Skip to content

CI build jobs fail at startup: carabiner-dev/actions/install/ampel-bootstrap is not on the ASF actions allowlist #9044

Closed

Description

@kz930

What happened?

Every build job (amber, amber-integration, platform, platform-integration) fails before its first step with:

The action carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe is not allowed in apache/texera because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ...

No workflow in the repo names this action. It comes in through sbt/setup-sbt@8feba82 (v1.5.7), pinned since #7710. That version's "Verify the sbt distribution signature" step uses carabiner-dev/actions/ampel/verify@36a39ef (v1.2.6), which in turn uses install/ampel-bootstrap@619a474. The step is marked monitor-only (fail: false), but GitHub resolves every referenced action when the job starts, so the allowlist check fails the job before anything runs.

The pin has not changed since August, so the allowlist must have changed on the ASF side. Runs that skip the build jobs still pass (the merge-group run for #9020 did), which hides the problem on docs-only or frontend-only changes.

It also removes PRs from the merge queue. #8346 and #8366 were taken out on 2026-10-19 for this reason.

How to reproduce?

  1. Open or update any PR that touches Scala code, or push to main.
  2. The build jobs fail during "Prepare all required actions" with the error above. For example, main's push run 39342961803, and the merge-group run 39337014116 for feat(visualization): export the tables, ranges and embedded documents #8366.

Version/Branch

1.4.0-incubating-SNAPSHOT (main)

Commit Hash (Optional)

a46ddc6

What browsers are you seeing the problem on?

No response

Relevant log output

##[error]The action carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe is not allowed in apache/texera because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: ...

Activity

  1. added theissue type on Oct 20, 2026
  2. kz930 commented on Oct 22, 2026

    @kz930
    ContributorAuthor

    Has already be raised by Xinyuan and fixed in #9064

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions