+), 16 deletions(-) diff --git a/.github/workflows/docs-trigger.yaml b/.github/workflows/docs-trigger.yaml index 6c016ba3..f78d5e86 100644 --- a/.github/workflows/docs-trigger.yaml +++ b/.github/workflows/docs-trigger.yaml @@ -11,7 +11,7 @@ jobs: trigger-docs: runs-on: ubuntu-latest steps: - - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + - uses: actions/github-script@v8 with: script: | await github.rest.actions.createWorkflowDispatch({ diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index 11faa4ce..9da42cee 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -21,12 +21,12 @@ jobs: PYTHON_VERSION: '3.12' steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@v6 with: fetch-depth: 0 # Fetch all history for sphinx-multiversion - name: Setup Pages - uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0 - - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2 + uses: actions/configure-pages@v6 + - uses: astral-sh/setup-uv@v7 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -34,7 +34,7 @@ jobs: uv sync --group dev make docs - name: Upload artifact - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1 + uses: actions/upload-pages-artifact@v4 with: path: './docs/_build/html' @@ -47,4 +47,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 + uses: actions/deploy-pages@v5 diff --git a/.github/workflows/pinact.yaml b/.github/workflows/pinact.yaml index 8072ee89..3fe4cbc0 100644 --- a/.github/workflows/pinact.yaml +++ b/.github/workflows/pinact.yaml @@ -13,10 +13,11 @@ jobs: pinact: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@v6 with: + ref: ${{ github.head_ref }} persist-credentials: false - - uses: suzuki-shunsuke/pinact-action@cf51507d80d4d6522a07348e3d58790290eaf0b6 # v2.0.0 + - uses: suzuki-shunsuke/pinact-action@v2 with: app_id: ${{ vars.BOT_APP_ID }} app_private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 6597866d..0e9203d8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -18,9 +18,9 @@ jobs: steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@v6 - - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2 + - uses: astral-sh/setup-uv@v7 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -29,9 +29,9 @@ jobs: run: | uv build -v - name: Publish release distributions to PyPI - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@v1 - name: Release - uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 + uses: softprops/action-gh-release@v2 with: files: | dist/*.whl diff --git a/.github/workflows/test-suite.yaml b/.github/workflows/test-suite.yaml index cd80c3da..282185cb 100644 --- a/.github/workflows/test-suite.yaml +++ b/.github/workflows/test-suite.yaml @@ -26,16 +26,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@v6 - - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2 + - uses: astral-sh/setup-uv@v7 with: python-version: ${{ matrix.python-version }} enable-cache: true # TODO: In the case of Python 3.13+, the following error occurs, so install Python using setup-python. # ../meson.build:44:2: ERROR: Problem encountered: Cannot compile # `Python.h`. Perhaps you need to install python-dev|python-devel - - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 + - uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} if: matrix.python-version == '3.13' || matrix.python-version == '3.14' @@ -43,7 +43,7 @@ jobs: make tool - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1 + uses: aws-actions/configure-aws-credentials@v6 with: role-to-assume: arn:aws:iam::676287850544:role/github-actions-oidc-pyathena role-session-name: PyAthenaTestSession From 9d40be22cf8885cd1d44ae7686a0ab86e7bc72c4 Mon Sep 17 00:00:00 2001 From: laughingman7743 Date: Mon, 30 Mar 2026 00:36:11 +0900 Subject: [PATCH 2/5] Fix pinact-action version tag (v2 does not exist, use v2.0.0) Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/pinact.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pinact.yaml b/.github/workflows/pinact.yaml index 3fe4cbc0..c7c9c648 100644 --- a/.github/workflows/pinact.yaml +++ b/.github/workflows/pinact.yaml @@ -17,7 +17,7 @@ jobs: with: ref: ${{ github.head_ref }} persist-credentials: false - - uses: suzuki-shunsuke/pinact-action@v2 + - uses: suzuki-shunsuke/pinact-action@v2.0.0 with: app_id: ${{ vars.BOT_APP_ID }} app_private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }} From ab4c38ff31af1d18a37f7a11d00e2d332666e245 Mon Sep 17 00:00:00 2001 From: "pyathena-bot[bot]" <271984693+pyathena-bot[bot]@users.noreply.github.com> Date: Sun, 29 Mar 2026 15:36:42 +0000 Subject: [PATCH 3/5] chore(pinact): pin GitHub Actions --- .github/workflows/docs-trigger.yaml | 2 +- .github/workflows/docs.yaml | 10 +++++----- .github/workflows/pinact.yaml | 4 ++-- .github/workflows/release.yaml | 6 +++--- .github/workflows/test-suite.yaml | 8 ++++---- 5 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/docs-trigger.yaml b/.github/workflows/docs-trigger.yaml index f78d5e86..6bd3ca82 100644 --- a/.github/workflows/docs-trigger.yaml +++ b/.github/workflows/docs-trigger.yaml @@ -11,7 +11,7 @@ jobs: trigger-docs: runs-on: ubuntu-latest steps: - - uses: actions/github-script@v8 + - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: | await github.rest.actions.createWorkflowDispatch({ diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index 9da42cee..271b1588 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -21,12 +21,12 @@ jobs: PYTHON_VERSION: '3.12' steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # Fetch all history for sphinx-multiversion - name: Setup Pages - uses: actions/configure-pages@v6 - - uses: astral-sh/setup-uv@v7 + uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0 + - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -34,7 +34,7 @@ jobs: uv sync --group dev make docs - name: Upload artifact - uses: actions/upload-pages-artifact@v4 + uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0 with: path: './docs/_build/html' @@ -47,4 +47,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5 + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 diff --git a/.github/workflows/pinact.yaml b/.github/workflows/pinact.yaml index c7c9c648..179d9502 100644 --- a/.github/workflows/pinact.yaml +++ b/.github/workflows/pinact.yaml @@ -13,11 +13,11 @@ jobs: pinact: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.head_ref }} persist-credentials: false - - uses: suzuki-shunsuke/pinact-action@v2.0.0 + - uses: suzuki-shunsuke/pinact-action@cf51507d80d4d6522a07348e3d58790290eaf0b6 # v2.0.0 with: app_id: ${{ vars.BOT_APP_ID }} app_private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0e9203d8..a1ded0b9 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -18,9 +18,9 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: astral-sh/setup-uv@v7 + - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -31,7 +31,7 @@ jobs: - name: Publish release distributions to PyPI uses: pypa/gh-action-pypi-publish@v1 - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 with: files: | dist/*.whl diff --git a/.github/workflows/test-suite.yaml b/.github/workflows/test-suite.yaml index 282185cb..d31792e8 100644 --- a/.github/workflows/test-suite.yaml +++ b/.github/workflows/test-suite.yaml @@ -26,16 +26,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: astral-sh/setup-uv@v7 + - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 with: python-version: ${{ matrix.python-version }} enable-cache: true # TODO: In the case of Python 3.13+, the following error occurs, so install Python using setup-python. # ../meson.build:44:2: ERROR: Problem encountered: Cannot compile # `Python.h`. Perhaps you need to install python-dev|python-devel - - uses: actions/setup-python@v6 + - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ matrix.python-version }} if: matrix.python-version == '3.13' || matrix.python-version == '3.14' @@ -43,7 +43,7 @@ jobs: make tool - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0 with: role-to-assume: arn:aws:iam::676287850544:role/github-actions-oidc-pyathena role-session-name: PyAthenaTestSession From 8f3d99e750a8aa32b18675c0c90abc42f9cbe039 Mon Sep 17 00:00:00 2001 From: laughingman7743 Date: Mon, 30 Mar 2026 00:38:33 +0900 Subject: [PATCH 4/5] Fix pypa/gh-action-pypi-publish version (v1 tag does not exist) Use v1.13.0 instead of v1, as this repo only provides full semver tags (no major-only tags). pinact will pin to hash. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a1ded0b9..7ea2af26 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -29,7 +29,7 @@ jobs: run: | uv build -v - name: Publish release distributions to PyPI - uses: pypa/gh-action-pypi-publish@v1 + uses: pypa/gh-action-pypi-publish@v1.13.0 - name: Release uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 with: From 0fc9417289b1b65b47508f52c821d2932ae4fc84 Mon Sep 17 00:00:00 2001 From: "pyathena-bot[bot]" <271984693+pyathena-bot[bot]@users.noreply.github.com> Date: Sun, 29 Mar 2026 15:40:03 +0000 Subject: [PATCH 5/5] chore(pinact): pin GitHub Actions --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 7ea2af26..23da30e8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -29,7 +29,7 @@ jobs: run: | uv build -v - name: Publish release distributions to PyPI - uses: pypa/gh-action-pypi-publish@v1.13.0 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 - name: Release uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 with: