Repository navigation
Conversation
Nothing can merge into `main` right now. Three CI faults block it, and
each fix needs the others to land first.
```
Before: Scala job -> sbt/setup-sbt v1.5.7 -> nested carabiner action not allowed -> fails at Set up job
frontend job -> ubuntu-26.04 runner -> Playwright 1.59.1 has no Chromium -> fails at install
merge group -> no runner within 45 min -> checks_timed_out, PR leaves the queue
After: Scala job -> sbt/setup-sbt v1.5.12 -> every nested action allowed -> runs
frontend job -> ubuntu-26.04 runner -> Playwright 1.64.1 installs Chromium -> runs
merge group -> waits up to 360 min for runners -> merges
```
- **setup-sbt.** The ASF actions allowlist dropped the nested
`carabiner-dev/actions/install/*` refs that `sbt/setup-sbt` v1.5.7
reaches, so every job that sets up sbt (`amber`, `amber-integration`,
`platform`, `platform-integration`, `Bench`) has died at *Set up job*
since 2026-10-19. This moves all 9 call sites to v1.5.12, whose whole
chain is allowed. The action's inputs did not change.
- **Playwright.** `ubuntu-latest` now resolves to the Ubuntu 26.04
image, where Playwright 1.59.1 refuses to install Chromium ("Playwright
does not support chromium on ubuntu26.04-x64"), so the ubuntu frontend
leg fails before any test runs. This bumps `playwright` to 1.64.1, which
supports 26.04.
- **Merge queue timeout.** The queue ejects an entry whose required
checks have not reported within `check_response_timeout_minutes`, which
is 45. ASF's shared runners are backed up well past that: in the last
merge group, *Validate PR title*, a 2-second job, waited 110 minutes for
a runner. This raises the limit to 360 minutes, as DataFusion did in
apache/datafusion#26293.
`Required Checks` stays red without both version bumps, and no PR gets
through the queue without the higher limit, so all three go in one PR.
Closes apache#9095.
Every changed file parses:
```
python -I -c "import sys, yaml; [yaml.safe_load(open(f)) for f in sys.argv[1:]]" .asf.yaml .github/workflows/benchmarks.yml .github/workflows/build-and-push-images.yml .github/workflows/build.yml .github/workflows/dependency-graph.yml
```
Walking the `uses:` chain under `sbt/setup-sbt@ecad189` (v1.5.12)
reaches `ampel/verify@32587e8`, `install/ampel@d6d91c5`,
`install/download-and-verify@2fec8bd` and
`install/ampel-bootstrap@16009dc`, and all four are in
`apache/infrastructure-actions`' `approved_patterns.yml` as of
2026-10-23. Under v1.5.7, `install/ampel@2fec8bd`,
`install/download-and-verify@16009dc` and
`install/ampel-bootstrap@619a474` are not.
The rest is CI. The labeler applies `ci` for `.github/**`, which runs
every stack that sets up sbt, the frontend legs, and `Bench`. On this
PR's previous head every job passed except the ubuntu frontend leg,
which landed on ubuntu-26.04 and failed at the Playwright install. The
new timeout only shows once this is merged.
Generated-by: Claude Code (Claude Opus 5.5)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Co-authored-by: Ian Maxon <ian@maxons.email>
github-actions
Bot
added
the
dependencies
github-actions
Bot
added
fix
frontend
Contributor
Automated Reviewer SuggestionsBased on the
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## release/v1.2 #9133 +/- ##
===============================================
Coverage 53.47% 53.48%
Complexity 2569 2569
===============================================
Files 1078 1078
Lines 42359 42359
Branches 4563 4563
===============================================
+ Hits 22651 22655 +4
+ Misses 18396 18388 -8
- Partials 1312 1316 +4
*This pull request uses carry forward flags. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changes were proposed in this PR?
Backport of #9100 to
release/v1.2, which it never reached because it had norelease/v1.2label. This branch pins the samesbt/setup-sbtv1.5.7, whose nestedcarabiner-devaction the ASF actions allowlist dropped, so every job here that sets up sbt fails at Set up job, and so does the image build inbuild-and-push-images.yml. The ubuntu frontend leg also needs Playwright 1.64.1 on the Ubuntu 26.04 runners.The cherry-pick conflicted only because
benchmarks.yml,dependency-graph.ymland theplatform-integrationjob inbuild.ymldo not exist on this branch. The 6 call sites that do exist move to v1.5.12, andplaywrightmoves to 1.64.1 as in #9100.Any related issues, documentation, discussions?
Backport of #9100. Originally linked #9095.
How was this PR tested?
yarn install --mode=update-lockfileleavesyarn.lockunchanged, and this PR's own CI runs on the updated workflows.Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (claude-opus-5-5)