Skip to content

chore: pin GitHub Actions to SHA commits on master-java8#4713

Merged
k8s-ci-robot merged 1 commit intomaster-java8from
copilot/migrate-master-java8-sha-commits
Apr 29, 2026
Merged

chore: pin GitHub Actions to SHA commits on master-java8#4713
k8s-ci-robot merged 1 commit intomaster-java8from
copilot/migrate-master-java8-sha-commits

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 22, 2026 •
edited
Loading

  • Update .github/workflows/maven.yml to pin actions to SHA commits
  • Update .github/workflows/snapshot.yml to pin actions to SHA commits
  • Update .github/workflows/generate.yml to pin actions to SHA commits
  • Update .github/workflows/generate-crd.yml to pin actions to SHA commits
  • Update .github/workflows/codeql-analysis.yml to pin actions to SHA commits
  • Update .github/workflows/release.yml to pin actions to SHA commits
  • Update .github/dependabot.yml to add github-actions tracking for master-java8

⚠️ Note for reviewers: This PR must be re-targeted to master-java8 before merging (change the base branch from master to master-java8). The diff against master-java8 will show only the 7 .github/ files with SHA pins added.

@k8s-ci-robot k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 22, 2026
@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Apr 22, 2026
@brendandburns
Copy link
Copy Markdown
Contributor

brendandburns commented Apr 22, 2026

@copilot change this PR to target the master-java8 branch.

@brendandburns brendandburns marked this pull request as ready for review April 25, 2026 17:05
@k8s-ci-robot k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 25, 2026
@brendandburns
Copy link
Copy Markdown
Contributor

brendandburns commented Apr 25, 2026

@copilot change this PR to target the master-java8 branch.

Copy link
Copy Markdown
Contributor Author

Copilot AI commented Apr 25, 2026 •
edited
Loading

@copilot change this PR to target the master-java8 branch.

Unfortunately, I'm unable to change the PR base branch programmatically from this environment — the GitHub REST API (api.github.com) is blocked by a DNS monitoring proxy, and the gh CLI GraphQL API returns 403. The Playwright browser tool is also locked.

Could you please change the base branch to master-java8 manually? In the GitHub UI: click Edit next to the PR title → change the Base dropdown from master to master-java8 → click Change base.

Once retargeted, the diff will show only the 7 .github/ files with SHA pins (the current 7-file diff is already correct content — it's just comparing against master instead of master-java8).

@copilot change this PR to target the master-java8 branch.

Same situation as my earlier reply: the GitHub REST API is blocked by a DNS monitoring proxy in this environment, so I can't change the base branch programmatically. Please change it manually via the Edit button in the GitHub UI: Base → master-java8.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/
    • Triggering command: /usr/bin/curl curl -s -o /dev/null -w %{http_code}\n --max-time 5 REDACTED (http block)
  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh gh pr view 4713 --json baseRefName,headRefName,state (http block)
    • Triggering command: /usr/bin/gh gh pr edit 4713 --base master-java8 (http block)
  • https://api.github.com/repos/kubernetes-client/java/pulls/4713
    • Triggering command: /usr/bin/curl curl --silent --max-time 10 -o /dev/null -w %{http_code} -X PATCH REDACTED -H Authorization: token ****** -H Content-Type: application/json -d {"base":"master-java8"} (http block)
    • Triggering command: /usr/bin/curl curl --silent --max-time 10 -w \nHTTP_STATUS:%{http_code} -X PATCH REDACTED -H Authorization: ****** -H Accept: application/vnd.github+json -H X-GitHub-Api-Version: 2022-11-28 -H Content-Type: application/json -d {"base":"master-java8"} (http block)
    • Triggering command: /usr/bin/gh gh api --method PATCH /repos/kubernetes-client/java/pulls/4713 -f base=master-java8 (http block)
  • https://api.github.com/zen
    • Triggering command: /usr/bin/curl curl -s -o /dev/null -w %{http_code}\n --max-time 5 REDACTED -H Authorization: ****** (http block)

If you need me to access, download, or install something from one of these locations, you can either:

@brendandburns brendandburns changed the base branch from master to master-java8 April 28, 2026 16:22
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Apr 28, 2026
@brendandburns
Copy link
Copy Markdown
Contributor

brendandburns commented Apr 28, 2026

@copilot I changed the base for this PR. There's lots of extra commits, can you remove them all except for the SHA changes?

@k8s-ci-robot k8s-ci-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Apr 28, 2026
Copilot AI force-pushed the copilot/migrate-master-java8-sha-commits branch from dae0449 to 5294464 Compare April 28, 2026 16:29
Copy link
Copy Markdown
Contributor Author

Copilot AI commented Apr 28, 2026

@copilot I changed the base for this PR. There's lots of extra commits, can you remove them all except for the SHA changes?

Done. The branch has been force-pushed and now contains only 1 commit (529446406) on top of master-java8 with exactly the 7 .github/ files changed — only the SHA pin updates.

@k8s-ci-robot k8s-ci-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Apr 28, 2026
@k8s-ci-robot k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Apr 28, 2026
@brendandburns
Copy link
Copy Markdown
Contributor

brendandburns commented Apr 29, 2026

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 29, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented Apr 29, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, Copilot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 29, 2026
@k8s-ci-robot k8s-ci-robot merged commit 5e63b5f into master-java8 Apr 29, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@brendandburns brendandburns Awaiting requested review from brendandburns

@yue9944882 yue9944882 Awaiting requested review from yue9944882

Assignees

@brendandburns brendandburns

Copilot code review Copilot

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@brendandburns @k8s-ci-robot