diff --git a/.github/workflows/allowlist-check.yml b/.github/workflows/allowlist-check.yml new file mode 100644 index 0000000000..7bd69829fa --- /dev/null +++ b/.github/workflows/allowlist-check.yml @@ -0,0 +1,41 @@ +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. + +--- +name: "ASF Allowlist Check" + +on: + workflow_dispatch: + pull_request: + paths: + - ".github/**" + push: + # Always run on every commit on the main branch in case of expired allows + branches: + - main + +permissions: + contents: read + +jobs: + asf-allowlist-check: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + - uses: apache/infrastructure-actions/allowlist-check@main diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index a2507bc46b..ed68844836 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -53,7 +53,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Install Protoc uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 @@ -134,9 +134,9 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 with: - # FIXME: temporary workaround, see: https://github.com/Swatinem/rust-cache/issues/341 + # FIXME: temporary workaround, see: https://github.com/swatinem/rust-cache/issues/341 cache-bin: ${{ matrix.os != 'macos-latest' }} workspaces: | python -> target @@ -186,7 +186,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - run: rm LICENSE.txt - name: Download LICENSE.txt @@ -231,7 +231,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - run: rm LICENSE.txt - name: Download LICENSE.txt @@ -276,7 +276,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - run: rm LICENSE.txt - name: Download LICENSE.txt diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml index 1a816243f3..ef4c4412e7 100644 --- a/.github/workflows/dependencies.yml +++ b/.github/workflows/dependencies.yml @@ -51,7 +51,7 @@ jobs: uses: ./.github/actions/setup-macos-builder with: rust-version: stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Check dependencies run: | cd dev/msrvcheck @@ -68,7 +68,7 @@ jobs: uses: ./.github/actions/setup-macos-builder with: rust-version: stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Verify python/Cargo.lock is in sync with manifests run: | cd python diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 18bef7e7da..3d35d2f204 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -29,7 +29,7 @@ on: - "dev/build-ballista-docker.sh" - ".github/workflows/docker.yml" push: - branches: ["main"] + branches: [ "main" ] paths: - "ballista/**" - "ballista-cli/**" @@ -64,7 +64,7 @@ jobs: rustup update stable rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run script run: | git config --global --add safe.directory /__w/datafusion-ballista/datafusion-ballista diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index c2679ed8dd..47ced05470 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -68,7 +68,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-macos-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: cargo check run: | # Adding `--locked` here to assert that the `Cargo.lock` file is up to @@ -88,7 +88,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run tests run: | export PATH=$PATH:$HOME/d/protoc/bin @@ -105,7 +105,7 @@ jobs: - uses: actions/checkout@v7.0.0 - name: Setup Rust toolchain uses: ./.github/actions/setup-macos-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run cargo doc run: ci/scripts/rust_docs.sh @@ -121,7 +121,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Try to compile when `--no-default-features` is selected run: | export PATH=$PATH:$HOME/d/protoc/bin @@ -141,7 +141,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run Ballista tests run: | export PATH=$PATH:$HOME/d/protoc/bin @@ -161,7 +161,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-macos-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run tests shell: bash run: | @@ -182,7 +182,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Verify that benchmark queries return expected results run: | cargo test --package ballista-benchmarks --profile release-nonlto --features=ci --locked -- --test-threads=1 @@ -197,7 +197,7 @@ jobs: rustup toolchain install stable rustup default stable rustup component add rustfmt - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run run: ci/scripts/rust_fmt.sh @@ -214,7 +214,7 @@ jobs: fetch-depth: 1 - name: Setup Rust toolchain uses: ./.github/actions/setup-macos-builder - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Run clippy run: ci/scripts/rust_clippy.sh @@ -233,7 +233,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Install cargo-tomlfmt uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2 with: @@ -262,7 +262,7 @@ jobs: run: | rustup toolchain install stable rustup default stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Check vendored DataFusion proto matches pinned crate run: ci/scripts/rust_proto_check.sh diff --git a/.github/workflows/tpch.yml b/.github/workflows/tpch.yml index 8e21eaf4b6..580a125e52 100644 --- a/.github/workflows/tpch.yml +++ b/.github/workflows/tpch.yml @@ -26,7 +26,7 @@ concurrency: on: push: - branches: ["main"] + branches: [ "main" ] paths: - "ballista/**" - "benchmarks/**" @@ -67,7 +67,7 @@ jobs: with: rust-version: stable - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Build Ballista binaries run: | diff --git a/.github/workflows/web-tui.yml b/.github/workflows/web-tui.yml index ba7b17e981..00da126c79 100644 --- a/.github/workflows/web-tui.yml +++ b/.github/workflows/web-tui.yml @@ -61,7 +61,7 @@ jobs: rustup default stable rustup target add wasm32-unknown-unknown - - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 + - uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 #2.9.1 - name: Install Trunk uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2