Skip to content

Comments

Allow mlugg/setup-zig for all the versions#223

Closed
tisonkun wants to merge 1 commit intoapache:mainfrom
tisonkun:main
Closed

Allow mlugg/setup-zig for all the versions#223
tisonkun wants to merge 1 commit intoapache:mainfrom
tisonkun:main

Conversation

@tisonkun
Copy link
Member

Request for adding a new GitHub Action to the allow list

Overview

mlugg/setup-zig is the de-facto official action to set up Zig. The owner is Zig Software Foundation's member.

Name of action: mlugg/setup-zig

URL of action: https://github.com/mlugg/setup-zig

Version to pin to (hash only): I use * follow setup-php / setup-dlang and so on.

Permissions

Default

Related Actions

No

Checklist

You should be able to check most of these boxes for an action to be considered for review.
Please check all boxes that currently apply:

  • The action is listed in the GitHub Actions Marketplace
  • The action is not already on the list of approved actions
  • The action has a sufficient number of contributors or has contributors within the ASF community
  • The action has a clearly defined license
  • The action is actively developed or maintained
  • The action has CI/unit tests configured

@assignUser
Copy link
Member

Sorry we will not accept new wild card entries. The existing ones will be removed soon, as announced by infra a few months ago.

New versions of the action should automatically be picked up by dependabot. Though we might be a bit lagging on approving those atm, so if you need an new version urgently feel free to open a PR for it explicitly.

@assignUser assignUser closed this Jul 26, 2025
@tisonkun
Copy link
Member Author

@assignUser Since the approved commit changes over time, does it mean that ASF projects should update the hash over time?

See https://github.com/apache/opendal/blob/8de30cc764c3724db33907ca17e02648530061ed/.github/workflows/ci_bindings_zig.yml#L48

We pin a commit hash but one day it gets unapproved.

@assignUser
Copy link
Member

@Tison We had a limit of 5 dependabot PRs which hid the update to this action, sorry. The latest release was added in #233 and can now be used, the old version will also work for a while but will be removed automatically in October.

@tisonkun
Copy link
Member Author

Thanks for your update. That makes sense :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants